Top Cyber Security Jobs

Lead cybersecurity evaluations, define item boundaries and cybersecurity concepts, and perform ISO/SAE 21434-compliant threat analysis and risk assessments (TARA). Define and manage security requirements and risk treatments for self-driving platform features, collaborate with engineering and safety teams across the product lifecycle, and maintain standards compliance across multiple projects.

Lead and drive the vehicle cybersecurity roadmap across platforms, managing requirements, risk-based triage, feature design, implementation, verification, and release reporting. Coordinate cross-functional and external OEM/supplier teams, partner with fleet operations to mitigate operational friction, and ensure architectures meet automotive security standards and regulations.

Lead enterprise detection engineering across cloud, on‑premises, and OT/ICS environments. Own detection strategy, data pipelines, detection content (SIEM/EDR/XDR), purple‑team validation, automation/AI integration, governance, metrics, and executive reporting. Manage distributed teams, build capabilities, and coordinate with security, IT, legal, and business stakeholders to mature detection posture.

Manage, configure, secure, and maintain the Enterprise Security System (ESS) environment including servers, databases, storage, and security platforms. Support integrations, monitoring, SLAs, ITIL-aligned processes, documentation, disaster recovery, performance reporting, and after-hours/surge support to ensure resilient, compliant enterprise security services.

Manage, configure, secure, and maintain the Enterprise Security System environment (servers, databases, storage, access control, intrusion detection). Ensure operational resilience, compliance, integrations, monitoring, SLAs, maintenance windows, documentation, ITIL-aligned processes, and provide PPS, after-hours, and surge support.

Lead development and execution of infrastructure security strategy and roadmap across on-prem, cloud, and hybrid environments. Establish standards, implement controls (servers, endpoints, network, cloud, containers), drive automation (IaC, policy-as-code), manage security tooling lifecycle, measure KPIs/KRIs, remediate risks, mentor engineers, and partner with cross-functional teams to enable secure technology delivery and incident response.

Manage, configure, secure, and maintain the Enterprise Security System environment (servers, databases, storage, security platforms). Support integrations, monitoring, SLAs, maintenance windows, ITIL processes, documentation, disaster recovery, performance reporting, and provide PPS/after-hours/surge support.

Lead and operationalize the enterprise application security program across internal and third-party applications, APIs, cloud-native and containerized workloads. Define secure SDLC/DevSecOps standards, integrate automated testing into CI/CD, manage AppSec tooling lifecycle, perform threat modeling and architecture reviews, mentor engineers, manage third‑party risk, and report metrics to technical and executive stakeholders.

Provide cybersecurity program support for NOAA satellite systems: document security control implementations, maintain System Security Plans and Contingency Plans, manage POA&Ms, coordinate security assessments and penetration tests, monitor vulnerability scanning and patch management, support audits and continuous monitoring, and coordinate with system administrators and stakeholders.

Provide ISSO support for NOAA satellite operations: develop and maintain security documentation (SSPs, contingency plans), manage POA&Ms, coordinate vulnerability management, assessments, authorizations, incident response, and continuous monitoring while advising system owners and coordinating with administrators and operations teams.

Maintain and interpret cybersecurity compliance standards (NERC CIP, NIST, ISO, etc.), administer internal control systems, support audits, investigate non-compliance, design corrective actions, and identify automation opportunities while collaborating with plant teams and stakeholders.

Lead IT controls assessments and program evaluations for federal clients: conduct interviews, review artifacts, test controls against federal standards, document findings, develop remediation plans, and mentor junior staff.

Conduct FISMA/RMF security control assessments per NIST standards; perform control testing, interviews, and evidence reviews; document SARs and ATO artifacts; identify control gaps and POA&Ms with remediation guidance; coordinate with system owners and ISSOs; support continuous monitoring and agency cybersecurity compliance for cloud and inherited controls.

Lead and mature enterprise IT security: monitor threats, build incident response and GRC programs, enforce NIST 800-171 compliance, guide IT/network teams, maintain security tools, and report to VP of IT.

Serve as the cybersecurity SME for the generation fleet: lead segmented architecture deployments and vulnerability remediation, develop fleet-wide standards, oversee compliance audits, lead incident root-cause analysis, build dashboards/metrics, and represent cybersecurity on capital projects and plant upgrades.

Design, implement, and maintain AWS security controls and secure architectures. Build automated IaC compliance checks, integrate security into CI/CD, manage logging/monitoring, perform threat modeling and vulnerability assessments, support incident detection/response, and align cloud environments with security frameworks and regulatory requirements.

Senior director-level security advisor owning security for assigned portfolios: advise on cyber risk, prioritize remediation, review application and cloud architecture, drive security program adoption, produce risk reporting, support incidents and regulatory/audit activities, and influence senior stakeholders to remediate material risks.

Design, build, and harden security-critical systems: manage KMS and key management, protect PHI/PII, secure storage and tenant isolation, embed security in SDLC and CI/CD, lead threat modeling, and improve security scanning and compliance.

Design, implement, and operate network and infrastructure security controls (WAF, IPS, DDoS) in production; automate deployments and validations; partner with internal teams; secure cloud and containerized environments (AWS/GCP, Kubernetes); ensure compliance with FedRAMP/DoD IL4; support U.S. Federal contracts requiring U.S. citizenship and security-clearance eligibility.

Lead IIoT product security architecture and governance across the device lifecycle. Define secure hardware/firmware controls, enforce industrial security standards, perform threat modeling and risk management, coordinate vulnerability response and supply chain security, and advise cross-functional teams during incidents and product design.

Design, build, and maintain automated API and security test frameworks. Validate authentication, authorization, rate limiting, and error handling. Conduct fuzzing, token validation, access control testing, and integrate tests into CI/CD. Analyze failures, test integrations, ensure API contract adherence, and mentor automation engineers to improve coverage and reliability.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Lead technical discovery and solution design for enterprise identity and privileged access management opportunities. Build reference architectures, guide PoC/PoV engagements, present to executive and technical stakeholders, collaborate with Sales Engineering, Product and Sales leadership, and represent Keeper at customer and market events while staying current on identity security landscape.

Design, build, and maintain secure software and systems for DoD environments. Perform vulnerability scanning, penetration testing, incident response, and automate security tooling. Integrate DevSecOps and SSDLC practices, implement identity and encryption controls, and develop ML models for anomaly detection and proactive threat hunting.

Lead identity architecture strategy and hands-on implementation for enterprise identity security. Define target-state architectures, PAM, identity governance, cloud identity, directory services, and Zero Trust models. Provide technical authority, integration designs, migration strategies, and mentor engineering teams while ensuring compliance, security, and alignment with business objectives.