Top Cyber Security Jobs

Designs, implements, and maintains security architecture and controls for cloud-based federal systems. Engineers SIEM, vulnerability management, STIG compliance, and security automation tooling; develops incident detections and tunes alerts; supports RMF authorization documentation and technical compliance reviews. The role requires experience with NIST 800-53, RMF, cloud environments, security tools, automation technologies, and active TS clearance, with SCI preferred.

Maintains the security and compliance posture of cloud-based federal systems. Responsibilities include continuous monitoring, vulnerability assessment, risk analysis, RMF/JSIG documentation, security control implementation, STIG and CIS compliance, incident investigation, audit log review, and ATO support. The role coordinates with system administrators, security engineers, DevOps, and IT operations teams to remediate vulnerabilities, manage POA&Ms, satisfy authorization requirements, and improve system security over time.

Embeds security throughout the software development lifecycle by performing application, API, mobile, cloud, and software supply-chain security assessments. Conducts threat modeling, architecture reviews, secure code reviews, and vulnerability validation; partners with developers on remediation; improves CI/CD security controls and secure coding standards; and prioritizes application risk based on exploitability, asset criticality, and business impact.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Manages the information security team and oversees security policies, regulatory compliance, incident response, vendor risk, vulnerability management, penetration testing, endpoint protection, patching, and security awareness. The role evaluates and implements security solutions, audits controls, coordinates application security testing, reports program status to leadership, and develops remediation plans for identified risks.

Lead enterprise endpoint security deployments, integrations, upgrades, platform lifecycle management, automation, monitoring, incident response, vulnerability remediation, and operational resilience. Act as a subject matter expert and technical leader, developing scalable endpoint security solutions, guiding architecture, partnering with stakeholders, and supporting strategy, governance, and service ownership across a large enterprise.

Designs and operates identity and access management systems across human, service, workload, and AI identities. Owns lifecycle automation, data-driven access models, time-bound entitlements, identity-as-code, cloud IAM, and AI-powered access reviews. Partners with Engineering, IT, and Compliance to reduce unnecessary access, support audits, and respond to identity-related incidents. Requires strong software engineering skills and hands-on experience with Okta, enterprise SaaS provisioning, AWS IAM, and AI or LLM tooling.

Build and evolve mission-critical backend infrastructure and commercialization tools for Waymo’s autonomous vehicle fleet. Collaborate with Product, Security, and engineering teams to develop secure systems, including vehicle configuration, secure parts transactions, key provisioning, and security infrastructure. Apply backend engineering, microservices, cryptography, PKI, authentication, encryption, and access-control expertise to solve business-critical problems.

Under supervision, evaluate and test security of embedded, cloud, web, and mobile applications by performing sophisticated attacks, vulnerability analysis, and product-level assessments. Collaborate with customers to deliver technical reports with findings and remediation recommendations, contribute to internal R&D on attack techniques, and maintain technical knowledge through training and professional activities.

Performs daily cybersecurity operations, including alert monitoring, incident investigation and response, security ticket management, risk assessments, vulnerability analysis, and remediation tracking. The role develops security procedures and playbooks, researches emerging threats, improves controls and workflows, and supports secure technology adoption. Requires collaboration with technical and business stakeholders, strong documentation and communication skills, and hybrid onsite work at least three days per week.

Summer Cyber Security Intern supporting the Cyber Security team. The role is intended for a rising junior or senior studying Computer Science, BIS, MIS, or a related field. Responsibilities require basic Microsoft Word and Excel skills, typing proficiency, strong communication, organization, and multitasking abilities.

Conducts cybersecurity, technology, operational resilience, and specialized risk assessments of third parties. Supports vendor onboarding, contract reviews, control-gap remediation, regulatory compliance, and third-party risk framework enhancements. Partners with Legal, Sourcing, Technology, Security, Resilience, and business stakeholders while advising on NYSDFS requirements, fourth-party risk, encryption key management, and software supply chain security.

Leads security engineering for critical applications and infrastructure, including security assessments, control design, WAF and bot management, monitoring, threat analysis, investigations, and security solution implementation. The role also drives reliability improvements, troubleshooting, technical projects, mentoring, and proactive research across large-scale distributed systems and cloud environments.

Lead design and implementation of security systems and controls for large-scale AI and HPC cluster infrastructure. Drive incident response, risk assessment, system hardening, governance, audit readiness, and cross-team collaboration to protect hardware, software, and datacenter platforms.

Manages network security projects across cloud, traditional, and Equinix environments; coordinates North American rollouts, prioritizes security tooling, ensures compliance with information security standards, and oversees technology roadmaps, risks, budgets, vendors, and service levels. Leads and develops teams, partners with business and IT leaders, manages strategic projects, and may participate in a 24/7 on-call rotation one week every four weeks.

Administers, monitors, maintains, tests, and improves information security systems and infrastructure. Handles escalated security issues, reviews threats and audit findings, recommends remediation, enforces security best practices, and collaborates with users, vendors, and partners to resolve incidents and support policy compliance.

Provides cybersecurity engineering support for DoD software applications by defining security requirements, integrating security practices into the software development lifecycle, conducting vulnerability and adversarial assessments, recommending mitigations, and validating compliance with security controls. The role works directly with software development teams and requires Linux administration, system hardening, offensive security, vulnerability reporting, and risk management expertise.

Implements regional information security policies, conducts risk assessments, coordinates security controls with global teams and IT, responds to incidents, ensures regulatory compliance, delivers employee security training, and improves organizational security posture. The role requires stakeholder collaboration across EMEA, strong analytical skills, independent work, and current knowledge of security practices.

Own security operations for a regulated on-chain money platform, including 24/7 SOC coverage, PKI and certificate lifecycle management, threat intelligence, blockchain transaction monitoring, incident response, and regulatory evidence. Establish and validate the security model ahead of the 2027 launch while partnering with Platform Reliability on security and availability incidents.

Leads the organization’s information security program, including security operations, incident response, risk management, vulnerability management, security architecture, compliance, business continuity, and security technology oversight. Manages security staff and SOC-provider relationships, develops policies and response plans, coordinates audits and assessments, monitors threats, and leads remediation and incident-handling activities. Provides after-hours and on-call support while driving security awareness and continuous improvement.

Performs ISSO and cybersecurity duties for classified information systems, including RMF documentation, security control assessments, continuous monitoring, audits, risk analysis, configuration management, incident response, and inspection preparation. The role requires an active Top Secret clearance with SCI access and CI polygraph eligibility, IAT Level II certification, Windows hardening knowledge, familiarity with cybersecurity tools and STIGs, occasional travel, after-hours support, and on-site work in Northridge or Tucson.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Lead enterprise security risk assessments, maintain the risk register, prioritize and track remediation, evaluate vendor and architectural risks, define risk methodologies, map controls to NIST and CMMC requirements, support audits, report risk metrics to leadership, and promote risk ownership across the organization.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.