Top Cyber Security Jobs

Lead information and technology risk, control, and governance activities. Oversee audit, business continuity, and compliance efforts; coordinate risk mitigation, metrics, reporting and stakeholder communication; manage and develop staff; prioritize cross-functional decisions and solve complex regulatory and compliance issues.

Manage day-to-day operation of the bank's information security systems: organize, install, support, monitor, validate and escalate alerts; perform security architecture reviews; coordinate security projects; lead monitoring, remediation, training, alert response, and support internal and external audits.

Provide SOC support including system administration for Windows/Unix/Linux, manage IDS/IPS, log management, vulnerability assessment (Tenable, SourceFIRE), produce reports and dashboards, maintain baselines and SOP/CSIRT wiki, and assist cloud security improvements. On-call and documentation duties included.

Lead technology risk and information security efforts across the organization: assess and mitigate IT risks, coordinate with Business, Legal, Compliance, Audit and IT teams, represent Technology Risk in governance forums, develop metrics and reporting, raise awareness, and manage and mentor a professional staff to ensure regulatory and continuity compliance.

Lead SAP security and GRC activities including user and role administration, ECC/ABAP authorizations, SAP Portal/Java security, BI authorizations, SOD analysis, GRC (Access Risk Management/Analysis, EAM), IDM and BOBJ/BODS security. Manage Solution Manager security, provide production support and implementations, and lead a team of SAP security/GRC resources.

Protect the firm from cyber threats by leading threat program initiatives, implementing security capabilities, developing incident response/escalation procedures, performing vulnerability remediation (especially web apps), and applying risk assessment, intrusion detection/prevention, and counter-threat operations.

Design and implement security automations, integrations, and workflows to improve incident response, vulnerability management, and security monitoring. Build integrations between security platforms, develop dashboards and documentation, support security operations through orchestration, apply DevOps practices, and collaborate with global teams to standardize security engineering and best practices.

Lead SAP security and GRC practice: manage user and role administration, ECC/ABAP and portal security, BI/BOBJ and BODS security, SoD and SAP GRC tools, IDM, Solution Manager, and deliver production support and implementations while leading a team.

Design, configure, test, and deploy SAP security and role models. Implement ABAP and Java authorizations, ECC profile generator roles, BI/BPC security, and administer CUA, GRC, Enterprise Portal UME, and BOBJ security.

Lead day-to-day execution of the information security program: oversee SIEM tuning and incident response, manage vulnerability and application security (SAST/DAST/SCA), enforce firewall and network controls, drive PCI DSS compliance, conduct risk assessments, coordinate remediation across teams, and deliver security awareness, metrics, and governance.

Lead and execute Assessment & Authorization (A&A) and RMF activities, maintain security documentation (SSP, BoE, SCTM, STP, POA&Ms) in Xacta, perform SIEM log review and vulnerability analysis, advise developers on security requirements, monitor networks for threats, and respond to incidents in a 100% onsite secure environment.

Lead cybersecurity for DoD/IC systems across the full lifecycle: implement RMF, drive authorization, perform vulnerability and risk assessments, manage continuous monitoring, author security artifacts (SSPs, RARs, POA&Ms), and integrate controls and remediation in classified environments to maintain accreditation and operational readiness.

Lead security architecture for products and platforms: develop standards, reference architectures, and design patterns; translate requirements into secure architecture blueprints; evaluate threats and emerging tools; provide governance and review guidance; integrate secure design and DevSecOps practices to meet regulatory and business needs.

Support business continuity and operational risk framework, coordinate risk and management activities across the business, and assist information security management. Act as liaison with stakeholders to ensure risk controls and continuity plans are maintained. Fluency in Mandarin required; candidates must be local to the NY/NJ metro area.

Design, implement, and support corporate network security infrastructure including firewall administration (Cisco/Palo Alto), network device configuration, risk assessments, standards development, and 2nd/3rd level troubleshooting for a global environment.

Maintain and administer Quest ActiveRoles and Quest auditing/reporting tools, manage AD access control and security group audits, ensure compliance with security standards, script using PowerShell/T-SQL/ASP.NET, troubleshoot issues, interface with security teams, and produce architecture diagrams and documentation.

Provide ISSO support for DoDIIS Enterprise IT Infrastructure: ensure IA program compliance with ICD 503 and NIST standards, prepare A&A documentation, support engineering and operations cybersecurity, and coordinate with IA/security teams and government representatives.

Manage and enforce information security and operational risk controls for the branch: develop policies, training, incident detection/response, risk assessments, vulnerability testing, user/account entitlement management, reporting, and ad-hoc research support.

Define and govern enterprise security architecture across on-prem, hybrid, and cloud environments. Establish identity, cloud, infrastructure, DevSecOps, data protection, network, and telemetry standards and guardrails. Lead architecture reviews, threat modeling, risk assessments, and consolidation initiatives to ensure enforceable controls and measurable security KPIs.

Provide cybersecurity engineering and operations support for DoDIIS Enterprise IT Infrastructure, lead A&A preparation, ensure compliance with ICD 503 and NIST/DoD IA frameworks, and coordinate IA across security disciplines.

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Lead and enforce information assurance for mission-critical systems: monitor IDS/IPS, perform audits and vulnerability assessments, maintain SSP and configuration management, support accreditation, develop and operate security tools, communicate incidents, and deliver security training.

Support and enforce information systems security policies and procedures. Monitor IDS, conduct audits and vulnerability assessments, develop and operate firewalls/antivirus/deployment tools, research and implement security solutions, communicate intrusion alerts, and run security awareness programs.

Lead and enhance HKA's Azure infrastructure and Microsoft security stack. Manage cloud operations, identity and access controls, Zero Trust implementations, monitoring, incident response, threat modeling, risk remediation, and compliance alignment across a global hybrid environment.

Lead information security and compliance for the Medicaid MMIS solution: manage GRC platform, enforce Medicaid Enterprise Security Policy, align with state/federal requirements, oversee audits/security testing, monitor compliance, and drive POA&M risk mitigation.