Top Cyber Security Jobs

Build and operate security log pipelines, SIEM detections, endpoint controls, security automation, and internal tooling across AWS, macOS, Windows, CI/CD, and infrastructure repositories. Develop primarily in Python, implement Terraform-based infrastructure and policy-as-code safeguards, integrate security tools through APIs, and embed scanning and secrets detection into developer workflows. Own the reliability and coverage of security platforms while independently driving projects and implementing fixes directly in systems managed by other teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Leads cybersecurity architecture for software applications and platforms within wealth management. Drives secure product design, evaluates current and emerging technologies, establishes target architectures, and guides business and technical stakeholders. Oversees alignment with enterprise frameworks, regulatory requirements, scalability, resilience, and software development lifecycle practices. Serves as a subject matter expert in architecture governance and collaborates across teams to deliver secure, high-volume enterprise solutions.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and vulnerability assessments. Designs and maintains security solutions across databases, networks, cloud, authentication, applications, and endpoints. Reviews security logs, recommends remediation, supports risk management and compliance, collaborates with senior stakeholders, and leads a team. Requires database security and administration expertise, scripting skills, on-call availability, and hybrid work at a posted location.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and design of security solutions across databases, cloud, networking, authentication, applications, and endpoints. Reviews security logs, identifies vulnerabilities, performs risk assessments, recommends remediation, and supports security standards and frameworks. Leads teams, collaborates with senior stakeholders, and participates in on-call support within a hybrid work environment.

Leads web application security engineering for enterprise environments, providing security consulting, audit and control support, solution design, testing, documentation, log correlation, vulnerability identification, risk assessments, and remediation recommendations. Supports Layer 7 security technologies, change activities, application engagements, and process improvements while collaborating with stakeholders and managing multiple complex initiatives.

Leads complex information security incident response, investigations, digital forensics, security consulting, vulnerability assessment, and remediation. Designs and maintains advanced security solutions across databases, networks, cloud, authentication, applications, and endpoints. Reviews security logs, performs risk assessments, advises internal stakeholders, and leads teams. The role requires database security and administration expertise, scripting, security tools, cloud technologies, standards knowledge, on-call support, and hybrid work.

Leads inbound web application security engineering for complex enterprise environments. Provides security consulting, designs and tests security solutions, reviews logs, identifies vulnerabilities, performs risk assessments, recommends remediation, supports audits and controls, and improves processes and documentation. Requires expertise in Layer 7 web security, including WAF, bot protection, APIs, and L7 DDoS, plus HTTP/S, CDN, DNS, and load balancing. The role involves cross-functional collaboration, occasional off-hours and weekend change support, and hybrid work.

Owns the strategy, roadmap, modernization, and delivery of enterprise authentication and IAM capabilities. Leads MFA, identity verification, passwordless authentication, cloud identity, and Active Directory modernization initiatives. Partners with engineering, infrastructure, risk, compliance, and business teams to migrate legacy platforms, improve security and user experience, manage governance and operational risk, define success metrics, and drive adoption across a large regulated enterprise.

Provides security consulting, engineering, documentation, testing, issue resolution, and audit support for inbound web application security. Designs and maintains complex security solutions across web, cloud, networking, authentication, and endpoint domains; reviews logs, assesses vulnerabilities and risks, recommends remediation, and supports change activities. Collaborates with professionals across the organization and may work off-hours or occasional weekends.

Supports governance, controls, compliance, risk management, audit coordination, and reporting for an enterprise API Product portfolio. Responsibilities include tracking control issues and remediation, monitoring application compliance and technology lifecycle requirements, maintaining dashboards and governance records, coordinating cross-functional initiatives, administering operational access assets, supporting audits and regulatory reviews, and identifying process improvements. The role partners with Product, Engineering, Information Security, Risk, Compliance, and Audit teams in a regulated financial services environment.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and security solution design. Secures database environments across relational and non-relational systems, cloud platforms, authentication, encryption, logging, and endpoint technologies. Responsibilities include vulnerability identification, risk assessment, remediation recommendations, standards alignment, documentation, and team leadership. The role requires on-call availability and hybrid work from a posted location.

Leads enterprise authentication and IAM product strategy, modernization, migration, and delivery across on-premises and cloud platforms. Owns roadmaps, metrics, governance, risk management, executive communications, and stakeholder alignment across cybersecurity, engineering, infrastructure, compliance, and business teams. Drives adoption of Microsoft Entra ID and Active Directory modernization while improving security, user experience, and operational efficiency through automation and AI.

Leads information security incident response, technical investigations, digital forensics, security consulting, and vulnerability risk assessments. Designs and maintains database and enterprise security solutions involving networking, cryptography, cloud, authentication, applications, endpoints, and monitoring. Correlates security logs, models database threats, recommends remediation, and collaborates with stakeholders. The role includes on-call responsibilities and hybrid work.

Leads information security engineering for database technologies, including incident response, digital forensics, security consulting, solution design, log analysis, vulnerability assessment, threat modeling, and remediation. The role requires expertise in database security, scripting, cloud environments, security tools, risk frameworks, and database monitoring or masking. On-call participation and hybrid work are required.

Leads incident response, digital forensics, security consulting, and the design and maintenance of information security solutions for database technology. Investigates vulnerabilities, correlates security logs, performs risk assessments, models database threats, and recommends remediation. The role requires expertise in database security, scripting, cloud environments, authentication, encryption, and security standards. On-call support and hybrid work are required.

Leads information security incident response, digital forensics, security investigations, vulnerability assessments, risk analysis, and remediation planning. Designs, tests, documents, and maintains security solutions across databases, cloud, networking, authentication, encryption, applications, and endpoints. Reviews security logs, provides internal security consulting, supports compliance with security standards, collaborates on complex issues, and participates in on-call support.

Supports governance, controls, compliance, risk management, audit coordination, and reporting for an enterprise API Product portfolio. Responsibilities include tracking control issues and remediation, monitoring application compliance and technology lifecycle standards, maintaining inventories and governance records, coordinating cross-functional initiatives, administering access-related operational assets, supporting audits and regulatory reviews, analyzing operational data, and developing dashboards, procedures, and management reports.

Sets application security direction and standards across engineering teams. Builds scalable security tooling, automation, and observability; leads threat modeling, risk assessments, code reviews, and multi-team remediation. Develops strategies for AI-powered systems and agentic development risks, API security, and software supply chain security. Partners with engineering and security teams, prioritizes investments, communicates risk to leadership, and mentors AppSec engineers.

Supports application security across product and engineering teams by reviewing code, configurations, pull requests, logs, and system designs; identifying and prioritizing vulnerabilities; guiding remediation; and contributing scripts, tooling, detections, tests, and secure coding practices. The role also involves vulnerability management, risk-based analysis, security communication, and collaboration across engineering, infrastructure, compliance, and product teams.

Leads enterprise cybersecurity strategy, governance, risk, and compliance for a regulated fintech. Advises executives, the board, regulators, and partners; oversees security operations, incident response, cloud and product security, IAM, Zero Trust, DevSecOps, AI security governance, audits, and third-party risk. Builds and retains cybersecurity teams, strengthens organizational security culture, supports customer due diligence, and enables secure business and AI innovation.

Define and govern enterprise AI and agentic security architecture. Build controls for agent permissions, tool access, inter-agent trust, LLM threats, AI asset visibility, Shadow AI discovery, and AI security posture management. Embed automated security benchmarks throughout AI development and deployment pipelines, establish enterprise standards, review AI designs, and partner with platform engineering, MLOps, DevOps, IAM, and architecture teams to enable secure, compliant AI adoption.

Leads enterprise security architecture reviews for applications, platforms, cloud services, AI solutions, infrastructure, and transformation programs. Performs threat modeling, risk assessments, control evaluations, and security gap analysis. Designs reference architectures and security patterns spanning IAM, networks, devices, applications, data, cloud, SOC, GRC, and AI. Defines target-state architectures, maturity models, roadmaps, access policies, segmentation strategies, and remediation plans while influencing cross-functional stakeholders.

Lead information security consulting for Capital One’s Card line of business. Advise business and technology teams on infrastructure, data, network, resiliency, access management, cloud security, architecture, and risk mitigation. Serve as a security subject matter expert, manage cybersecurity risks, integrate security into development processes, collaborate with cross-functional stakeholders, and report security health and risks to executive leadership. The role also evaluates AI security, privacy, compliance, vulnerabilities, and attack vectors.