Top Cyber Security Jobs

Lead incident response and investigations, tune SIEM correlation rules, automate SOC tasks with PowerShell and Python, use regex for log parsing, perform proactive threat hunting, collaborate cross-functionally, and improve cloud IR, logging, and detection capabilities.

Perform NIST-based security control assessments and risk assessments, develop and review System Security Plans (SSP), produce SAR/RAR and POA&Ms, support SA&A (C&A) and contingency planning, and liaise with system owners and executives. Provide clear written and verbal deliverables and operate independently on security assessment tasks.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Lead information security governance, risk, and compliance: own ISMS and policy portfolio, map ISO 27001 to NIST CSF, run security maturity assessments, manage third-party risk, administer security awareness and phishing programs, partner with Legal on privacy (HIPAA/GDPR), coordinate audits/certifications, and mentor GRC staff while setting standards and remediation roadmaps.

Support and manage information assurance for systems/enclaves: implement and enforce security policies, perform RMF-based authorization activities, conduct vulnerability/risk assessments, manage configuration and changes, prepare SSP/C&A/SRTM documentation, evaluate security solutions for classified processing, and provide day-to-day security operations and oversight.

Design, deploy, and manage cybersecurity tools and monitoring across IT environments. Lead evaluations, proofs-of-concept, and integration of security technologies. Support incident response, forensics, vulnerability assessments, documentation, and security policy development. Train infrastructure staff and coordinate with Corporate Security.

Extract security data from NRC systems and produce routine and ad-hoc security reports (counts/types of attacks, patch metrics, security matrix) to support security monitoring and stakeholder reporting.

Pull security-related data from NRC systems, produce regular and ad-hoc security reports (attack counts/types, patching metrics), maintain security matrices, and deliver analysis to stakeholders.

Senior security leader partnering with North America P&C business and technology teams to align security strategy with business priorities, drive remediation and secure-by-design adoption, build a remediation Center of Excellence, improve governance and metrics, and accelerate risk reduction across a federated technology landscape.

Design, configure, and maintain security controls across endpoints, networks, applications, and cloud; investigate and remediate complex security issues; monitor threats and vulnerabilities; mentor junior engineers; collaborate with IT and business partners to embed security and communicate risks to stakeholders.

Lead Information Systems Security Engineer responsible for designing, building, and sustaining DSCA's security automation architecture in AWS. Translate RMF/NIST/DISA STIG regulatory requirements into Policy-as-Code and automated operational code. Serve as lead technical authority for enterprise-level cloud security engineering, configuration management, compliance validation, and orchestration.

Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.

Lead cloud security for GCP and Azure by operationalizing CNAPP tooling, embedding security-as-code with Terraform/CI-CD, driving vulnerability management, improving detection and response with Chronicle, hardening data and endpoint security, and mentoring engineers while serving as senior escalation during incidents.

Lead accreditation efforts, perform risk assessments, and manage cybersecurity engineering and secure SDLC practices. Collaborate with cross-functional teams to ensure system and application security, implement risk management frameworks, and drive compliance and secure software development processes.

Lead security architecture and strategy for a private cloud platform, driving threat modeling, secure design, vulnerability management, and secure-by-default platform hardening. Guide product security roadmaps, embed security in the SDLC, mentor engineering leaders, support incident investigations, and ensure compliance with industry standards for telco, aerospace, defense, and industrial deployments.

Lead and coordinate the college p information security program: develop policy and standards, run awareness and training, perform risk and vulnerability assessments, manage incident response, oversee security configuration and firewall audits, collaborate with ITS and vendors, and ensure compliance with relevant laws and standards.

Lead end-to-end delivery of network security and cyber resilience solutions (Zero Trust, segmentation, NAC, firewalls), translate designs into implementation roadmaps, identify and drive remediation of security weaknesses, ensure alignment with architecture, risk, and operational resilience, and coordinate stakeholders across engineering, operations, vendors, and global teams.

Lead research and analysis on cloud-native security, create thought leadership, advise clients and vendors, present at events, support sales and peer review, mentor junior analysts, and improve research processes. Provide actionable guidance on cloud security architectures, vendor selection, and the intersection of cloud security with GenAI. Travel up to 25%.

Lead design and delivery of enterprise network security and wireless solutions (Zero Trust, segmentation, firewalls, WLC/AP deployments). Manage end-to-end solution delivery, assess and remediate security weaknesses, align with stakeholders, and ensure operational readiness and regulatory compliance.

Entry-level Information Security Engineer role to build and scale internal security systems, analyze security telemetry, design and implement detection technologies, perform risk analysis on infrastructure, and execute security engineering projects to improve intrusion detection, scanning, testing, and response for Appian's cloud and AI platform.

Lead and mature the Written Information Security Program for Lennar Financial Services, translate regulatory and contractual risk into controls, manage audits/exams and board reporting, drive vendor risk and incident governance, maintain the LFS risk register, and mentor security risk associates while coordinating security budget and enterprise alignment.

Participate in live security operations, cloud architecture defense, and compliance automation. Execute continuous monitoring, assess security risks and vulnerabilities across SaaS/PaaS/IaaS, design automation for control evaluations, and collaborate with cross-functional teams to advance Appian's global information security program.

Support and operate security infrastructure across hybrid cloud and datacenter environments. Configure and maintain security tools (e.g., Defender, IDS, firewalls), respond to incidents and tickets, validate and remediate CVEs, participate in disaster recovery and on-call rotations, lead security implementations, and provide security training and documentation.

Lead and technically oversee the GRC cybersecurity program, manage and mentor the security team, assess and report risk posture, review vulnerability/pen test results, drive remediation, liaise on business continuity, and oversee third-party security risk and security awareness initiatives.

Serve as the primary or supporting security engineering representative on engineering teams to design, develop, implement, evaluate, and integrate secure networking, computing, enclave, and IA architectures. Support trusted relationships among external systems, apply IA policy, and lead Zero Trust efforts. Support security planning, assessment, risk analysis, and risk management.