Top Cyber Security Jobs

Design, build, and maintain secure software and FSHs compliance posture for public-sector customers. Adapt security practices, work with auditors, create frameworks with engineers, present security posture to customers, iterate on product, and help define engineering culture.

Administer, monitor, and improve the credit union’s cybersecurity technologies and controls. Configure and operate firewalls, IDS/IPS, SIEM, endpoint protection, DLP, CASB, and related tools. Perform threat monitoring, incident response, vulnerability assessments, patch validation, forensic support, and security testing. Support compliance, audits, BCP/DR/IR exercises, policy development, security awareness, and vendor coordination. Create automations, documentation, and reports to strengthen security posture.

Conduct penetration tests across web, mobile, and API applications to identify vulnerabilities. Partner with engineering teams to provide secure coding guidance, remediate findings, and embed security into product development. Communicate risks clearly and work autonomously to improve application security posture.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Lead platform security for Gallup's cloud and infrastructure: advise engineering teams on secure design, implement and tune security controls (Splunk SIEM, EDR), perform CSPM and vulnerability assessments, lead incident response, build automation and scripts, and embed shift-left security practices.

Lead and perform advanced penetration tests across the banks global technology environment. Hunt for high-risk vulnerabilities, exploit chains, document findings, articulate risk to stakeholders, mentor junior engineers, and collaborate with security and business partners to improve detection and response.

Design, govern, and review enterprise and solution architectures for hybrid (shore-side and shipboard) environments, embedding cybersecurity, risk management, and regulatory compliance. Lead security architecture reviews, vulnerability management (Qualys, Orca, Snyk), CMDB/configuration practices, disaster recovery and vendor oversight, and communicate technical risk and roadmaps to stakeholders.

Serve as lead for security of Special Access Program networks: develop A&A packages, perform RMF assessments, conduct vulnerability testing and audit reviews, implement STIGs/patching/scanning, support threat and risk assessments, and produce security documentation and training. Use ACAS, SCAP, XACTA, and eMASS to maintain compliance and reduce vulnerabilities.

Lead architecture and execution of detection and response capabilities across AWS and broader infrastructure. Build AI-augmented detection/triage pipelines, design SIEM/SOAR ingestion and alerting frameworks, drive incident response for high-impact events, close detection gaps, mentor engineers, and set team standards for responsible AI usage.

Lead advanced security monitoring, incident response, and risk assessments for financial systems. Support SOX/ITGC controls, system implementations, audits, and remediation; partner with application, infrastructure, and governance teams to embed security into delivery and improve controls and processes.

Lead AppSec across the SDLC: design and implement application security controls, perform hands-on testing of web apps/APIs/cloud services, integrate automated security tooling into CI/CD, reduce developer friction, review architecture and code, support vulnerability management and incident response, evaluate third-party risks, and ensure healthcare regulatory compliance (e.g., HIPAA, GDPR).

Support information systems security for a federal customer: perform RMF tasks, security audits, monitor network traffic, detect/respond to incidents, manage system ATO processes, mentor staff, and assist senior ISSOs with cyber research and secure data transfers.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Embed security across hardware and software product lifecycles for thermal printers and scanners. Lead threat modeling, SSDLC practices, vulnerability response, security assessments, customer security inquiries, and mentor engineers while aligning with corporate security standards.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Act as senior cybersecurity advisor to executive business and technology leaders, align security strategy with business objectives, identify and mitigate risks, embed security-by-design across initiatives, influence prioritization of controls and investments, ensure compliance with regulatory/internal standards, and communicate metrics and risk to non-technical stakeholders.

Support IC missions by implementing and enforcing information systems security policies and NIST RMF controls. Prepare and maintain SSPs, SRTMs, C&A packages; perform vulnerability and risk assessments; manage configuration and day-to-day security operations; evaluate security solutions for classified processing; administer authentication mechanisms and maintain operational IA posture.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Produce client briefings, mentor junior operators, and improve operational tooling and efficiency.

Lead enterprise security orchestration strategy and architecture across SOAR platforms (Splunk SOAR, Tines), drive AI‑enabled automation, governance, and integrations with enterprise tooling, mentor engineers, and ensure measurable operational outcomes like MTTR reduction, analyst efficiency, and resilient, auditable automation at scale.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Provide written and oral client briefings, mentor junior operators, and create scripts to improve operational efficiency.

Lead the security product surface for Lambda's cloud: define and deliver IAM and KMS features, tenant isolation, audit and compliance capabilities, and partner with security and platform engineering to prioritize enterprise-enabling security while minimizing customer friction.

Lead and continuously improve the enterprise information security and risk program, manage security operations, cloud/application/infrastructure security, vulnerability and threat management, risk assessments, policy and awareness, incident response, and a security team. Advise senior leaders, embed security-by-design, ensure compliance, and translate strategy into measurable roadmaps that balance protection with business needs.

Conduct offensive cyber operations, red team and penetration tests, network exploitation, malware analysis, and tool development. Analyze network/system weaknesses, brief clients and management, and train junior operators to improve operational tradecraft and efficiency.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.