Top Cyber Security Jobs

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Provides onsite industrial cybersecurity support across automotive manufacturing facilities. Implements and manages manufacturing cybersecurity controls and standards, coordinates initiatives with plant and corporate teams, supports vulnerability and incident management, reports progress, and promotes adherence to industrial cybersecurity practices. Requires plant-floor experience with industrial IT systems and controls, cybersecurity education or certification, strong communication skills, and flexibility for occasional off-shift support and travel.

Lead strategy and technical execution of vulnerability management, offensive security, and AI-augmented defenses. Own full VM lifecycle, integrate scanning and asset systems, automate remediation, generate security insights, define KPIs/SLAs, advise executives, and mentor engineers to improve organizational security posture and compliance.

Develop, deploy, configure, and maintain cybersecurity tools and defensive solutions across on-premise and cloud environments supporting NGA networks. Troubleshoot network security issues, manage architectures and inventories, evaluate emerging technologies, recommend upgrades, and provide technical reports and briefings. The role requires active TS/SCI clearance, DoD cybersecurity certifications, enterprise network security expertise, and support for occasional off-hours work.

Administers security and compliance for Kubernetes and data lake environments supporting a DoD customer. Responsibilities include RMF, NIST 800-53, and DoD IL4/IL5 compliance monitoring; vulnerability scanning; continuous monitoring; ATO documentation; SSP, SAR, and POA&M maintenance; IAM, RBAC, encryption, and audit logging enforcement; and security assessment reporting. The role requires an active Secret clearance and supports cloud and hybrid environments.

Design, develop, and operate security automation workflows for detection, investigation, triage, and response at scale. Build SOAR integrations with SIEM, EDR, CTI, ticketing, and SaaS platforms; develop LLM-powered analysis and response capabilities; and improve reliability, scalability, monitoring, and operational performance of AI-SOC systems. Collaborate with SOC and incident response teams to implement automated detection scenarios and resolve production incidents.

Supports Linux infrastructure and R&D researchers with a focus on cloud security. Responsibilities include cybersecurity compliance, cloud administration, automation, configuration management, patching, compute and storage deployment, container management, scripting, centralized infrastructure support, and research partnerships. The role provides hands-on onsite infrastructure support in Fort Collins and requires lifting up to 50 pounds.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads SAP Security, GRC, and compliance activities across complex SAP landscapes. Designs roles and authorization controls, manages GRC Access Control, Process Control, and Risk Management, oversees provisioning and emergency access, performs SoD and risk analysis, supports SOX and other audits, investigates incidents, manages third-party support, and advises technical and business stakeholders.

Partner with enterprise business units to manage security risk registers, conduct architecture reviews and threat modeling, provide security expertise, prioritize remediation, and drive bug closure. The role requires translating security frameworks into business-relevant risk, communicating with senior stakeholders, and applying sound judgment to AI-assisted security analysis. Responsibilities and autonomy vary across Senior Analyst, Lead, and Senior Lead levels.

Supports Department of Defense cybersecurity authorization efforts for cloud, hybrid, and vendor-supported systems. Executes RMF and ATO activities, develops and maintains authorization documentation, coordinates security control implementation, tracks vulnerabilities and POA&M items, supports continuous monitoring, and collaborates with system owners, engineers, assessors, vendors, and interagency stakeholders. Identifies risks, documentation gaps, dependencies, and authorization blockers while driving packages toward completion.

Leads pre-sales identity architecture and consulting engagements for enterprise customers. Designs IAM strategies, maturity assessments, transformation roadmaps, and secure solutions spanning authentication, authorization, IGA, PAM, NHI, and related technologies. Conducts discovery sessions, workshops, assessments, technical presentations, vendor evaluations, and proposal development while partnering with sales and delivery teams. Provides executive and technical guidance, supports identity modernization and migrations, develops reusable offerings, and mentors team members.

Leads enterprise network security assessments and analyzes architecture, controls, telemetry, vulnerabilities, and technical debt. Develops Zero Trust, segmentation, NAC, firewall, and ZTNA strategies, target architectures, roadmaps, and risk-reduction plans. Partners with engineering and security teams to validate findings, define remediation, and drive milestones. Communicates risks to technical and executive audiences, contributes to security standards and metrics, evaluates emerging technologies, and functionally leads workstreams without direct people management.

Analyzes network, security, asset, configuration, and vulnerability data to identify risks, technical debt, control gaps, and security weaknesses. Builds queries, dashboards, metrics, and reports; validates findings with cross-functional teams; supports network segmentation, Zero Trust, NAC, firewall, and proxy initiatives; maintains risk inventories; and translates technical analysis into remediation plans and leadership-ready recommendations.

Lead product security programs covering software supply chain governance, component provenance, SBOMs, licensing, vulnerability risks, automated security QA, static analysis, fuzzing, and secure SDLC practices. Manage and grow a team of software engineers, advise product teams, select security tools, support regulatory compliance, monitor emerging threats, and represent the company at industry events.

Lead cloud security engineering across AWS, Azure, and GCP by aligning security strategy with business and regulatory requirements. Identify and remediate security deficiencies, develop baselines and compliance monitoring, automate security capabilities, document controls and runbooks, mentor cybersecurity engineers, and partner with stakeholders to implement secure technologies. The role also supports vulnerability management, SIEM, IAM, container security, infrastructure as code, and enterprise-scale cloud solutions.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Design and implement secure architectures for a multi-tenant GPU cloud platform. Conduct threat modeling, security assessments, code reviews, penetration testing, and incident response. Manage SIEM, WAF, and EDR tools; develop security improvements with engineering teams; support compliance with SOC 2, ISO 27001, GDPR, NIST, and CIS Controls; maintain security documentation; and train development teams on secure practices.

Provides hands-on cloud security design, engineering, implementation, and oversight for Oracle Cloud Infrastructure and PeopleSoft environments. Designs secure landing zones, networks, access controls, and OCI security services; implements CSPM, monitoring, logging, and SIEM integrations; identifies and remediates risks, vulnerabilities, and compliance gaps; supports application, API, IAM, and DevSecOps security; and collaborates with technical teams on architecture reviews, documentation, and security recommendations.

Secure enterprise and PeopleSoft data hosted in OCI by implementing Oracle database controls, encryption, auditing, privileged access governance, hardening, and integration security. The consultant secures APIs, SOAP/REST services, data flows, and identity integrations; monitors cloud database activity; investigates security issues; supports compliance and risk remediation; and collaborates with IAM, application security, DBA, cloud, network, and application teams.

Leads application security governance across container platforms, integrating container security and vulnerability management into risk-driven controls. Oversees SCA, SAST, and DAST programs; drives vulnerability prioritization, remediation, and escalation; manages AppSec platforms; establishes secure development standards; and advances automation, metrics, reporting, emerging technologies, and audit-ready controls in partnership with Cloud, Platform, and Application teams.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Define and govern enterprise AI and agentic security architecture. Build controls for agent permissions, tool access, inter-agent trust, LLM threats, AI asset visibility, Shadow AI discovery, and AI security posture management. Embed automated security benchmarks throughout AI development and deployment pipelines, establish enterprise standards, review AI designs, and partner with platform engineering, MLOps, DevOps, IAM, and architecture teams to enable secure, compliant AI adoption.