Top Cyber Security Jobs

Secure enterprise and PeopleSoft data hosted in OCI by implementing Oracle database controls, encryption, auditing, privileged access governance, hardening, and integration security. The consultant secures APIs, SOAP/REST services, data flows, and identity integrations; monitors cloud database activity; investigates security issues; supports compliance and risk remediation; and collaborates with IAM, application security, DBA, cloud, network, and application teams.

Leads application security governance across container platforms, integrating container security and vulnerability management into risk-driven controls. Oversees SCA, SAST, and DAST programs; drives vulnerability prioritization, remediation, and escalation; manages AppSec platforms; establishes secure development standards; and advances automation, metrics, reporting, emerging technologies, and audit-ready controls in partnership with Cloud, Platform, and Application teams.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Define and govern enterprise AI and agentic security architecture. Build controls for agent permissions, tool access, inter-agent trust, LLM threats, AI asset visibility, Shadow AI discovery, and AI security posture management. Embed automated security benchmarks throughout AI development and deployment pipelines, establish enterprise standards, review AI designs, and partner with platform engineering, MLOps, DevOps, IAM, and architecture teams to enable secure, compliant AI adoption.

Provides cybersecurity engineering for mission-critical classified and unclassified systems supporting Cyber Threat Intelligence. Responsibilities include evaluating system and cloud architectures, developing security requirements and documentation, supporting RMF and authorization activities, conducting vulnerability assessments with Nessus, performing continuous monitoring, defining technical countermeasures, and coordinating remediation. The role requires integrating security throughout the systems lifecycle and communicating cybersecurity risks to technical and executive stakeholders.

Serve as the on-site technical lead for deploying, maintaining, and supporting the TECTIX RMF automation platform. Perform security assessments, implement security requirements, support DoD and NIST RMF authorization activities, and maintain STIG compliance. Deploy containerized infrastructure across AWS GovCloud and disconnected environments, manage updates and vulnerabilities, troubleshoot systems, support eMASS integrations, produce RMF artifacts, provide Tier 1 and 2 customer support, train users, and coordinate product enhancements with development teams.

Maintains the security posture and Risk Management Framework compliance of critical mission systems. Responsibilities include continuous network monitoring, identifying and correcting vulnerabilities and compliance gaps, conducting system audits, following security processes, and supporting periodic reaccreditation. The role requires an active TS/SCI clearance with polygraph, IAM Tier 1 certification, and substantial relevant experience in information systems security, NIST 800-53, RMF, and enterprise security architecture.

Performs information system security engineering across the system development lifecycle, integrating security requirements, assessing risks, implementing controls, and supporting RMF and A&A activities. Develops SSPs, SARs, POA&Ms, and other authorization artifacts; evaluates architectures, vulnerabilities, system changes, and security solutions; supports secure system design, testing, configuration management, continuous monitoring, and Cross Domain Solutions. Collaborates with engineers, assessors, program managers, and authorizing officials to maintain cybersecurity and system resiliency.

Design, develop, and implement cybersecurity methodologies, tools, policies, and baselines. Advise stakeholders, manage and deploy security technologies, perform incident identification/response, ensure compliance with NIST/CNSSI frameworks, and maintain system authorization. Position requires an active TS/SCI with polygraph.

Monitor, investigate, and respond to security alerts, phishing, vulnerabilities, and incidents for managed security clients. Conduct threat hunts, collect evidence, identify root causes, perform containment and remediation, and create incident reports and SOPs. Support deployment of security toolsets, collaborate with analysts and engineers, communicate with clients, and participate in after-hours or on-call coverage.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead and grow multiple Code Security products and PM team to drive strategy, roadmap, GTM, pricing/packaging, and execution to achieve large revenue targets. Collaborate cross-functionally with engineering, sales, marketing, and customer teams, represent product externally, mentor PMs, and use data-driven insight to prioritize features and deliver customer value.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Lead product security assessments, threat model features, triage and own vulnerability lifecycle from bug bounty, SAST, fuzzing, and pentests. Build AI/LLM-driven automation and tooling to scale triage and enrichment, mentor engineers, and influence security across distributed cloud products.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

Design, implement, and automate scalable cloud security solutions and baselines across AWS/Azure/GCP. Build guardrails, IAM, detection/monitoring, configuration management, and data protection using IaC (Terraform) and everything-as-code. Collaborate with Product Engineering and security teams, produce technical documentation, and operationalize security tooling.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Lead and execute the firms cybersecurity and operational risk programs, including AI security strategy, incident response, vendor security, compliance (SEC/FINRA/SOC2), secure architecture, and day-to-day security operations. Partner with executives, oversee audits and certifications, and build security awareness across the organization while remaining hands-on with tooling, design reviews, and threat management.

As a Senior Security Engineer at Klaviyo, you'll build secure detection systems, automate response operations, and enhance security observability, driving incident response and threat detection efforts.

The Associate Principal of Security Engineering will manage privileged access systems, implement AI-based security, and enhance security architecture while providing support and leadership in cybersecurity initiatives.

The Security and Compliance Lead ensures data center security through policy development, compliance management, incident response, and staff training while enhancing physical security systems.

Design and build automated compliance engineering systems: continuous evidence collection and control monitoring, integrate cloud and identity tooling, apply LLMs/agents for validation, lead auditor engagements for certifications (ISO, SOC2, CSA STAR), drive remediation with stakeholders, and author compliance documentation and strategy.

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.