Top Cyber Security Jobs

Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.

Designs and implements security controls for backend services and multi-cloud infrastructure. Conducts security reviews, remediates vulnerabilities and misconfigurations, secures CI/CD pipelines, and embeds secure design practices across engineering teams. The role also supports responsible AI and LLM adoption, mentors junior engineers, and champions security and privacy.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Oversee the security posture of classified information systems and develop RMF authorization documentation, including SSPs, POA&Ms, control traceability matrices, inventories, and network diagrams. Implement security policies aligned with government standards, guide program personnel, coordinate secure configurations and patching, support change control, conduct vulnerability and risk assessments, and assist with continuous monitoring and certification activities. The role is fully onsite in Denver and requires U.S. citizenship plus TS/SCI eligibility.

Own the enterprise Application Security product roadmap, evaluate SAST/DAST/SCA tools, develop AI application-security strategies, partner with engineering teams, govern vulnerability disposition, and communicate cybersecurity risks to executives. The role requires extensive cybersecurity, AppSec, product management, metrics, risk governance, cloud-native, vulnerability management, and people leadership experience.

Secure IBM i (IBMi) servers and applications to prevent unauthorized access; produce audit evidence for ICFR/SOC/HITRUST; manage security reporting and investigations; build security reports using security tools, programming and SQL; review, prioritize, and remediate vulnerabilities.

Build and operate security solutions for detection engineering, threat hunting, incident response, and threat intelligence. Investigate security incidents, perform root-cause analysis, monitor systems, and help scale a world-class SOC. The role involves large-scale distributed systems, endpoint and cloud security technologies, collaboration across platform teams, project ownership, and participation in on-call rotations.

Architect, develop, optimize, and maintain AI-enhanced access security features and backend services. Integrate LLMs and AI workflows for identity intelligence, risk detection, and remediation. Lead architecture, design, testing, performance, reliability, and production readiness for enterprise systems. Deliver features end to end, collaborate cross-functionally, conduct code reviews, and mentor engineers while improving scalability, maintainability, and security.

Leads Enterprise Security services, setting and enforcing security standards across identity, endpoints, business applications, cloud infrastructure, networking, IoT, and automation. Partners with IT, SOC, vulnerability management, governance, and threat operations teams to secure applications, monitor environments, manage EDR policies, remediate vulnerabilities, assess risks, and maintain compliance. Also drives AI security initiatives and uses AI tools to improve enterprise security capabilities and team efficiency.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Lead offensive security engagements across corporate, cloud, application, and mobile environments, including red, purple, and orange team exercises. Develop covert engagement infrastructure, custom implants, payloads, and exploits; model threats and killchains; assess detection coverage; produce remediation-focused reports; support incident response; and advise security teams on vulnerabilities, threat intelligence, and defensive improvements.

Serve as a strategic and operational partner to the CISO by leading InfoSec planning, operating reviews, metrics, risk management, workflows, dashboards, knowledge management, and cross-functional security programs. Establish change-management and continuous-improvement practices, translate technical risks into executive decisions, and build, coach, and manage a team of Technical Program Managers.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.

Build and operate threat detection systems across cloud, endpoint, identity, email, and application environments. Own detection lifecycles, detection-as-code workflows, data pipelines, CI/CD, integrations, threat intelligence enrichment, and AI-assisted security capabilities. Partner with Security Operations and engineering teams on investigations, incident response, threat hunting, and automation. The role requires strong Python and SQL skills, SIEM expertise, cloud and Linux knowledge, and independent project leadership.

Lead cloud security architecture and threat hunting across enterprise cloud environments. Partner with engineering, product, and risk teams to embed secure-by-design controls, conduct threat models and risk assessments, review infrastructure-as-code, develop preventive and detective controls, and operationalize detections with cybersecurity teams. Analyze large datasets, improve alerting and incident-response playbooks, investigate cloud threats, and provide expertise on adversary tradecraft and emerging risks.

Lead Security Engineer responsible for designing and building secure Python-based services, conducting threat modeling, vulnerability assessments, secure code development/reviews, and integrating AI-assisted security practices across cloud, container, and CI/CD environments while working with stakeholders to ensure auditability and resiliency.

Lead detection and response for blockchain and enterprise environments: design security strategy, develop detections and playbooks, analyze on-chain/off-chain signals, drive investigations and remediation, use enterprise AI to accelerate threat intelligence, and collaborate across teams to improve monitoring and security posture.

Lead design and build secure, resilient cloud-native distributed systems; write Java/Python production code (Spring); perform threat modeling, vulnerability remediation, incident response, and ensure audit-defensible security controls and SDLC practices. Mentor engineers and validate AI-assisted security outputs.

Join Notion's Detection and Response team as a Security Operations Engineer, focusing on investigating security events and mentoring junior engineers, ensuring operational excellence in security practices.

Own enterprise security reference architectures, secure-by-design standards, and modernization roadmaps. Lead architecture transformation, threat modeling, risk reviews, and regulatory control mapping across Azure and hybrid environments. Build AI-enabled security automation, guide distributed delivery teams, review designs, mentor engineers, and align security architecture with operations, compliance, product, and platform stakeholders.

Manage industrial security and classified program compliance for SCIF operations. Oversee NISPOM, DoD, and ICD 705 adherence; personnel clearance processes; security training; inspections; incident investigations; corrective actions; and liaison activities with DCSA, SSOs, and government representatives. Support classified program proposals and collaborate with engineering and program teams to implement security measures.

Supports the authorization, operation, and continuous monitoring of classified information systems. Responsibilities include RMF activities, security documentation, vulnerability and POA&M tracking, control assessments, incident response, compliance monitoring, security inspections, and collaboration with ISSMs, engineers, developers, DevSecOps teams, Government stakeholders, and mission users. The role also provides security guidance across Agile and cloud-based development environments.

Develop advanced threat detection capabilities, custom alert logic, threat-hunting exercises, and real-time incident response processes. The role collaborates with Red and Purple Teams, researches emerging threats, improves security visibility, contributes to security architecture and controls, and supports security assessments. Responsibilities include Kubernetes-focused detection, multiple query and programming languages, endpoint event analysis, incident containment, remediation, and occasional after-hours on-call participation.

Build and operate security infrastructure, including SIEM systems, large-scale data pipelines, searchable data lakes, and security observability capabilities. Integrate infrastructure sources, acquire and process high-volume logs, and support detection, threat hunting, and insider-risk programs. Collaborate with security, data platform, and infrastructure teams to deliver reliable, scalable solutions using Go or Python, Kubernetes, Elasticsearch, and related technologies.

Leads cybersecurity governance, capability maturity, risk assessments, and enterprise risk-reduction initiatives. Manages and mentors cybersecurity professionals, advises on security tools and platforms, develops risk and threat classification frameworks, and coordinates continuous improvement programs. The role evaluates controls, capabilities, tooling, threats, and vulnerabilities; communicates remediation recommendations to leadership; supports cybersecurity metrics and dashboards; and drives consistent control design, testing, and reporting across cyber programs.