Top Cyber Security Jobs

Lead and architect Zeta’s AI-native Application Security function. Define strategy, build and mentor the team, embed security agents and guidance into IDEs, pull requests, CI/CD, and AI/ML pipelines, and implement continuous threat modeling, risk scoring, policy enforcement, and AI-specific adversarial testing. The role also owns security strategy for AI systems, models, prompts, and agents while enabling engineers to design secure AI-native systems.

Lead product security architecture across Expedia Group: advise product and engineering teams, run threat modeling and architecture reviews, embed security and privacy into roadmaps, scale AI-enabled security tooling and automation, mentor teams, and influence org-wide security standards and strategy for cloud-native, microservices environments.

Leads enterprise information security and cloud operations for an AI-driven healthcare platform. Owns cybersecurity strategy, continuous compliance, cloud infrastructure, threat management, identity and access, data protection, incident response, AI security, vendor risk, and regulatory readiness across HITRUST, ISO 27001, ISO 42001, HIPAA, FDA, and GxP requirements.

Lead product security architecture, perform threat modeling and architecture reviews, embed security and privacy into product roadmaps, drive AI-enabled security automation, mentor teams, and influence security strategy across cloud-native, microservices environments.

Lead product security architecture across Expedia Group: advise engineering and product teams, run threat modeling and architecture reviews, embed security and privacy into roadmaps, drive AI-enabled security automation and continuous verification, mentor teams, and shape long-term security strategy for cloud-native, microservices environments.

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Leads enterprise security engineering, architecture, cloud and security platform operations, AI security governance, incident response, compliance, and technical team development. Designs controls for AI systems, manages cybersecurity technologies, supports audits and regulatory engagements, mentors security staff, and serves as the designated backup to the CISO. The role combines strategic leadership with hands-on technical execution and executive collaboration.

Leads enterprise AI tooling and security engineering, designing scalable cloud platforms and secure AI applications. Responsibilities include protecting models, agents, prompts, data, APIs, and outputs; securing the AI/ML lifecycle; implementing identity, encryption, monitoring, threat detection, adversarial testing, and incident response; and establishing engineering standards. The role mentors engineers, influences architecture and technology strategy, and partners with governance, risk, compliance, and business teams to support responsible AI adoption.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Support and improve enterprise cryptographic platforms, including PKI, TLS certificates, cloud key management services, and HSMs. Manage certificate issuance, renewal, revocation, validation, key rotation, monitoring, and incident troubleshooting. Build scripting and API-based automation using Python, PowerShell, or Bash. Contribute to post-quantum cryptography readiness through cryptographic inventories, vulnerability assessments, crypto-agility reviews, and evaluation of emerging standards.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Designs and improves enterprise security across endpoints, SaaS, cloud, identity, AI tooling, corporate networks, and infrastructure. Develops SIEM, SOAR, and EDR detections, alerts, automation, monitoring, and incident response workflows. Leads security investigations and remediation, strengthens access controls and hardening standards, reviews SaaS and vendor security, and establishes governance for AI-related risks including data exposure and prompt injection.

Leads application security, vulnerability management, threat detection, AI-driven security automation, and security engineering. Administers SAST, DAST, SCA, SIEM, EDR, IAM, and cloud security platforms; develops MITRE ATT&CK-mapped detections; investigates Tier 2/3 incidents; builds Python-based automation and AI agent integrations; supports architecture reviews, penetration testing, policy development, threat intelligence, compliance, and security reporting.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Supports cloud, application, endpoint, and infrastructure security across AWS environments. Responsibilities include monitoring CrowdStrike, Microsoft Defender, SIEM, IDS/IPS, and Datadog alerts; maintaining security tools and CI/CD scanning; triaging vulnerabilities; assisting with incident response; reviewing AWS security findings; supporting IAM, encryption, VPN, and certificate controls; and maintaining SOC 2 audit documentation. The role collaborates with DevOps and engineering teams on secure coding and security posture improvements.

Lead the design of secure AI and machine learning architectures, including LLM pipelines and automated decision systems. Conduct AI threat modeling, develop governance standards, evaluate security technologies and vendors, and ensure regulatory and framework compliance. Partner with engineering, data science, legal, and leadership teams on security-by-design. Create technical documentation and data flow diagrams while mentoring security professionals and data scientists.

Build and operate security log pipelines, SIEM detections, endpoint controls, security automation, and internal tooling across AWS, macOS, Windows, CI/CD, and infrastructure repositories. Develop primarily in Python, implement Terraform-based infrastructure and policy-as-code safeguards, integrate security tools through APIs, and embed scanning and secrets detection into developer workflows. Own the reliability and coverage of security platforms while independently driving projects and implementing fixes directly in systems managed by other teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Leads cybersecurity architecture for software applications and platforms within wealth management. Drives secure product design, evaluates current and emerging technologies, establishes target architectures, and guides business and technical stakeholders. Oversees alignment with enterprise frameworks, regulatory requirements, scalability, resilience, and software development lifecycle practices. Serves as a subject matter expert in architecture governance and collaborates across teams to deliver secure, high-volume enterprise solutions.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and vulnerability assessments. Designs and maintains security solutions across databases, networks, cloud, authentication, applications, and endpoints. Reviews security logs, recommends remediation, supports risk management and compliance, collaborates with senior stakeholders, and leads a team. Requires database security and administration expertise, scripting skills, on-call availability, and hybrid work at a posted location.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and design of security solutions across databases, cloud, networking, authentication, applications, and endpoints. Reviews security logs, identifies vulnerabilities, performs risk assessments, recommends remediation, and supports security standards and frameworks. Leads teams, collaborates with senior stakeholders, and participates in on-call support within a hybrid work environment.

Leads web application security engineering for enterprise environments, providing security consulting, audit and control support, solution design, testing, documentation, log correlation, vulnerability identification, risk assessments, and remediation recommendations. Supports Layer 7 security technologies, change activities, application engagements, and process improvements while collaborating with stakeholders and managing multiple complex initiatives.

Leads complex information security incident response, investigations, digital forensics, security consulting, vulnerability assessment, and remediation. Designs and maintains advanced security solutions across databases, networks, cloud, authentication, applications, and endpoints. Reviews security logs, performs risk assessments, advises internal stakeholders, and leads teams. The role requires database security and administration expertise, scripting, security tools, cloud technologies, standards knowledge, on-call support, and hybrid work.