Top Cyber Security Jobs

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead cloud security as a senior individual contributor: define standards and reference architectures, drive cross-team initiatives, own threat modeling and IAM strategy, design detections and lead incident response/cloud forensics, manage vulnerability workflows, and secure self-managed Kubernetes, IaC, and CI/CD pipelines while mentoring engineers and producing durable, scalable controls.

Lead cloud security direction and standards across AWS, GCP, and self-managed Kubernetes. Own threat modeling, secure architecture, detection engineering, incident response, and vulnerability management. Harden IaC and CI/CD (Terraform), secure Kubernetes control plane and runtimes, and mentor other engineers while driving cross-functional security initiatives and tooling adoption.

Lead cloud security strategy and standards across AWS, GCP, and self-managed Kubernetes. Drive secure architecture, threat modeling, detection engineering, incident response, and platform/IaC security. Mentor engineers, own cross-functional initiatives, harden tooling (CrowdStrike, Tenable, SIEM), and codify playbooks and controls for large-scale distributed systems.

Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

Design and build security controls for METR’s AI evaluation platform, including sandboxing, isolation, networking, access boundaries, IAM, and agent permissions. Identify, triage, and remediate vulnerabilities across cloud infrastructure, codebases, and access systems. Conduct secure code reviews, harden production systems, automate provisioning and access reviews, and develop monitoring and guardrails for agentic systems.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Responds to and resolves cybersecurity incidents, prevents recurrence, and applies intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies. Performs complex security operations and intrusion analysis, develops innovative incident response solutions, and mentors technical staff. Requires experience supporting IT or intelligence operations, SOC tools, and incident response practices, along with a Top Secret clearance and a bachelor’s degree timeline.

Provides Tier 1 and Tier 2 infrastructure and systems administration support for operational databases, servers, networks, storage, and VDI environments. Installs patches and upgrades, performs backups and recovery, troubleshoots hardware and software, and maintains SOPs. Implements DISA STIGs, manages POA&Ms and eMASS artifacts, supports security documentation, and provides cybersecurity guidance through change control and system initiatives. Requires DoD-compliant technical support experience, IAT II certification, and an active TS/SCI clearance.

Technical lead for CSOC security engineering and modernization: integrate and maintain SIEM/SOAR/EDR/IDS/IPS, optimize performance, enforce standards (NIST/FISMA), advance Zero Trust, automate telemetry across cloud and on-prem, evaluate emerging tech, produce technical reports and documentation.

Own security partnerships for Customer Service and Creative Technology. Advise on GenAI and GenMedia security, customer data environments, cloud infrastructure, third-party tools, training data governance, and risk treatment. Build business risk profiles, drive remediation, report security posture, and support technical security due diligence for acquisitions and subsidiaries.

Supports cybersecurity system planning, design, implementation, operations, reporting, and DoD RMF accreditation. Manages vulnerabilities, reviews network security configurations, monitors system health, responds to cyber incidents and tasking orders, maintains cybersecurity diagrams and change documentation, and trains military personnel. The role also provides expertise in risk management, vulnerability remediation, compliance, and cyber readiness reporting.

Respond to and resolve cybersecurity incidents, prevent recurrence, and develop innovative solutions for complex security operations challenges. Apply incident response, SOC, intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies. Analyze security operations data, mentor employees, and support classified cyber operations. The role requires a Top Secret clearance and a bachelor’s degree scheduled for completion by Winter 2026.

Respond to and resolve cybersecurity incidents, prevent recurrence, and develop innovative solutions for complex security operations problems. Apply intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies; use security operations tools and incident response best practices. Mentor or supervise technical staff while supporting SOC, CIRT, cyber network operations, or intelligence operations in classified environments.

Build and operate an enterprise application security program. Responsibilities include managing SAST, DAST, SCA, API, and secrets scanning; integrating security testing into CI/CD; triaging vulnerabilities; distinguishing exploitable findings from false positives; coordinating remediation; delivering secure-coding education; translating security standards into developer guidance; applying threat intelligence; and producing risk-based reporting for technical, managerial, and executive audiences.

Build and mature a Cyber Resilience and Assurance program by developing governance frameworks, assessment methodologies, operating procedures, and validation approaches. Evaluate security controls across identity, infrastructure, network, cloud, applications, and AI environments. Support threat-informed assessments, attack simulations, resilience exercises, and readiness evaluations. Analyze attack paths and control effectiveness, create metrics and executive reporting, identify improvement opportunities, and contribute to long-term cybersecurity strategy and program roadmaps.

Engineer and harden classified systems, mission ground systems, and lab environments; implement security controls; develop accreditation artifacts; support RMF, ATO, and continuous monitoring; perform vulnerability management, incident response, and security automation; and mentor junior personnel. The role requires collaboration with program engineers and administrators, on-call participation, and support for national security missions in primarily onsite classified facilities.

Design, build, and operate high-assurance cryptographic services and libraries (encryption, signatures, key management, PKI) for large-scale distributed systems. Integrate cryptography into Java services (JCA/JCE, J2EE), work with hardware-backed modules (PKCS#11, KMIP, TPM 2.0), lead threat modeling and security reviews, and improve performance, scalability, and resilience of cryptographic operations.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Manage and improve enterprise vulnerability management using Tenable and related technologies. Define scanning strategies, analyze and prioritize vulnerabilities, coordinate remediation, validate closure, and improve asset coverage and reporting. Develop dashboards and metrics, support exception reviews and audit evidence, and contribute to endpoint, identity, cloud, Zero Trust, hardening, and threat-hunting initiatives. Partner with infrastructure, cloud, application, security operations, and other technical teams across a complex global environment.

Secure AI and cloud-native applications by embedding controls into the Secure SDLC, CI/CD pipelines, Kubernetes environments, APIs, and software supply chains. Lead threat modeling, secure design reviews, vulnerability remediation, container hardening, runtime policy enforcement, and AI/ML workload protection. Partner with engineering teams to establish secure coding standards and improve enterprise security posture.

Owns and drives the Risk Management Framework process for assigned systems, maintaining SSPs, ATO packages, POA&Ms, control evidence, and continuous monitoring documentation. Interprets NIST controls and DISA STIGs, coordinates remediation, identifies compliance gaps, supports government assessments, and collaborates with engineers, administrators, assessors, and customers. The role requires strong technical writing, communication, DoD RMF/GRC expertise, and an active TS/SCI clearance with polygraph.

Senior individual-contributor who defines enterprise network security architecture and roadmap, leads design/implementation of firewalls, SWG, WAF, SD-WAN security and segmentation, provides senior escalation for incidents, governs standards, mentors engineers, and manages vendor/outsourced relationships to modernize and automate network security infrastructure.