Top Cyber Security Jobs

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Build and operate cloud-native security services and platforms. Own components end-to-end, improve availability, scalability, and security of distributed systems, participate in on-call, incident response, design reviews, and deliver tooling, automation, and documentation to improve developer security and reliability.

Design, build, automate, and operate network security controls across AWS, GCP, private cloud, and enterprise environments. Lead security architecture initiatives, implement zero trust and SASE solutions, assess infrastructure designs, and support firewalls, WAF, DDoS, and IPS/IDS controls. Partner with cybersecurity and trust teams on policies and compliance, mentor engineers, document architectures, and participate in production on-call support.

Lead design and delivery of secure storage software across OS, kernel drivers, microservices and containerized environments. Act as security consultant, manage vulnerability backlog and remediation, influence architecture and compliance (FIPS, Common Criteria, DISA STIG), mentor engineers, and evaluate vendors and technologies to ensure product security and certification readiness.

Own Mercor’s security GRC and compliance programs, including continuous SOC 2 monitoring, ISO 27001 certification, customer audits, third-party risk, policy lifecycle management, controls-as-code, data-handling procedures, and enterprise security questionnaires. Build the company’s first GRC function, automate evidence collection and questionnaire responses, manage auditor and customer relationships, and support frameworks such as HIPAA, FedRAMP, and EU AI Act conformity.

Build and secure scalable backend services for an AI product, focusing on authentication, authorization, data isolation, threat monitoring, secrets and key management, vulnerability management, audit logging, and enterprise data protection. Partner with security, compliance, product, and engineering teams to identify trust-boundary issues and deliver pragmatic security improvements. Contribute to cloud infrastructure, compliance initiatives, and general backend engineering in a fast-moving startup environment.

Designs, implements, administers, and continuously improves enterprise cybersecurity capabilities. Responsibilities include threat and vulnerability identification, complex incident investigation and response, security architecture, security controls, risk assessments, compliance audits, policy development, security application management, automation, reporting, and awareness training. The role supports HIPAA, PCI, NIST, and other standards, leads security projects, mentors junior staff, and participates in a 24/7 on-call rotation.

Leads the enterprise cybersecurity program, including strategy, governance, risk management, compliance, security architecture, incident response, vulnerability management, vendor risk, and audit readiness. Oversees Microsoft security environments, ISO 27001 certification readiness, HITRUST and HIPAA compliance, security policies, remediation, and organizational awareness. Reports cybersecurity posture to executives, manages security teams and programs, and coordinates with IT, business stakeholders, auditors, regulators, and vendors.

Designs, integrates, operates, and maintains security monitoring, auditing, logging, alerting, and telemetry capabilities across F5’s distributed cloud platform. Responsibilities include integrating SIEM and EDR tools, tuning alerts, improving incident detection and forensic readiness, and embedding DevSecOps controls such as vulnerability scanning, compliance checks, secret management, and threat detection into CI/CD pipelines. The role also uses AI-assisted security tooling and may require on-call and weekend work.

Designs and enhances monitoring, detection, observability, logging, and incident response capabilities for F5’s distributed cloud platform. The role integrates SIEM, SOAR, EDR/XDR, APM, and cloud security tools; improves telemetry quality and vulnerability remediation; maintains SIEM deployments; automates security and compliance through Infrastructure as Code; and supports incident response through 24/7 on-call rotations.

Designs, integrates, operates, and maintains security monitoring and auditing across F5’s global cloud platform. Develops logging, telemetry, metrics, alerts, and SIEM integrations; tunes detections; supports incident response and forensic readiness; and uses generative AI to improve investigations and automate security workflows. The role partners with engineering, SRE, compliance, and business teams and may require on-call and weekend shifts.

Supports information security and privacy initiatives across programs, projects, systems, applications, and vendor engagements. Maintains GRC records, security policies, standards, procedures, system security plans, controls documentation, risk assessments, and security diagrams. Participates in PMO projects, reviews contracts for security protections, supports compliance efforts, and communicates security requirements to business stakeholders. Requires at least three years of information security GRC experience and familiarity with NIST, ISO 27001, or COBIT.

Own CAG’s information-security program and roadmap while performing hands-on security operations. Responsibilities include incident response, EDR and email-security administration, identity and Microsoft 365 security, phishing response, vulnerability management, security awareness, governance, risk and compliance, vendor and SOC management, executive reporting, acquisition due diligence, and business continuity planning.

Implements, maintains, and optimizes enterprise endpoint security controls across client and server environments. Handles complex endpoint incidents, monitors telemetry and compliance, tests security agents and policies, troubleshoots endpoint issues, and coordinates remediation. Manages EDR, CASB, antivirus, DLP, encryption, MDM, and related platforms while supporting access reviews, audits, governance, documentation, dashboards, and continuous security improvement.

Leads cloud security architecture and implementation, focusing on data privacy, GDPR compliance, Kubernetes security, mTLS, RBAC, zero-trust networking, audit logging, threat modeling, and vulnerability assessments. Collaborates across teams, mentors junior engineers, documents security practices, monitors industry trends, and drives resilient, compliant cloud infrastructure.

Manages the organization’s Security Operations Center, including 24/7 monitoring, threat detection, incident response, security controls, vendors, staffing, budgets, and service delivery. Acts as Incident Commander, leads containment and recovery decisions, tunes detection logic, develops response procedures, reports security metrics, and provides executive updates. The role also mentors staff, supports audits and disaster recovery, evaluates security technologies, and maintains awareness of emerging vulnerabilities.

Defines and governs enterprise network security architecture across on-premises, cloud, hybrid, and third-party environments. Leads firewall, segmentation, Zero Trust, secure access, and cloud connectivity design; conducts risk assessments and security reviews; establishes standards and policies; evaluates security technologies and vendors; supports compliance audits; advises stakeholders; and mentors security engineers and analysts.

Recognized as a senior security expert, this role independently resolves complex cybersecurity challenges, defines methods for new assignments, provides strategic direction, and collaborates across teams. The engineer leads high-impact security projects, develops innovative solutions aligned with business needs, and drives enterprise-wide improvements to security practices and operational efficiency.

Support cybersecurity governance, risk, and compliance activities across the organization. Maintain SSPs, POA&Ms, risk registers, policies, and compliance documentation; coordinate CMMC and NIST RMF activities; support audits, assessments, continuous monitoring, incident response documentation, and remediation tracking. Work with engineering and IT teams to validate security controls, interpret requirements, and strengthen the organization’s cybersecurity posture.

Serves as a fractional security leader for SMB clients, developing security roadmaps, conducting risk assessments, guiding compliance with major frameworks, coordinating incident response, overseeing security-stack adoption, assessing vendor risk, and managing client relationships. The role translates complex cybersecurity concepts into practical business guidance while balancing multiple engagements and priorities.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Performs vulnerability scanning, STIG compliance assessments, security control analysis, and remediation coordination. Maintains Tenable.sc and Nessus, integrates security data with Splunk, develops risk dashboards and reports, supports RMF activities and audits, and validates system hardening. Provides security operations support in a 24/7 environment while troubleshooting scan issues and collaborating with administrators and security teams.

Provides cybersecurity and RMF support for DoD systems and applications, including security control assessments, ATO package development, vulnerability remediation, audit and compliance activities, executive reporting, and software certification. Serves as a cybersecurity subject matter expert, leads ISSOs, coordinates with senior government and contractor stakeholders, and supports classified and unclassified environments. Travel is required approximately 25% of the time.

Administers and secures enterprise network infrastructure, including firewalls, IDS/IPS, VPNs, switches, routers, and wireless systems. Monitors traffic and SIEM alerts, investigates and responds to incidents, remediates vulnerabilities, and supports network troubleshooting, performance, disaster recovery, compliance, audits, and documentation. The role collaborates with cybersecurity teams, vendors, and internal stakeholders to maintain reliable and resilient municipal systems.

Leads cybersecurity engineering and DoD Risk Management Framework activities for Navy information systems. Develops RMF artifacts, conducts vulnerability and risk assessments, applies STIGs and SRGs, supports A&A and ATO processes, performs continuous monitoring and compliance testing, and coordinates remediation. Advises government stakeholders, prepares technical documentation and CDRL deliverables, and mentors junior ISSE personnel.