Top Cyber Security Jobs

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead delivery of cybersecurity strategy and advisory engagements as the primary client contact. Conduct security and maturity assessments, risk analyses, program roadmaps, workshops, and executive presentations. Mentor junior staff, support scoping/proposals, collaborate with GRC and engineering teams, and contribute to practice development and business development activities.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Enterprise CISO responsible for cybersecurity strategy, resilience, governance, and regulatory compliance (including NERC CIP). Leads cyber risk management, incident response, OT/ICS protection, identity/access, cloud security, DevSecOps, AI security, third-party risk, and builds a high-performing security organization while advising executives and the Board.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Perform automated and manual application security analysis (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers with remediation and secure design, conduct threat modeling, document findings, and stay current on vulnerabilities and mitigation strategies.

Serve as an Information Systems Security Officer responsible for security and compliance of IT application systems. Support Certification & Accreditation activities, prepare System Security Plans, track POA&Ms, conduct risk assessments and vulnerability testing, maintain contingency and disaster recovery plans, and ensure compliance with FISMA/NIST standards while coordinating with ISSM and government stakeholders.

Lead and execute product security testing (DAST, SCA, API, pen tests), analyze exploitability, verify fixes, produce security assessment reports, contribute to secure SDLC, threat modeling, tool evaluation, customer/partner security responses, and maintain lab deployments for testing.

Monitor and analyze security events across enterprise systems, tune and operate Splunk ES, investigate incidents, perform threat hunting, onboard log sources, optimize detections to reduce false positives, and collaborate with cross-functional teams to drive remediation and document playbooks and procedures.

Designs, implements, and operates enterprise security solutions; monitors and responds to security events; leads vulnerability assessments; creates security policies and procedures; ensures regulatory/HIPAA compliance; mentors IT security staff and coordinates with vendors and compliance teams to improve security posture.

Lead application security efforts: perform automated and manual analyses (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers on secure design and remediation, lead threat modeling and documentation. Work on mission-critical DoD software; must be U.S. citizen and able to obtain DoD Secret clearance.

Lead application security code reviews and risk assessments; use automated application security testing and integrate testing into DevSecOps/CI-CD pipelines; review architecture, source code, IaC, and deployments; evaluate cloud, network, and enterprise security; provide remediation guidance, technical writing, training, and mentoring; support federal cybersecurity compliance and secure development lifecycle requirements.

Administer, integrate, automate, and optimize enterprise security tools. Develop APIs, scripts, and automation for tool interoperability. Design vulnerability scanning strategies and SIEM data models. Build dashboards and alerts for SOC/CDM stakeholders, aggregate logs and asset data, support audit readiness, and use CI/CD, containers, and cloud-native automation to improve security engineering workflows.

Implement and integrate Black Duck application security products for enterprise customers on the West Coast. Drive customer onboarding, training, solution design, custom integrations into SDLC/DevOps, and own delivery from project initiation to completion while advising on secure development practices.

Operate as a strategic adversary to compromise critical assets, design and execute high-impact offensive campaigns, develop custom exploits and tooling, prioritize business risk, partner with engineering to remediate root causes, and teach teams to harden systems across the company.

Lead information security risk analysis and compliance efforts across UMB, advising stakeholders on risk treatment, supporting PCI-DSS assessments, audits, and metrics collection, and maintaining current knowledge of security frameworks and regulations while managing multiple workstreams and communicating findings to leadership.

Lead cybersecurity governance, RMF coordination, and compliance for a federal technology program. Develop and maintain assessment documentation, manage POA&Ms, support ATO and contingency planning, coordinate vulnerability management and incident response, and integrate security into engineering, cloud, DevSecOps, and product delivery.

Perform SAST/DAST and vulnerability assessments, create FISMA threat models, support incident response, document system security and contingency plans, harden Linux and cloud infrastructure, advise development teams on secure coding and cryptography, and ensure compliance with federal security controls.

Serve as a subject-matter expert in access management and mainframe security (RACF/z/OS). Resolve complex access issues, support audits and incident response, maintain certificates, automate monitoring and reporting, mentor junior staff, participate in 24/7 on-call rotation, and implement security controls across enterprise systems using ServiceNow and related tools.

Lead development and execution of the enterprise security roadmap by translating risks into prioritized initiatives, coordinating cross-functional delivery, tracking milestones and metrics, and embedding security across identity, cloud, and network domains. Drive program visibility, build business cases and roadmaps, mentor staff, and partner with IT and business leaders to improve security operating models and outcomes.

Lead design and operation of an enterprise cybersecurity program: architect detection and response, manage Defender XDR/SIEM/MDR and endpoints, run incident response and forensics, perform audits, vulnerability assessments and pen tests, enforce NIST/ITAR controls, automate security workflows, and develop change control and security awareness programs.

Serve as primary SIEM/SOC escalation point: investigate and triage network security events, document findings, communicate with stakeholders, tune detections, oversee threat and vulnerability management, implement automations with platform teams, and lead brand collaboration calls. Provide incident response, threat intelligence analysis, and occasional on-call support across a global enterprise.

Lead product strategy and roadmaps for security engineering solutions across cloud, on-prem, and hybrid environments. Translate regulatory and stakeholder requirements into prioritized backlogs and user stories, drive DevSecOps and automation initiatives, manage agile delivery teams, and measure outcomes to reduce risk and improve efficiency.

Build and operate Flox's security program: deploy and manage SIEM/SOC, harden AWS and Cloudflare, implement IaC/CSPM/SAST/SCA scanning, manage endpoint protection, secure the software supply chain, run incident response, and own identity and access controls.

Design, build, and secure resilient REST API integrations and cloud-native connections to support enterprise data access management. Develop security architecture artifacts, automation/orchestration, testing, and documentation. Support DLP and CASB initiatives, advise engineering teams, implement IAM and encryption controls, and ensure alignment with federal cybersecurity standards and compliance.