Top Cyber Security Jobs

Lead the design, development, deployment, and operation of highly available endpoint security backend services. Set architectural direction, drive technical initiatives, ensure performance and resiliency, establish engineering and operational excellence standards, conduct code reviews, mentor engineers, and collaborate across product, infrastructure, and engineering teams. The role focuses on Netskope Cloud DLP and endpoint data protection solutions, with responsibilities spanning observability, incident response, CI/CD, documentation, and AI-assisted development practices.

Designs, leads, and supports enterprise network security and infrastructure solutions. Responsibilities include network engineering, NAC, IAM, ZTNA, VPN, certificate and PKI management, secure connectivity, identity-driven access controls, segmentation, highly available distributed environments, platform upgrades, lifecycle management, and capacity planning. The role also evaluates technology solutions and leads cross-functional initiatives focused on performance, reliability, scalability, and capacity.

Leads AI security, platform modernization, and developer productivity initiatives. Designs enterprise solutions, manages AI vulnerability remediation, develops CI/CD and DevSecOps automation, modernizes Java platforms, enables rapid security releases, and establishes secure AI development standards. Partners with architecture, security, infrastructure, and engineering teams to deliver secure, scalable platforms and improve software delivery efficiency.

Supports federal cybersecurity risk management and authorization activities using the NIST RMF. Responsibilities include system categorization, security control documentation, SSP and POA&M management, control assessments, vulnerability remediation, continuous monitoring, ATO preparation, incident response coordination, and FISMA compliance. The role requires collaboration with stakeholders, cloud security experience, cybersecurity governance tool use, Security+ certification, and eligibility for a Public Trust.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Designs, implements, maintains, and supports security infrastructure, including firewalls, networks, cloud workloads, authentication, monitoring, threat hunting, vulnerability assessments, incident response, and security controls. The role maintains federal compliance, supports system hardening and access control, automates administration, contributes to cloud migration, documents technical processes, and participates in project and on-call support activities.

Leads FedRAMP authorization and continuous monitoring assessments for cloud service providers, evaluating security controls, architectures, processes, evidence, and risk management against federal requirements. Provides cybersecurity compliance and cloud security advisory services, develops remediation strategies, reviews assessment reports, leads client engagements, supports business development, and mentors assessment teams. The role also contributes to quality assurance, methodology improvements, executive briefings, and growth of government cybersecurity services.

Conduct offensive security research across web applications, APIs, cloud infrastructure, and open-source software. Develop and exploit vulnerabilities, translate offensive techniques into AI agent behaviors and playbooks, create vulnerable environments and benchmarks, and analyze findings to reduce false positives. The role requires hands-on penetration testing, red teaming, bug bounty, or vulnerability research experience, strong web security knowledge, and Python or similar programming skills.

Deploy and operate Strix’s autonomous penetration-testing platform in customer environments, validate and triage vulnerabilities, communicate security impact to technical and executive audiences, advise customers, and provide field feedback to improve the product and AI agents.

Lead application security programs across CZI by designing secure tooling, automation, frameworks, and architecture. Drive vulnerability prevention, secure SDLC adoption, threat modeling, security testing, cloud and infrastructure security, architecture reviews, incident response, compliance metrics, and cross-functional delivery. Partner with engineers, product managers, vendors, auditors, and technical stakeholders to establish secure-by-default platforms and controls across complex cloud-native and hybrid environments.

Lead cybersecurity engineering across system lifecycles for classified DoD, SAP and SCI environments. Integrate security requirements into architecture and design, perform threat modeling and risk assessments, produce engineering artifacts (STIGs, control traceability), support RMF accreditation (JSIG), and integrate secure enclaves (SIPRNet, Type 1 crypto). Collaborate with ISSOs/ISSMs/SCAs and stakeholders to assess compliance and recommend mitigations.

Implement and maintain security protocols for IT infrastructure. Responsibilities include assessing risks, designing security and disaster recovery strategies, configuring security tools, hardening systems, monitoring threats, responding to incidents, addressing breaches and malware, training employees, and supporting security policies. The role requires experience with cybersecurity frameworks, cloud platforms, endpoint and SIEM tools, PKI, SSL/TLS, patch management, and intrusion prevention systems.

Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks.

Design, build, operate, and secure identity and authorization services supporting vehicle, cloud, and enterprise systems. Own SpiceDB authorization models, APIs, SDKs, workload identity, OAuth2/OIDC, mTLS, key distribution, and cloud-native deployments on Go, Kubernetes, and AWS. Partner cross-functionally on platform adoption, incident response, vulnerability mitigation, regulatory compliance, and security architecture. Mentor engineers and lead platform capabilities from requirements through production operationalization.

Cloud Cybersecurity Interns work with mentors and engineers to deliver projects securing Tanium Cloud. Responsibilities include implementing preventive and detective security controls, deploying DevOps security tools, processing security operations data, and improving dashboards and monitoring. Interns present completed work to Tanium’s R&D team and work full-time in a hybrid Durham, NC office setting.

Leads development and architectural evolution of an AI-powered code security scanner. Responsibilities include building user-facing dashboards and workflows, implementing secure authentication, extending backend scanning and orchestration services, integrating LLM-based security analysis, automating vulnerability validation and reporting, enhancing scalability, and mentoring junior engineers.

Lead design and implementation of secure, scalable policy and platform software across cloud and hybrid environments. Drive technical strategy, mentor senior engineers, influence architecture and standards, and collaborate across product and business teams to deliver long-term, reliable security solutions.

Leads Risk Management Framework activities for Intelligence Community customers, including developing security documentation, managing RMF artifacts in XACTA and ServiceNow, conducting risk analyses, supporting compliance and application security assessments, and implementing cybersecurity solutions. The role requires active TS/SCI clearance with polygraph, extensive DoD cybersecurity experience, IAM and IAT certifications, Linux expertise, and familiarity with NIST, DISA, STIG, vulnerability management, and authorization processes.

Leads investigations and incident response for escalated security incidents, correlating SIEM, identity, endpoint, network, and cloud data. Coordinates containment and remediation, documents evidence and timelines, tunes detections, develops playbooks, enriches cases with threat intelligence, conducts threat hunts, and improves alert quality and response metrics. Provides escalation support to service desk and junior analysts while managing security tools and contributing to security projects.

Leads the firm-wide security operations program, overseeing threat hunting, detection, incident response, malware analysis, threat intelligence, SIEM administration, and security technology selection. Serves as the final escalation point for security incidents, advises leadership on emerging threats, develops security policies and processes, and provides technical leadership and mentoring to information security professionals.

Lead GM's Software Supply Chain Security function: translate strategy into execution, build and coach a high-performing team, own KPIs, and embed secure-by-design controls across source control, build pipelines, containers, SBOM, third-party software, and developer tooling while partnering with engineering, platform, cloud, procurement, and risk.

Engineer and modernize privileged access management across on-premises and cloud environments. Responsibilities include designing PAM solutions, supporting CyberArk or StrongDM, integrating ServiceNow and Azure, troubleshooting complex authentication issues, providing Tier 3 support, responding to incidents, remediating vulnerabilities, defining PAM standards and governance, and improving resiliency. Preferred experience includes machine identities, automated PAM administration, infrastructure-as-code, legacy platform modernization, migrations, recovery testing, and relevant security certifications.

Supports enterprise application security by operating SAST, DAST, IAST, and IDE security tools; developing pipelines; securing web applications; troubleshooting Linux environments; and implementing enterprise security controls. The role applies OWASP and federal compliance standards, collaborates with clients and application teams, and requires experience with Veracode, Burp Suite, programming languages, and security testing tools.

Lead security incident responses, build and maintain detection engineering frameworks across cloud and Kubernetes environments, and architect AI-driven Autonomic Security Operations capabilities. The role involves analyzing multi-language codebases, identifying vulnerabilities, tuning detection pipelines, developing SOAR playbooks, communicating with executives during high-pressure incidents, and participating in a weekly on-call rotation.

Leads the design, implementation, integration, and administration of security platforms across endpoint, network, cloud, SaaS, and identity environments. Responsibilities include SIEM onboarding, vulnerability management, threat modeling, incident response support, automation, detection engineering, secure configuration, audit support, and security product evaluation. The role also provides technical leadership, develops integrations and playbooks, and partners on backup and recovery architecture.