Top Cyber Security Jobs

Lead COMSEC implementation and lifecycle management: enforce COMSEC policy, deploy and sustain cryptographic hardware, protect keying material, perform rekeying, maintain asset accountability and audit readiness, provide custodian training and SME cryptographic integration support for CONUS deployments.

Support implementation and maintenance of cybersecurity controls across cloud and platform environments for DoD missions. Perform RMF and ATO activities in eMASS, vulnerability scanning and remediation, incident response, security assessments, and documentation (SSPs, POA&Ms). Collaborate with engineers to integrate DevSecOps practices, secure containers and cloud-native apps, and maintain compliance with NIST/DoD frameworks.

Designs, implements, tests, and maintains enterprise IAM/SSO solutions. Troubleshoots authentication/authorization issues, integrates federation protocols (SAML/OAuth/SCIM), applies patches, trains stakeholders, and advises on IAM best practices and compliance.

Implement, configure, monitor, and support enterprise cybersecurity controls across cloud and on‑prem environments. Maintain EDR, DLP, CSPM/CWP, container and network security, integrate logs into SIEM, perform threat detection and incident response, conduct security reviews, and produce security policies and documentation. Partner with DevOps and business units to reduce cloud security risks and ensure compliance with cloud security frameworks.

Lead the end-to-end unified audit program across SOC, HIPAA, ISO 27001, and GxP frameworks. Define audit strategy and roadmap, coordinate evidence collection and pre-audit gap reviews, liaise with external auditors, track remediation, and present program status and risks to leadership. Partner with control owners to ensure audit readiness and continuous compliance improvement.

Lead the Data Leakage Prevention (DLP) engineering squad to design and deliver cyber security controls, manage vendors, engage stakeholders, and drive modernization to reduce risk. Develop and execute security strategy, monitor KPIs, ensure high availability of systems, enforce security best practices, and support transformation projects across cloud and on-prem environments.

Design and implement enterprise security architectures, lead AI/ML security (LLMs, GenAI, MLOps), develop security policies, conduct risk assessments, support incident response, mentor junior staff, and enhance cloud, network, IAM, data, and endpoint security.

Administer and support Menard's enterprise network and security infrastructure across data centers, corporate, distribution, manufacturing, and retail sites. Tasks include routing/switching, firewall-based segmentation, VPNs, authentication, load balancing, monitoring, IPAM, troubleshooting, new system implementation, documentation, and automation using Python. Provide on-call and vendor support and assist design with senior staff.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Administer and monitor security technologies (endpoint protection, vulnerability management, SIEM, encryption, MFA, IAM); investigate and remediate security incidents; perform assessments, audits, and compliance support (HIPAA/PII/FERPA); develop policies, run risk assessments, and support business continuity and incident response activities.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Perform adversary-emulation informed cybersecurity operations and analytics to evaluate and improve detection, visibility, tooling, and automated defensive processes. Work with red teams, analyze network traffic, configure and maintain network infrastructure, build virtual environments, and develop automation and data-driven solutions to harden sponsor systems.

Perform hands-on security operations and compliance support using Microsoft security tools. Configure endpoint and identity controls, investigate and remediate incidents, manage vulnerability remediation, and support audits and certification efforts (CMMC, SOC 2, ITAR, ISO 27001). Produce security metrics and maintain secure configuration baselines in hybrid environments.

Monitor, analyze, and maintain the bank's technical security controls across cloud, on-prem, and SaaS. Respond to security alerts, run SIEM and network anomaly detection, manage identity and access, lead regulatory/compliance tasks, vendor security reviews, risk assessments, audits, and security awareness programs, and coordinate remediation and security projects.

Design, implement, and maintain security architecture and RMF activities for network infrastructure. Develop A&A documentation (SSP, SCTM, BoE), perform vulnerability management with Nessus/SCAP, support continuous monitoring, incident response, and network integration. Ensure compliance with NIST SP 800-53 and related standards and assist ISSOs through ATO processes.

Lead Security Engineering & Operations to design, implement, and operate security infrastructure and incident response. Manage detection engineering, SIEM, MSSP/XDR relationships, security policies, team performance, budget, and cross-functional security integrations with Platform and Dev/Ops.

Perform protocol and firmware vulnerability research on 4G/5G stacks, using static/dynamic analysis, stateful fuzzing, symbolic/concolic execution, and tooling (Python, disassemblers, Wireshark) to identify and document security flaws in telecom Core and RAN components.

Lead administration and engineering of large enterprise Splunk deployments: manage data collection, maintain Splunk ES content and performance, deploy upgrades and add-ons, configure forwarders, support API integrations, develop documentation, enforce RBAC and compliance, and collaborate with analysts to improve detection and response.

Support and sustain endpoint security platforms for an Intelligence Community customer. Engineer, configure, and maintain Carbon Black EDR and other security products on Linux, assist with incident response and threat hunting, design secure architectures, oversee security sustainment and incident investigations, and provide technical reporting to senior management.

Lead the security operations function: set strategy and maturity roadmap, oversee SOC and detection tooling (SIEM/SOAR/EDR/XDR), direct incident response and forensics, manage vulnerability operations, drive detection engineering and automation, coordinate cross-functional incident handling, oversee vendors/MSSPs, and build a high-performing operations team.

Lead cyber risk and security engineering across cloud-native and hybrid environments. Drive risk assessment, implement security controls, integrate DevSecOps and IaC, build identity and access governance, run awareness programs, apply security frameworks, and advise senior leadership to reduce enterprise cyber risk across digital and physical retail operations.

Maintain and secure Linux-based systems for network defense: automate tasks with shell scripts, configure logging and remote log collection, manage networking services (firewalls, SELinux), configure storage (partitions, LVM), deploy and update systems, and diagnose network issues using protocol knowledge and troubleshooting tools.

Embed with an Agile program to design and implement RMF-aligned security controls for cloud-native GEOINT systems. Integrate security tooling into CI/CD pipelines, perform STIG hardening, vulnerability scanning/remediation, support ATO/authorization activities, maintain POA&Ms, and advise development teams on secure design and coding.

Senior engineer responsible for hands-on design, development, and deployment of ServiceNow IRM and SecOps solutions. Build event-driven automation, engineer integrations with security tools (Splunk, Tenable, Qualys), implement CAM/RMF workflows, develop server- and client-side GlideScripting, enforce platform ACLs/data filtration, and validate work using Automated Test Framework across environments.

Lead Security Engineer responsible for designing and implementing security strategy across cloud (GCP), container (Docker), CI/CD, and application security. Perform threat modeling, penetration testing, vulnerability management, incident response, and ensure compliance (HIPAA, SOC-2, PCI-DSS). Initially hands-on, then lead and mentor a team of 2–8 engineers while collaborating with product teams and reporting to the CTO.