Top Cyber Security Jobs

Define and drive Security Operations strategy at the intersection of Identity and AI. Analyze IAM and AI roadmaps, perform threat modeling, build security frameworks for AI-enabled systems and agentic workloads, identify capability gaps, incubate new security approaches, and partner with engineering and security teams to influence long-term direction and operational readiness.

Design and operate secure research infrastructure for multi-cloud, high-compute AI workstreams. Harden CI/CD and IaC, implement supply-chain protections (SBOM, signing), sandbox automated agents with least privilege, enforce zero-trust segmentation and data protection, and enable compliance to support partnerships with frontier model providers.

Build and own Corporate IT and security for a research org: design endpoint/device management, implement Zero-Trust IAM, secure communications and email, enable secure collaboration with external AI labs, and turn compliance into research enabler while remaining a hands-on operator.

Administer and maintain RACF security profiles and rules on z/OS; troubleshoot security incidents; provide 24/7 on-call support; support mainframe upgrades, migrations, and DR tests; document processes; automate IAM processes; and work with audit and compliance teams to ensure IAM standards.

Lead modernization of enterprise access controls and cloud entitlement management across AWS, Azure, GCP and SaaS. Drive RBAC/ABAC/PBAC/JIT adoption, entitlement analytics, SOD controls, automation/AI-enabled workflows, role engineering, and cross-functional stakeholder engagement to reduce access risk and improve access lifecycle efficiency.

Senior network/security engineer responsible for Palo Alto firewall and Panorama administration, proxy engineering, DLP and SCM integration, packet-level troubleshooting (tcpdump/Wireshark), SIEM log correlation (Splunk/ELK), Zero Trust network design, and ensuring IRS/NIST boundary protection compliance. Leads firewall normalization, Panorama 12.x integration with Strata Cloud Manager, and DLP plugin upgrades.

Protect Lambda's AI cloud by building and tuning SIEM/EDR detections, responding to incidents, hardening production systems, reviewing architectures and code, and shipping security tooling (Python/Go). Partner across engineering teams to mature detection, incident response, and automation for AI-specific threats.

Support and manage information system security posture: implement/enforce policies, perform vulnerability and risk assessments, manage configuration and changes, prepare SSPs/C&A/SRTMs, support NIST RMF authorization, evaluate security solutions for classified processing, oversee contractor ISSOs, and liaise with stakeholders.

Administer and maintain RACF security profiles, implement and review RACF rules, troubleshoot access incidents (including rotating 24/7 on-call), support mainframe upgrades/migrations/disaster recovery tests, document processes, automate improvements, and collaborate with audit and compliance teams to ensure IAM standards are met.

Provide IAM subject-matter expertise and client-facing support for access management, governance, and controls. Administer ARM, access reviews, entitlement recertification, SPOC activities, and remediation. Partner with business, technology, risk, and audit teams to identify and mitigate access risks, support compliance and audits, drive process improvements and automation, and educate stakeholders to ensure adherence to security policies.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Partner with LOB and technology leaders to identify and prioritize information security risks, provide guidance on policies and controls, support application security and cloud security initiatives, conduct risk and control assessments, monitor security trends, advise on remediation and compliance, and participate in risk management and business continuity routines.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Lead strategy to define and scale technical skilling for Microsoft's global Security Solutions Specialist community. Use sales and field data, market intelligence, and AI-enabled analytics to identify capability gaps, design skilling frameworks, drive adoption, measure impact, and advise senior leaders to accelerate security and AI-driven customer outcomes.

Lead enterprise process design and continuous improvement for cybersecurity technology delivery. Drive cross-functional transformation, facilitate workshops, apply Lean Six Sigma methods, define success measures, track outcomes, and embed continuous improvement to reduce risk, improve controls, and strengthen delivery consistency and user experience.

Lead Microsoft's global Security partner strategy to accelerate customer adoption, consumption, and value realization via partner-led motions. Drive strategy, analytics, governance, partner readiness, and cross-functional alignment; generate insights from partner and product data; manage strategic programs and stakeholder communications; mentor team members and continuously optimize partner ecosystem performance.

Lead customer-facing Identity and Access Management (IAM) engagements on the Microsoft Cloud, design and deliver secure identity architectures (AD, MIM, AD FS, Entra ID), implement hybrid identity, MFA, Conditional Access and privileged access controls, apply Zero Trust, remediate identity risks, support audits/compliance, and build trusted technical relationships with federal customers.

Lead global technical skilling strategy for Microsoft Security Solution Engineers: define capability frameworks, analyze field and performance data to identify gaps, design scalable AI-enabled learning and assessment, advise senior leaders, partner across product/engineering/enablement, drive adoption and measure impact, and build high-performing risk and capability practices.

Lead process engineering and continuous improvement for cybersecurity technology portfolios. Conduct process discovery, redesign, documentation, root-cause analysis, and governance. Design and implement workflow automations and reporting using tools like Power Automate, Power BI, Alteryx, SQL, and Python. Facilitate stakeholder workshops, establish metrics, and drive adoption of scalable, data-driven operational solutions.

Lead incident response and investigations, tune SIEM correlation rules, automate SOC tasks with PowerShell and Python, use regex for log parsing, perform proactive threat hunting, collaborate cross-functionally, and improve cloud IR, logging, and detection capabilities.

Perform NIST-based security control assessments and risk assessments, develop and review System Security Plans (SSP), produce SAR/RAR and POA&Ms, support SA&A (C&A) and contingency planning, and liaise with system owners and executives. Provide clear written and verbal deliverables and operate independently on security assessment tasks.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Senior technical leader defining and delivering enterprise security architecture and roadmaps. Advises executives, drives secure solution design across cloud, identity, application, data, automation and AI security domains, mentors architects, and partners on governance, control modernization, and vendor integration to improve cyber resilience.

Lead information security governance, risk, and compliance: own ISMS and policy portfolio, map ISO 27001 to NIST CSF, run security maturity assessments, manage third-party risk, administer security awareness and phishing programs, partner with Legal on privacy (HIPAA/GDPR), coordinate audits/certifications, and mentor GRC staff while setting standards and remediation roadmaps.

Design, deploy, and manage cybersecurity tools and monitoring across IT environments. Lead evaluations, proofs-of-concept, and integration of security technologies. Support incident response, forensics, vulnerability assessments, documentation, and security policy development. Train infrastructure staff and coordinate with Corporate Security.