Top Cyber Security Jobs

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

Leads product strategy and a team of Product Managers for ServiceNow’s Unified Security and Exposure Management portfolio. Defines AI-native, enterprise-grade security products for CISO organizations, drives product vision and roadmaps, and collaborates with customers, architects, engineering, and cross-functional teams. The role requires deep cybersecurity expertise, experience scaling enterprise software products, strong technical depth, data-driven prioritization, and exceptional communication skills.

Leads the DevSecOps and application security function, managing the team, program strategy, roadmap, tooling, vendors, and budget. Establishes security-by-design practices, threat modeling, secure development guidance, and training. Governs application and software supply-chain security across CI/CD, cloud, containers, infrastructure, APIs, and on-premises environments. Oversees vulnerability management, security testing, remediation, reporting, and risk processes while partnering with engineering, IT, cloud, SecOps, GRC, and architecture teams.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Lead AI-focused application security at Samsara by assessing software, code, hardware, and firmware against AI-driven attacks. Build and red-team AI-enabled security tools, apply LLMs and agentic workflows to security operations, develop fixes with engineers, and shape company-wide AI security strategy. Partner with engineering, hardware, and executive stakeholders on threat modeling, vulnerability management, secure AI adoption, and offensive validation.

Leads AI-focused application security across software, cloud, hardware, and firmware. Conducts security assessments and AI-driven red-team exercises, develops secure-code fixes and AI-enabled security tooling, validates controls for LLM and agentic systems, and shapes organization-wide AI security strategy. Partners with engineering, hardware, and executive stakeholders to identify threats, implement mitigations, and safely adopt AI within security operations.

Lead AI-focused application security across software, cloud, hardware, and firmware. Conduct offensive security assessments and AI-driven red teaming, develop secure-code fixes and AI-enabled security tooling, evaluate threats such as prompt injection and agent abuse, and establish organization-wide AI security strategy. Partner with engineering, hardware, and executive leadership to strengthen security controls and adoption of safe AI workflows.

Leads the architecture, engineering, and lifecycle management of cybersecurity platforms across hybrid cloud and on-premises environments. Develops secure software, automation, infrastructure-as-code, integrations, and CI/CD capabilities for security testing, adversarial simulation, vulnerability research, and cyber-defense validation. Establishes controls for resiliency, access, monitoring, compliance, and recovery; leads troubleshooting and incident response; and partners with cybersecurity, cloud, infrastructure, and enterprise technology teams. Applies AI and large language models to engineering and security workflows while validating security and reliability.

Supports Assessment and Authorization projects for government systems by documenting security controls, architectures, SSPs, CONOPS, contingency plans, user guides, SOPs, and POA&Ms. Coordinates artifacts and stakeholders through RMF and ICD 503 processes, supports ISSO/ISSM and assessor reviews, and tracks projects toward ATD, IATT, ATO, renewals, and extensions. The role also requires understanding complex networks, security enclaves, cloud, virtualization, vulnerability management, and security tools.

Supports enterprise cybersecurity Assessment and Authorization projects by documenting security controls, architectures, SSPs, CONOPS, contingency plans, user guides, SOPs, POA&Ms, and RMF artifacts. Coordinates with technical teams, contractors, assessors, and customer security organizations to achieve and maintain ATD, IATT, and ATO. Tracks accreditation status and supports security reviews across complex network, cloud, virtualization, and enterprise computing environments.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Lead the design and implementation of enterprise security solutions, clarify multi-network security requirements, perform threat modeling, vulnerability and penetration testing, triage risks and incidents, advise stakeholders, and drive cloud-native and software security initiatives while working independently.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Implements and helps design application, data, and cloud security controls across DevSecOps, SaaS, PaaS, and multi-cloud environments. Oversees data protection, lineage, and flow controls; supports ERP cybersecurity delivery, privacy incident response, performance monitoring, quality assurance testing, and security metrics to improve compliance and enterprise security posture.

Executes security engineering solutions, writes secure code, analyzes vulnerabilities and incident data, and supports resiliency training and security testing. Uses approved AI capabilities to accelerate analysis and documentation while validating outputs and protecting sensitive data. Works across agile SDLC and CI/CD processes, applying information and network security principles, risk management, and architectural concepts.

Leads information security consulting for an enterprise business line, covering infrastructure, data, network, cloud, access management, resiliency, and application security. The role drives cybersecurity governance, capability maturation, risk assessments, architecture reviews, threat and vulnerability analysis, security integration into development, executive reporting, and risk remediation. It also provides specialized support on information security issues and partners with leadership to anticipate security needs.

Leads endpoint detection engineering using AI, machine learning, Detection-as-Code, behavioral analytics, and MITRE ATT&CK. Owns detection coverage from telemetry onboarding through alert deployment, tuning, and gap analysis. Partners with threat intelligence, security operations, and business stakeholders to manage cyber risk and compliance. Conducts threat research, aligns detection capabilities with red-team techniques, mentors engineers, and drives architecture decisions for scalable, high-fidelity endpoint protections.

Leads Connected Device Security, Data Protection, and Insider Risk programs across healthcare environments. Develops cybersecurity roadmaps, DLP and information protection capabilities, insider threat governance, IoMT/IoT security processes, operational metrics, and investigative workflows. Partners with Security Operations, Engineering, Clinical Engineering, Privacy, Legal, HR, Compliance, and IT. Ensures alignment with HIPAA, HITECH, NIST, CIS Controls, and HITRUST while using approved AI tools to automate analytics and improve operations.

Leads complex security event investigations and incident response across Linux, macOS, cloud, and Kubernetes environments. Develops detections, automation, runbooks, and response workflows; coordinates containment and remediation; conducts post-incident reviews; partners with threat intelligence and detection engineering teams; mentors junior engineers; and leads operational improvements for a 24/7 SOC.

Lead Snap’s Production Security team and secure infrastructure across AWS and Google Cloud. Set technical strategy for perimeter security, workload identity, secrets management, CI/CD, and cloud controls; oversee service reliability, incident response, vulnerability remediation, security reviews, and risk acceptance. Partner with engineering teams to embed security by default, guide responsible AI adoption, recruit and develop engineers, and drive company-wide security platform adoption.

Leads Rubrik’s commercial and FedRAMP Security Operations Center, overseeing 24/7 monitoring, incident response, detection engineering, analyst development, compliance, and executive reporting. Owns SOC strategy, staffing, metrics, technology roadmaps, SIEM/SOAR decisions, and AI-enabled automation to reduce alert fatigue and improve investigations. Partners across security teams to expand coverage, mature processes, support audits, and strengthen detection and response across cloud, SaaS, on-premises, and regulated environments.

Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.