Top Cyber Security Jobs

Leads security engineering strategy, operations, and a team of information security professionals. Oversees security monitoring, detection, incident response, audits, penetration testing, risk management, compliance, and implementation of SIEM, endpoint protection, and threat intelligence technologies. Develops security policies and standards, manages major incident investigations, and partners with leadership to strengthen organizational resilience across cloud and hybrid environments.

Build and own the company’s enterprise risk management and information security functions. Lead SOC 2 and ISO 27001 compliance, security policies, ISMS development, incident response, business continuity and disaster recovery exercises, vendor and audit management, partner security due diligence, and security awareness training. Collaborate with engineering, product, legal, business development, and operations to maintain an audit-ready security posture.

Manages federal information-system security authorization and Risk Management Framework activities, including FISMA-compliant security packages, POA&Ms, risk analyses, control assessments, continuous monitoring, incident response, contingency planning, inventories, vulnerability scans, and stakeholder coordination. Supports NIST, OMB, CNSS, and privacy requirements for a law-enforcement customer, while validating physical safeguards and developing assessment scripts and technical reports.

Assist Tencent’s Security Team with maintaining security infrastructure, protecting against cyber threats, and supporting compliance. Responsibilities may include SaaS security, identity and access management, DevOps and SRE automation, monitoring, logging, incident response, threat monitoring, and security data pipelines. The role requires programming, Linux, networking, systems, containerization, debugging, and collaboration skills, with opportunities to work across cloud, infrastructure, observability, and security operations projects.

Administers and troubleshoots enterprise firewall and network security services, including VPNs, routing, segmentation, SD-WAN, access control, certificates, and monitoring. Resolves complex network issues, leads projects, develops documentation and processes, supports change management, and coaches peers. Serves as a subject matter expert for network security while collaborating with infrastructure teams to improve service efficiency and reliability.

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.

Serves as an ISSO for a NAVAIR program, managing cybersecurity activities, RMF authorization packages, security documentation, IATTs, CyberSafe authorization, cybersecurity plans, vulnerability management, assessments, and system authorization. Coordinates with technical and program stakeholders, evaluates software compliance, oversees junior staff, and supports classified systems in secure environments.

The Information System Security Manager ensures classified and unclassified systems comply with security policies, government requirements, NIST frameworks, and CMMC controls. Responsibilities include maintaining security architecture, supporting secure system development, collaborating with administrators, drafting policies, testing controls, maintaining POA&Ms, monitoring compliance, analyzing Linux, Windows, and AWS vulnerabilities, and researching CVEs to guide remediation.

Lead human cyber risk and information security initiatives focused on DLP, DSPM, insider risk, phishing, social engineering, and data exfiltration prevention. Investigate security alerts and incidents, analyze employee risk telemetry, optimize security tools, develop awareness programs, report risk findings to leadership, and collaborate with HR, Legal, IT Operations, and security teams. Mentor junior analysts and support incident response, remediation, and governance activities.

Own corporate security by protecting workforce identities, endpoints, and enterprise applications. Build Okta-based identity and access controls, endpoint security through MDM and EDR, secure SaaS configurations, and software integrations that automate policy enforcement and identify security gaps. The role also supports phishing-resistant authentication, least privilege, patching, device posture controls, endpoint investigations, and secure management of OAuth and AI-tool integrations.

Own infrastructure security foundations, improve cloud security across IAM, networking, and systems, and strengthen authentication, authorization, identities, and secrets management. Build production security tooling and automation to prevent vulnerabilities, detect configuration drift, and reduce manual work. Partner with infrastructure and product engineers on secure design reviews, vulnerability remediation, centralized logging, and detection and response capabilities.

Lead identity and access security across a global portfolio, including authentication, authorization, non-human identities, PAM, JIT access, and Cloudflare ZTNA. Design Okta policies, integrate endpoint and SaaS security signals, manage identity governance and compliance, and automate security workflows using infrastructure-as-code, scripting, and AI tooling. Influence cross-functional teams, modernize access controls, and drive complex security initiatives to completion.

Manages enterprise email security controls and investigates suspicious messages, phishing, social engineering, business email compromise, and related threats. Responsibilities include triaging reports, analyzing headers and URLs, reviewing Proofpoint alerts and quarantines, troubleshooting email delivery, supporting incident response, containing malicious messages, documenting evidence, and collaborating with identity, endpoint, messaging, and security teams. The role also supports digital risk protection, email authentication controls, threat escalation, process improvements, and after-hours response.

Leads enterprise identity and data security strategy, governance, risk, compliance, and remediation. Oversees identity lifecycle management, IGA, SSO, MFA, privileged and non-human identities, customer authentication, data discovery, classification, DLP, retention, and secure disposal. Partners with Legal, Privacy, Audit, Engineering, IT, HR, and executives to assess risks, strengthen controls, meet regulatory obligations, and execute multi-year security roadmaps. This is a hands-on individual contributor security leadership role.

Leads the architecture and implementation of Uber’s cyber defense platform across multi-cloud and hybrid environments. Defines security strategy, builds scalable CSPM, vulnerability management, threat detection, and incident response capabilities, and applies AI/ML automation. Provides incident leadership, establishes security standards, mentors engineers, drives technical direction, and collaborates with executive and cross-functional teams on security, privacy, compliance, and engineering initiatives.

Supports information security and risk operations, including policy development, security assessments, risk analysis, incident response, third-party risk, vulnerability reporting, security awareness, and disaster recovery. Coordinates technical resources for projects and operations, monitors industry developments, and helps evaluate compliance with internal standards and regulatory requirements.

Lead and manage a team of security professionals to ensure program security compliance (NISPOM, OPSEC, ICD 705), support SAP and SIPR token lifecycle, translate regulatory requirements into risk-based controls, oversee security metrics and budgets, interface with program leadership, and support international sales and DevSecOps environments.

Designs, develops, integrates, and secures information assurance architectures, systems, networks, and enclaves with varying data-classification requirements. Performs secure system and network design, applies Defense-in-Depth principles, conducts threat modeling and vulnerability assessments, and supports compliance with Federal, NSA, IC, and DoD information-security policies. Requires extensive IASAE experience and IASAE Level III certification eligibility under DoD Directive 8570-1.

Supervise the IT Security Team; develop and implement security controls, services, and tools; monitor networks and investigate breaches; report security events; provide cybersecurity training; collaborate with IT leadership; be on-call 24/7 and support emergency management activities. CJIS background check required.

Design and scale the security governance, risk, and compliance program. Automate evidence gathering and control testing, manage audit and customer relationships, conduct product and vendor compliance reviews, support security and AI governance contract terms, assist with incident communications, build self-service customer security tools, and maintain corporate security policies.

Leads client-facing ServiceNow Security Operations and cybersecurity consulting engagements from discovery through implementation and adoption. Advises executives on security operations, vulnerability and exposure management, threat intelligence, governance, automation, integrations, and responsible AI use. Oversees engagement quality, budgets, risks, schedules, and client satisfaction while leading consulting teams. Supports recruiting, practice development, business development, proposals, and account growth.

Leads Authority to Operate activities and maintains information system security posture under RMF and ICD 503. Performs continuous monitoring, vulnerability and compliance auditing, security control validation, POA&M management, and security documentation. Coordinates remediation with technical teams, supports accreditation packages, analyzes logs and scan results, and provides security design guidance. The role also manages privileged-user nominations and serves as the primary contact for accreditation and continuous monitoring activities.

Investigate and respond to cybersecurity incidents, analyze threats and security logs, develop defensive controls, conduct digital forensics, research vulnerabilities, and collaborate with security and legal teams. The role requires rotating 24/7 shift coverage, including weekends and holidays, with expertise in multiple security operations domains.

Designs, implements, and maintains secure enterprise network infrastructure across Zero Trust, SD-WAN, cloud networking, wireless, VPN, and remote access environments. Performs security assessments, vulnerability scanning, penetration testing, troubleshooting, monitoring, and network architecture documentation. Supports Azure and AWS security configurations, evaluates security technologies, responds to outages, assists project teams, and helps enforce security policies and procedures.

Develop custom code to analyze network traffic and proprietary protocols, create attack and defense methodologies, and conduct cybersecurity research on high-risk computer networks. The internship is onsite at Idaho National Laboratory’s Idaho Falls campus and is open to undergraduate, master’s, and doctoral students in relevant technical disciplines.