Top Cyber Security Jobs

Perform SAST/DAST and vulnerability assessments, create FISMA threat models, support incident response, document system security and contingency plans, harden Linux and cloud infrastructure, advise development teams on secure coding and cryptography, and ensure compliance with federal security controls.

Lead design and operation of an enterprise cybersecurity program: architect detection and response, manage Defender XDR/SIEM/MDR and endpoints, run incident response and forensics, perform audits, vulnerability assessments and pen tests, enforce NIST/ITAR controls, automate security workflows, and develop change control and security awareness programs.

Serve as a subject-matter expert in access management and mainframe security (RACF/z/OS). Resolve complex access issues, support audits and incident response, maintain certificates, automate monitoring and reporting, mentor junior staff, participate in 24/7 on-call rotation, and implement security controls across enterprise systems using ServiceNow and related tools.

Lead development and execution of the enterprise security roadmap by translating risks into prioritized initiatives, coordinating cross-functional delivery, tracking milestones and metrics, and embedding security across identity, cloud, and network domains. Drive program visibility, build business cases and roadmaps, mentor staff, and partner with IT and business leaders to improve security operating models and outcomes.

Lead product strategy and roadmaps for security engineering solutions across cloud, on-prem, and hybrid environments. Translate regulatory and stakeholder requirements into prioritized backlogs and user stories, drive DevSecOps and automation initiatives, manage agile delivery teams, and measure outcomes to reduce risk and improve efficiency.

Serve as primary SIEM/SOC escalation point: investigate and triage network security events, document findings, communicate with stakeholders, tune detections, oversee threat and vulnerability management, implement automations with platform teams, and lead brand collaboration calls. Provide incident response, threat intelligence analysis, and occasional on-call support across a global enterprise.

Build and operate Flox's security program: deploy and manage SIEM/SOC, harden AWS and Cloudflare, implement IaC/CSPM/SAST/SCA scanning, manage endpoint protection, secure the software supply chain, run incident response, and own identity and access controls.

Lead design and implementation of a secure software supply chain and high-assurance CI/CD platform. Secure build and deployment environments, enforce artifact signing, provenance and SBOM generation, target SLSA 3/4 and NIST SSDF compliance, integrate AI governance and agentic controls into pipelines, and grow/mentor the security team.

Design, build, and secure resilient REST API integrations and cloud-native connections to support enterprise data access management. Develop security architecture artifacts, automation/orchestration, testing, and documentation. Support DLP and CASB initiatives, advise engineering teams, implement IAM and encryption controls, and ensure alignment with federal cybersecurity standards and compliance.

Support security and architecture team to design, accredit, and maintain systems handling extremely sensitive data across multiple network fabrics and cloud/on‑prem environments. Lead A&A activities, incident response, POA&M tracking, cloud cost optimization, vulnerability focal duties, technical reviews, and support adoption of security tools and encryption solutions.

Design, implement, and manage enterprise security controls across Microsoft 365, EDR, DLP, IAM, and vulnerability management. Lead cloud security, patching audits, data protection, SDLC security integration, phishing simulations, vendor risk assessments, and threat research to improve detection, response, and remediation.

Senior Systems Engineer responsible for managing and securing AWS infrastructure, implementing security monitoring and controls, automating infrastructure with Terraform/PowerShell, maintaining hardening and patching standards, troubleshooting hybrid environments, and supporting backup, DR, and high-availability configurations while collaborating with teams and maintaining documentation.

Lead cloud security design and implementation for Azure/AWS, develop Policy-as-Code and Terraform IaC, deploy CSPM tooling (Wiz, Defender), perform assessments and incident response, mentor engineers, collaborate with security champions, and contribute to the cloud security roadmap and controls aligned to CIS and NIST 800-53.

Lead design and implementation of cloud security controls and PaC/IaC (Terraform). Use CSPM tools (Wiz, Defender), conduct security assessments, respond to incidents, mentor junior engineers, and collaborate with security champions to embed security into development workflows.

Lead design and implementation of IGA and PAM shared services; define reference architectures and standards; evaluate vendors and technologies; partner across business, security, and engineering to deliver scalable identity solutions; drive compliance, audit readiness, and stakeholder alignment; mentor engineers and represent identity domains in enterprise initiatives.

Serve on the CISO Cybersecurity Architecture team to embed security into Azure-native and hybrid cloud solutions, define reusable security patterns across Microsoft ecosystems, evaluate designs/PoCs, mentor engineering teams on secure coding and cloud-native controls, and drive governed, scalable security architectures that support AI, low-code, and data governance adoption.

Lead and build Crossmint's security function end-to-end: set strategy, manage a small security team, oversee cloud/application/CI/CD security (AWS primary), own audit and compliance (SOC 2, DORA, MiCA), manage third-party risk and incident response, and act as a hands-on practitioner during high-stakes reviews and incidents. Communicate risk to executives and scale security without blocking product velocity.

Design, secure, and authorize multi-enclave cloud and big-data systems using RMF/DIACAP. Create and maintain DoD-aligned security documentation, run vulnerability scans, recommend mitigations, support accreditation (eMASS/POA&Ms), and coordinate with development, infrastructure, and government stakeholders to enforce security across system architectures.

Lead design, implementation, and maintenance of enterprise PKI systems. Support certificate lifecycle management (CLM), configure CAs and templates, manage HSMs and RAs, automate processes with Ansible, Terraform, and PowerShell, enforce key-management policies, and troubleshoot certificate/TLS issues to maintain secure operations.

Manage and enforce information security for assigned systems: maintain operational security posture, support RMF authorization activities, prepare and maintain security documentation (SSPs, SRTMs, authorization packages), conduct vulnerability and risk assessments, manage configuration changes, evaluate security solutions, and collaborate with engineering teams to remediate findings and ensure compliance.

Lead and maintain the enterprise Information Security GRC program. Ensure IT controls and regulatory compliance (HIPAA, PCI, privacy). Manage vulnerability, vendor and risk programs, change management, audit liaison, security exceptions, IT risk register, and security awareness training. Serve as SME for HIPAA, PCI, and privacy requirements.

Manage and standardize security policies and daily operations across a cluster of data centres. Oversee security staff, access control, CCTV, incident response, vendor contracts, training, compliance reporting, budgeting, and recommend security technologies to maintain and improve the cluster's security posture.

Lead FDNY's information security strategy, manage risk and compliance (e.g., GDPR, ISO 27001), direct incident response, develop policies, lead security team, and promote security awareness across the organization.

Lead cross-service cybersecurity programs for enterprise cryptographic and trust services (PQC, PKI, secrets management, machine identity). Coordinate engineering teams, manage dependencies, track milestones/risks, analyze architectures, run governance and readiness assessments, and deliver metrics and executive updates to align cryptographic platforms with enterprise initiatives.

Perform technical cybersecurity engineering and A&A tasks: design and embed security controls, run vulnerability scans and remediation, create and review A&A documentation, assess computing environments, maintain baselines/configuration management, coordinate changes, and use COTS/GOTS and custom tools to detect and remediate intrusions across virtualized, cloud, and enclave systems.