Top Cyber Security Jobs

Lead security incident responses, build and maintain detection engineering frameworks across cloud and Kubernetes environments, and architect AI-driven Autonomic Security Operations capabilities. The role involves analyzing multi-language codebases, identifying vulnerabilities, tuning detection pipelines, developing SOAR playbooks, communicating with executives during high-pressure incidents, and participating in a weekly on-call rotation.

Leads the design, implementation, integration, and administration of security platforms across endpoint, network, cloud, SaaS, and identity environments. Responsibilities include SIEM onboarding, vulnerability management, threat modeling, incident response support, automation, detection engineering, secure configuration, audit support, and security product evaluation. The role also provides technical leadership, develops integrations and playbooks, and partners on backup and recovery architecture.

Design, develop, test, deploy, and support secure Java applications and microservices in the identity and authentication domain. Translate business and security requirements into technical designs, build REST APIs, remediate vulnerabilities, and support reliability, compliance, audits, and production issues. Lead complex technical initiatives, participate in Agile and DevOps delivery, conduct reviews, plan releases, perform root-cause analysis, and mentor engineers.

Lead development and architectural evolution of an AI-powered code security scanner. Build secure user-facing applications, reporting dashboards, backend orchestration and scanning services, LLM integrations, vulnerability analysis workflows, authentication, authorization, and cloud-native solutions. Mentor engineers and drive platform modernization, scalability, automation, testing, and long-term enhancements for enterprise applications in regulated environments.

Leads advanced cybersecurity operations, including incident response, threat hunting, detection engineering, vulnerability management, security architecture, audits, vendor risk, and control development. Advises leadership on risk, mentors security analysts, evaluates security technologies, supports exercises and recovery testing, and translates technical risks for diverse stakeholders.

Supports Department of War cyber security cooperation policy and programs, including defensive cyber operations, critical infrastructure protection, cyber resilience, and incident response. Analyzes program feasibility, risks, resources, and alignment; coordinates with military, government, diplomatic, law enforcement, intelligence, and international stakeholders; prepares policy documents and executive briefings; tracks milestones and risks; and advises senior leadership on cyber policy and security cooperation initiatives.

Execute the Information Security GRC program: maintain policies, map and integrate security frameworks, run risk assessments, support audits and remediation, manage control testing and exceptions, assist incident response and BC/DR exercises, monitor phishing and InfoSec tickets, and provide reporting and training to ensure regulatory compliance and security posture.

Supports the design, deployment, and administration of identity and access management capabilities across multicloud environments. Provides advanced technical support, resolves complex access and security issues, develops documentation, automates access management services, supports application onboarding, and recommends continuous improvements to policies, procedures, and security standards.

Conduct adversarial security research against anti-bot and web data collection defenses. Responsibilities include reverse engineering anti-bot systems, developing HTTP client solutions, researching web security tools and standards, and improving machine learning-based data collection methods. Requires deep HTTP and TLS knowledge, five or more years of R&D, development, research, or testing experience, and expertise in programming, offensive security, reverse engineering, vulnerability research, or anti-bot technologies.

Leads a team conducting product security verification and validation for industrial control systems, embedded devices, software, and communication technologies. Oversees penetration testing, vulnerability assessments, fuzz testing, security automation, research, and security requirements traceability. Partners with engineering, architecture, quality, and cybersecurity teams, while managing recruitment, performance, development, test methodologies, tools, and communication of security risks and recommendations.

Manage and oversee the laboratory’s Controlled Unclassified Information program while supporting classified information protection and OPSEC initiatives. Responsibilities include maintaining policy expertise, conducting audits and risk reviews, developing training, reviewing document markings, investigating security incidents, coordinating misuse determinations, and advising stakeholders on information protection requirements. The role requires collaboration with Legal, IT, program managers, DOE, and laboratory leadership, along with maintaining procedures and promoting compliance with federal security policies.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Develop and integrate security software for Cisco’s SD-WAN routing portfolio, including firewall, IPS/IDS, content filtering, and file inspection capabilities. Design optimized C/C++ code, write unit tests, perform code reviews, troubleshoot embedded software, and author technical specifications. Collaborate with product managers and architects on roadmaps, apply secure coding practices, use AI-assisted development tools, and mentor junior engineers.

Build, operate, and improve enterprise security telemetry and detection platforms across hybrid, cloud, and on-premises environments. Engineer SIEM, EDR, SOAR, and log pipelines; develop detection content; implement access controls, integrations, validation, and observability; troubleshoot visibility gaps; and support incident response. The role also documents architectures, evaluates emerging technologies, contributes to AI monitoring, and partners across security, infrastructure, architecture, and product teams.

Leads AI governance and cybersecurity risk advisory engagements for large, regulated organizations. Advises C-suite executives and boards on AI threats, regulatory requirements, governance operating models, risk assessments, control frameworks, and cyber resilience. Owns complex engagement delivery, client relationships, team leadership, business development, proposals, engagement economics, and practice growth. Develops methodologies, thought leadership, and risk-management solutions covering AI governance, cloud security, identity management, data protection, incident response, and third-party risk.

Leads classified information system security, NISP and government compliance, security documentation, system hardening, monitoring, audits, risk assessments, incident response, and accreditation. Administers secure DoD Windows environments, supports classified systems, coordinates with government and internal security stakeholders, and assists with commercial cybersecurity compliance and third-party risk assessments. The role is fully onsite in New Jersey and requires eligibility for a U.S. Government security clearance.

Manage security for classified information systems across their full lifecycle, including accreditation, security controls, SSPs, RMF activities, vulnerability remediation, audits, incident response, insider threat coordination, COMSEC, and TEMPEST/EMSEC compliance. Lead security professionals, coordinate with government agencies, conduct training and self-inspections, and ensure systems meet NIST, DoD, SCI, and related regulatory requirements.

Assists with cybersecurity compliance, auditing, accreditation, continuous monitoring, and incident response for classified information systems. Maintains security plans, maps STIG and DISA requirements to RMF evidence, supports security tool implementation, provides technical support, develops training and procedures, investigates violations, and coordinates with government agencies. Requires U.S. citizenship, ability to obtain and maintain a security clearance, and Security+ certification within one year.

Summer Associate supporting governance, risk, and compliance functions within a community bank. Responsibilities may include regulatory testing, compliance monitoring, risk assessments, third-party reviews, BSA/AML transaction monitoring, fraud investigations, internal audit testing, information security, and reporting. The role offers hands-on experience in a regulated banking environment and requires strong analytical, communication, collaboration, and problem-solving skills.

Leads the enterprise data security program for unstructured data, including governance, DLP, privacy compliance, insider risk, AI data protection, incident response, and intellectual property protection. Advises senior leadership and the Board, oversees control testing and risk reporting, supports acquisitions, partners with privacy and legal teams, and leads a data security team.

Leads enterprise identity and access management initiatives, serving as a technical SME for Epic Security, SailPoint, Okta, Entra ID, and Active Directory. Develops RBAC models, provisioning workflows, identity lifecycle processes, and governance controls; remediates excessive access; supports audits, risk assessments, automation, and incident response. Partners with technical and business stakeholders, mentors junior analysts, handles escalations, and participates in a 24/7 on-call rotation.

Manage complex identity, access, provisioning, and Epic Security activities for a healthcare client. Administer SailPoint, Okta, Microsoft Entra ID, Active Directory, RBAC, lifecycle management, and access governance. Troubleshoot security issues, evaluate access risks, support audits and remediation, contribute to automation and implementations, and advise stakeholders as a subject matter expert. Participate in a 24/7 on-call rotation and provide technical guidance to other analysts.

Engineer and maintain enterprise infrastructure security across data centers, networks, firewalls, remote access, identity systems, and cloud-connected platforms. Responsibilities include firewall and VPN administration, Zero Trust implementation, vulnerability remediation, system hardening, infrastructure monitoring, compliance support, risk assessments, documentation, and collaboration with Security, Cloud, Infrastructure, and application teams. The role is remote but requires travel to data centers and occasional evening or weekend work.

Monitors security alerts and conducts end-to-end incident investigations, threat hunting, log and PCAP analysis, file analysis, and compromise investigations across Windows, Linux, network, and cloud environments. Documents findings, recommends mitigations, supports 24/7 security monitoring, and collaborates with forensics, threat intelligence, penetration testing, vulnerability management, and purple teams to improve security operations.