Top Cyber Security Jobs

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Designs and implements security features and information assurance requirements for servers, workstations, and networks. Analyzes network topology and vulnerabilities, monitors IDS/firewalls and SIEMs, develops documentation and recommendations, supports regulatory reviews, and provides security engineering and integration services to customers.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Lead design and execution of enterprise security for hybrid cloud and AI initiatives. Build Zero Trust identity, AI/model security, data-centric protections, SecOps integration, API/app security, third-party risk, and continuous compliance while enabling cloud ERP migrations and data modernization.

Lead and execute OT/IoT security assessments, design and implement OT security architectures, perform technical testing, produce remediation recommendations and documentation, and guide organizational change for energy/water/manufacturing clients.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Lead security engineering for an AI-native cybersecurity product: architect product security, build and evolve operational security and incident response, collaborate with ML engineers to integrate security into AI agents, implement protections and automation, and represent Cogent externally through writing and speaking.

Support CHIA's cybersecurity program by monitoring cloud and on-prem security infrastructure, generating metrics and reports, performing threat research, participating in incident response and IT audits, maintaining security systems, vetting software, and supporting Azure and Microsoft enterprise security configurations.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Perform information security incident response, spam and malware analysis, correlate logs across Exchange, workstations and Mimecast, analyze IDS/IPS alerts, assess vulnerabilities/penetration testing, research threats daily, and produce reports with remediation recommendations.

Manage the RMF lifecycle and ATO documentation, ensure NIST 800-53 and federal compliance, track and remediate POA&Ms, support security assessments and audits, coordinate with ISSM/DevSecOps, and report security posture and incidents to stakeholders.

Design and operate cloud infrastructure security for multi-tenant environments: architect multi-account AWS isolation, harden Kubernetes, deploy CSPM, enforce IaC guardrails, implement least-privilege IAM across platforms, and build incident response and logging pipelines for enterprise customers.

Lead and manage daily SOC/SFC operations, integrate threat intelligence into detection and response, oversee physical security systems, manage vendors, and drive cross-functional incident investigations, emergency preparedness, and strategic security programs.

Lead and execute security governance, risk, and compliance activities including SOC 2 and regulatory compliance audits, internal control testing, GRC platform administration, enterprise risk register maintenance, remediation tracking, and cross-functional policy and questionnaire support. Produce audit reports, dashboards, and risk reporting to leadership.

Implement and operate security controls on AWS, perform vulnerability scanning and remediation, support ATO evidence for NIST 800-53/FedRAMP, run continuous-monitoring and threat-detection tooling, partner with DevSecOps to automate security, and support incident response and forensics.

Responsible for reducing IT security risk and responding to incidents by enforcing security policies, administering and troubleshooting security tools, documenting procedures, researching mitigation controls, and monitoring/advising on security issues across servers, networks, cloud, authentication, encryption, and applications.

Lead and coordinate IT security projects: create and execute work plans, assign resources, manage risks, review project documentation, apply project management best practices, and ensure projects meet stakeholder objectives.

Serve as the ISSO for cloud environments using Microsoft security products. Author control implementation statements, perform vulnerability scans, produce risk-based reports, assist remediation, enforce RMF-compliant controls, and collaborate with customer security teams to translate policy into operational procedures.

Provide legal counsel on information security, privacy, and compliance for software, AI/SaaS/cloud, and professional services contracts. Negotiate security/privacy terms, liaise with commercial, security, sales, and technical teams, ensure contractual alignment with internal controls and global regulations, and develop standard contract language and playbooks for telecom/ISP customers worldwide.

Provide program, physical, and personnel security support for classified DoD programs. Administer NISPOM and DoD security procedures, manage classified material control and inventories, conduct briefings and training, respond to intrusion alerts, assist investigations and audits, maintain security documentation and systems (SIMS), and support ISSO duties as needed.

Lead design and implementation of security architectures, drive incident response and risk management, manage SOC1/2 compliance and third-party risk requests, mentor engineers, integrate AI tools to improve security operations, and coordinate cross-functional security initiatives.

Lead technical strategy and architecture for application security across WAF, WAAP, DDoS, API security, bot defense, TLS, identity, and AI/ML detection. Drive modernization to cloud-native, SaaS, and API-driven services, enforce secure-by-design patterns, mentor senior architects, perform threat modeling, and align cross-functional teams on compliance, telemetry, and scalable runtime defenses.

Lead enterprise-wide cybersecurity programs from strategy through execution: define outcomes, build roadmaps, manage workstreams, budgets, KPIs, governance, risk mitigation, change management, stakeholder communication, and executive reporting to deliver complex cross-functional initiatives.