Top Cyber Security Jobs

Ensure privileged access controls meet IAM standards across platforms; partner with governance to measure and report controls; define PAM requirements for technology partners; apply PAM best practices and modernization efforts; identify and remediate PAM risks; educate stakeholders; support audits and provide senior management reporting to reduce sustained risk.

Lead ISSO responsible for securing classified systems: configuration management, forensic evidence preservation, security assessments and A&A, incident detection/remediation, policy compliance with NRO/IC/DoD, and mentoring Level 1/2 ISSOs. Must operate independently and coordinate with government and contractor stakeholders.

Design, deploy, and automate network security controls across enterprise, cloud, and retail edge environments. Implement ZTNA, NGFWs, microsegmentation, and firewall policy-as-code. Integrate identity and authentication frameworks, triage security events, produce documentation and RCAs, mentor engineers, and participate in on-call rotation to maintain resilient security posture.

Lead end-to-end program management for a broad security platform portfolio, coordinating cross-functional stakeholders, tracking deliverables and KPIs, driving alignment without direct authority, supporting onboarding and platform transitions, and proactively surfacing and resolving risks while maintaining program rhythms and leadership reporting.

Design and maintain OT security architecture; monitor, manage, and respond to OT security events; integrate and verify security controls in OT engineering projects; perform threat modeling and develop detection/use cases; develop and maintain OT security automation and orchestration tools; support GRC vendor and supply chain assessments; create reports, dashboards, metrics, standards, and procedures; present findings to senior management. Periodic travel to manufacturing sites.

Lead consulting engagements as a partner-level advisor, driving profitable growth, CXO relationships, and large-scale security and resiliency transformations. Scope and negotiate engagements, oversee delivery and margins, develop talent, and shape strategy and thought leadership to expand Kyndryl's consulting footprint.

Serve as the ISSO for USMS P30: perform RMF A&A activities, develop and maintain security artifacts (SSP, POA&M), conduct NIST 800-53A control assessments, CSAM-based assessment planning, continuous monitoring, incident response support, risk analysis, and remediation tracking to ensure DOJ compliance.

Design, implement, and manage RACF-based logical security across z/OS environments. Administer user/group and resource profiles, enforce least-privilege for datasets and subsystems, perform access reviews and compliance audits, analyze SMF/RACF logs and SIEM alerts, investigate incidents, integrate mainframe security with enterprise IAM/SSO/MFA, and support encryption and key management.

Own and administer enterprise WAN/LAN/wireless and multi-vendor firewalls across on-prem and cloud, ensure network performance and 99% uptime, manage GCP org governance, support CMMC Level 2 and SOC 2 audit readiness, resolve Tier 2+ network incidents, maintain network documentation, and contribute to automation and hybrid cloud networking solutions.

Implement and maintain security controls across AWS GovCloud and hybrid networks; manage network security (firewalls, WAFs), SIEM integration, vulnerability management, and incident response; ensure compliance with DoD standards (STIGs, RMF, NIST 800-53); support continuous monitoring, audit readiness, and cross-team security improvements.

Design, build, and maintain secure software and FSHs compliance posture for public-sector customers. Adapt security practices, work with auditors, create frameworks with engineers, present security posture to customers, iterate on product, and help define engineering culture.

Administer, monitor, and improve the credit union’s cybersecurity technologies and controls. Configure and operate firewalls, IDS/IPS, SIEM, endpoint protection, DLP, CASB, and related tools. Perform threat monitoring, incident response, vulnerability assessments, patch validation, forensic support, and security testing. Support compliance, audits, BCP/DR/IR exercises, policy development, security awareness, and vendor coordination. Create automations, documentation, and reports to strengthen security posture.

Conduct penetration tests across web, mobile, and API applications to identify vulnerabilities. Partner with engineering teams to provide secure coding guidance, remediate findings, and embed security into product development. Communicate risks clearly and work autonomously to improve application security posture.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Lead platform security for Gallup's cloud and infrastructure: advise engineering teams on secure design, implement and tune security controls (Splunk SIEM, EDR), perform CSPM and vulnerability assessments, lead incident response, build automation and scripts, and embed shift-left security practices.

Lead and perform advanced penetration tests across the banks global technology environment. Hunt for high-risk vulnerabilities, exploit chains, document findings, articulate risk to stakeholders, mentor junior engineers, and collaborate with security and business partners to improve detection and response.

Design, govern, and review enterprise and solution architectures for hybrid (shore-side and shipboard) environments, embedding cybersecurity, risk management, and regulatory compliance. Lead security architecture reviews, vulnerability management (Qualys, Orca, Snyk), CMDB/configuration practices, disaster recovery and vendor oversight, and communicate technical risk and roadmaps to stakeholders.

Serve as lead for security of Special Access Program networks: develop A&A packages, perform RMF assessments, conduct vulnerability testing and audit reviews, implement STIGs/patching/scanning, support threat and risk assessments, and produce security documentation and training. Use ACAS, SCAP, XACTA, and eMASS to maintain compliance and reduce vulnerabilities.

Lead architecture and execution of detection and response capabilities across AWS and broader infrastructure. Build AI-augmented detection/triage pipelines, design SIEM/SOAR ingestion and alerting frameworks, drive incident response for high-impact events, close detection gaps, mentor engineers, and set team standards for responsible AI usage.

Lead advanced security monitoring, incident response, and risk assessments for financial systems. Support SOX/ITGC controls, system implementations, audits, and remediation; partner with application, infrastructure, and governance teams to embed security into delivery and improve controls and processes.

Lead AppSec across the SDLC: design and implement application security controls, perform hands-on testing of web apps/APIs/cloud services, integrate automated security tooling into CI/CD, reduce developer friction, review architecture and code, support vulnerability management and incident response, evaluate third-party risks, and ensure healthcare regulatory compliance (e.g., HIPAA, GDPR).

Support information systems security for a federal customer: perform RMF tasks, security audits, monitor network traffic, detect/respond to incidents, manage system ATO processes, mentor staff, and assist senior ISSOs with cyber research and secure data transfers.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Embed security across hardware and software product lifecycles for thermal printers and scanners. Lead threat modeling, SSDLC practices, vulnerability response, security assessments, customer security inquiries, and mentor engineers while aligning with corporate security standards.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.