Top Cyber Security Jobs

Own OT security engineering for laboratory instruments, automation, and building systems. Translate OT security architecture into controls (segmentation, identity, PAM, PKI), build detection and response, validate vendor integrations, run vulnerability and lifecycle management, and mentor engineers while partnering with SOC, OT engineering, and lab operations.

Senior leader responsible for defining and executing enterprise cybersecurity strategy and roadmap. Oversees security architecture, incident response, assessments, penetration testing, vendor security, policy development, training, KPIs, and budget. Partners with IT and business leaders to align security initiatives and manages the information security team.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Design, operate, and support HashiCorp Vault-based secrets and encryption management across cloud environments. Build Vault namespaces and CI/CD integrations (Terraform, Git, Jenkins), monitor with DataDog/Splunk, onboard applications, perform upgrades/maintenance, and enforce security, compliance, and cloud best practices while collaborating with cross-functional teams.

Lead cloud and SaaS security across AWS and core platforms. Configure and operate CSPM/CNAPP tooling, build detections in SIEM/EDR, drive remediation with platform teams, secure containers and workloads, lead cloud incident response, and implement policy-as-code guardrails for secure deployments and MLOps pipelines.

Support DoD security and compliance for a Kubernetes-based data ecosystem: monitor deployments, run vulnerability scans, maintain continuous monitoring dashboards, prepare SSPs/SARs/POA&Ms, enforce IAM/RBAC/encryption/logging, and produce assessment reports to support ATO and risk remediation.

Support DoD security and compliance for a Kubernetes-based data ecosystem: monitor deployments for RMF/NIST/DoD IL4/IL5 compliance, run vulnerability scans, maintain continuous monitoring dashboards, prepare SSPs/SARs/POA&Ms, enforce IAM/RBAC/encryption/logging, and produce Security & Compliance Assessment Reports supporting ATO and remediation.

Lead and scale the enterprise application security program, embed secure SDLC and DevSecOps practices, integrate SAST/DAST/SCA into CI/CD, run assessments and remediation, advise engineering on architecture and high-risk issues, build governance/metrics, represent AppSec for audits, and mentor application security engineers.

Support DoD cybersecurity compliance and operations by implementing monitoring and zero-trust controls, conducting vulnerability assessments and risk mitigation, managing ATO lifecycles and security documentation (SSP, SAR, POA&M), coordinating with DoD officials, and producing compliance and risk assessment reports for cloud and on-prem environments.

Support DoD data ecosystem security by monitoring and validating Kubernetes and data lake deployments against RMF/NIST/DoD IL4-IL5, conducting vulnerability scans and continuous monitoring, maintaining SSPs/SARs/POA&Ms, enforcing IAM/RBAC/encryption/audit logging, and producing security assessment reports to support ATO and remediation.

Support digital forensics and malware analysis for incident response: analyze digital media and malicious code, investigate and contain security incidents, coordinate with cyber defense teams, and produce forensic documentation and reports to support remediation and closure.

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Implement and maintain GRC solutions, evaluate and configure security controls, inspect system configurations for compliance, analyze machine-generated log/event data, collaborate with stakeholders to remediate risk, and support continuous monitoring and accreditation processes. SES.2 hires take on broader solution development and stakeholder/priority management.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Support the Cyber Security Program by developing software and automation (primarily Python) across Linux/UNIX/Windows; create tools and procedures to improve incident response and vulnerability management; manage parallel tasks and deadlines; at higher level provide technical guidance, design and evaluate information assurance solutions, and automate security workflows.

Lead advanced research integrating cybersecurity, operational technology, and AI to emulate adversary behavior, analyze threats, develop analysis tools, and advise stakeholders. Define data collection and simulation requirements, build and validate specialized software and models, mentor team members, pursue funding, and guide technical strategy to protect critical infrastructure and Federal networks.

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Designs and implements security features and information assurance requirements for servers, workstations, and networks. Analyzes network topology and vulnerabilities, monitors IDS/firewalls and SIEMs, develops documentation and recommendations, supports regulatory reviews, and provides security engineering and integration services to customers.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Lead design and execution of enterprise security for hybrid cloud and AI initiatives. Build Zero Trust identity, AI/model security, data-centric protections, SecOps integration, API/app security, third-party risk, and continuous compliance while enabling cloud ERP migrations and data modernization.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Lead and execute OT/IoT security assessments, design and implement OT security architectures, perform technical testing, produce remediation recommendations and documentation, and guide organizational change for energy/water/manufacturing clients.