Top Cyber Security Jobs

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Build and maintain an AI-native application security program for autonomous trucking software and infrastructure. Partner with engineering teams on secure design and remediation, investigate vulnerabilities, threat model systems, contribute production code, develop security automation and developer tooling, and integrate preventative controls into the software development lifecycle. Use AI to scale investigations while validating results and explaining technical reasoning.

Provides hands-on technical leadership for enterprise AI security and supporting infrastructure. Responsibilities include designing AI security frameworks, reference architectures, threat models, privacy controls, secure pipelines, and proof-of-concept implementations. The role applies MITRE ATLAS, NIST, and emerging AI standards; secures hybrid and cloud environments using Zero Trust; conducts assessments; supports governance, compliance, audits, and risk management; and advises cross-functional engineering, legal, privacy, architecture, and business teams.

Monitors, detects, investigates, and responds to enterprise cybersecurity threats within a Security Operations Center. Responsibilities include SIEM and EDR alert triage, incident response, endpoint and identity threat analysis, cloud security monitoring, vulnerability remediation support, and investigation of phishing, malware, ransomware, and unauthorized access. The analyst also supports Zero Trust initiatives, SOAR automation, playbook development, root-cause analysis, and continuous improvement of security operations.

Supports Cisco security consulting projects under mentorship. Responsibilities include attending design and configuration sessions, gathering customer requirements, defining integration goals, analyzing security policies and configurations, and recommending improvements. The intern will learn to design policies for identity services, firewalls, visibility, and cloud solutions, while developing customer automation capabilities using Java, Python, C++, Ansible, Chef, Terraform, and Cisco APIs.

Leads cybersecurity risk identification and mitigation, application governance, access controls, incident response, security awareness, and OT infrastructure management at a manufacturing site. Owns manufacturing data health, application compliance, cybersecurity governance, vendor relationships, and digital capability initiatives. Works onsite five days weekly in Mehoopany, Pennsylvania, supporting operational resilience and loss elimination.

Supports information, personnel, program, physical, operations, and communications security activities. Responsibilities include RMF and continuous monitoring, clearance administration, access management, insider threat programs, security documentation, audits, COMSEC accountability, compliance tracking, and coordination with internal and government stakeholders. The role includes mentorship and formal instruction while developing expertise across government security disciplines.

Leads global Security Operations Enablement, overseeing data engineering, analytics, SIEM/SOAR engineering, security platform strategy, automation, governance, architecture, vendor relationships, and performance. Manages a team of 20+ engineers while partnering with incident response, cyber defense, threat management, security engineering, and enterprise architecture leaders to deliver scalable detection and response capabilities.

Supports DoD cybersecurity and Risk Management Framework activities, including Assessment and Authorization, security incident response, vulnerability and threat assessment, compliance with NIST and NISPOM standards, cybersecurity program maintenance, employee training, and liaison work with government personnel. The role serves in a mid-level ISSO capacity and requires eligibility for a Secret clearance.

Serves as a first-level escalation point for firewall access, network troubleshooting, VPN connectivity, and security incidents. Designs and implements approved Palo Alto firewall changes, reviews policies, interprets traffic and threat logs, performs operational checks, and supports upgrades. The analyst troubleshoots network and application connectivity, coordinates equipment replacements, assists security engineering with threat mitigation, and escalates complex issues. Occasional after-hours or weekend support may be required.

Own the organization’s infrastructure and application security posture across Azure, AKS, on-premises systems, and client applications. Lead vulnerability management, penetration testing, IAM hardening, container and CI/CD security, incident response, compliance readiness for SOC 2 and GDPR, client security requirements, and audit coordination. Develop runbooks, detection logic, remediation plans, and leadership metrics while partnering with engineering, DevOps, offshore teams, auditors, vendors, and clients.

Supports cybersecurity governance, risk, and compliance activities, including policy and control documentation, risk register maintenance, third-party vendor assessments, security awareness campaigns, audits, vulnerability metrics, and compliance reporting. The intern develops dashboards, reports, and presentations while collaborating with Information Security and GRC teams to improve organizational security processes.

Drives application security initiatives for complex desktop CAD software, including secure SDLC controls, threat modeling, architecture reviews, vulnerability remediation, and security requirements. Leads SOC 2 readiness, annual assessments, audits, DevSecOps and CI/CD security integration, and rollout of SAST, DAST, and SCA tools. Partners with engineering, security, compliance, and external stakeholders to address AI security, cloud-connected components, open-source risks, incident response, and product security standards.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.

Designs, implements, and maintains information security systems and network security infrastructure for an intelligence customer. Responsibilities include RMF and A&A compliance, security policy and documentation, incident response, vulnerability remediation, audit and log analysis, security configuration, infrastructure troubleshooting, and AWS-based security solutions. The engineer supports firewalls, gateways, IDS, load balancers, and monitoring tools while collaborating with developers, system engineers, project managers, and users.

Lead cybersecurity detection and response operations, including complex incident handling, alert triage, SIEM rule authoring and tuning, threat hunting, playbook development, and response automation. Mentor SOC analysts, establish documentation and escalation standards, conduct post-incident reviews, and drive remediation and detection strategy improvements. Present technical findings to executives and influence cross-functional security outcomes.

Administer and improve the organization’s information security program, including Zero Trust, endpoint, email, and security awareness platforms. Triage alerts and phishing threats, coordinate incident response and remediation, manage vulnerabilities and misconfigurations, maintain security documentation, track security posture metrics, support audits, and provide leadership reporting. The role also communicates security practices to employees and coordinates security activities with IT, engineering, and operations teams.

Participate in IT security operations, including cataloging on-premises and cloud log sources, maintaining SIEM reporting, analyzing and improving alerts, reviewing security events, supporting audit compliance, correlating changes with tickets, identifying malicious activity, and conducting vulnerability scans. The intern will work with security technologies such as SIEM, DLP, antivirus, firewalls, DAST, SAST, and file integrity monitoring while developing practical information security experience.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM and SAP policies, developing security procedures, identifying risks and vulnerabilities, conducting facility compliance reviews, tracking corrective actions, investigating classified information compromises, overseeing subordinate facilities, briefing personnel, and supporting security training and awareness programs.

Leads cybersecurity compliance and information assurance for large-scale Department of State enterprise IT environments. Responsibilities include maintaining security controls, monitoring vulnerabilities and threats, coordinating remediation, conducting audits and assessments, reviewing infrastructure and engineering designs, supporting RMF and A&A activities, maintaining SSPs and POA&Ms, and ensuring compliance with FISMA, NIST, and federal security requirements across infrastructure, networks, hosting, identity, and enterprise services.

Build and improve platform security for software operating across cloud, factory, edge, and air-gapped environments. Responsibilities include implementing identity, access control, secrets management, data protection, and system boundaries; hardening Kubernetes, Linux, cloud, and edge deployments; securing software supply chains; automating CI/CD security controls; conducting threat modeling and vulnerability remediation; and supporting accreditation through technical controls, evidence, and system designs.

Own security for cloud and ML infrastructure, including tenant isolation, GPU cluster security, model protection, vulnerability management, network segmentation, monitoring, access governance, and credential management. Lead infrastructure security projects and establish technical standards and guardrails in partnership with Security, DevOps, Engineering, IT, and ML teams. The role also supports incident response, CSPM, sandboxing, container isolation, and SOC 2 readiness.

Design, implement, and harden enterprise security controls across endpoints, identity, networks, and data. Configure security platforms, develop Python and Go automation, maintain macOS, Linux, and Windows security baselines, support network security and vulnerability management, and contribute to SIEM detection pipelines. The role partners with IT and Engineering, delivers scoped security projects, and participates in an on-call rotation.

Reviews and assesses RMF authorization documentation for classified information systems, including security plans, control matrices, monitoring plans, and incident response artifacts. Evaluates technical compliance with information assurance directives, performs security design and threat assessments, documents POA&Ms and risk reports, conducts site assessments, and supports incident response activities. The role requires experience with NIST controls, Windows or Linux, virtualization or cloud environments, Splunk, and DoD security compliance.