Top Cyber Security Jobs

Build and operate security infrastructure, including SIEM systems, large-scale data pipelines, searchable data lakes, and security observability capabilities. Integrate infrastructure sources, acquire and process high-volume logs, and support detection, threat hunting, and insider-risk programs. Collaborate with security, data platform, and infrastructure teams to deliver reliable, scalable solutions using Go or Python, Kubernetes, Elasticsearch, and related technologies.

Lead cloud security and resilience engineering across Capital One’s AWS, GCP, and Azure environments. Build automated governance and security controls for infrastructure, support cloud networking, identity, observability, availability, and production operations, and develop distributed microservices and full-stack solutions. Lead technology projects and developers, collaborate with product managers, mentor engineers, evaluate emerging technologies, and drive cross-functional initiatives involving Kubernetes, infrastructure as code, CI/CD, and policy-as-code.

Leads cybersecurity governance, capability maturity, risk assessments, and enterprise risk-reduction initiatives. Manages and mentors cybersecurity professionals, advises on security tools and platforms, develops risk and threat classification frameworks, and coordinates continuous improvement programs. The role evaluates controls, capabilities, tooling, threats, and vulnerabilities; communicates remediation recommendations to leadership; supports cybersecurity metrics and dashboards; and drives consistent control design, testing, and reporting across cyber programs.

Leads DigitalOcean’s security and core platform services portfolio, including security products, security engineering, identity, billing, secrets management, and observability. Owns strategy, roadmap, business outcomes, operational excellence, compliance, and executive reporting. Builds and scales product and engineering organizations, manages investment trade-offs, defines performance metrics, supports incident escalation, and partners cross-functionally to deliver secure, reliable, customer-focused cloud capabilities.

Designs, configures, and supports Oracle HCM security across implementations and production environments. Responsibilities include role and access control, IAM, SOD analysis, vulnerability reduction, secure code development, security architecture, audit documentation, monitoring, and collaboration with technical and business stakeholders. The role also supports integrations, cloud environments, reporting, defect resolution, and agile security projects.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Leads Circle’s third-party security program by conducting complex partner and vendor assessments, evaluating technical controls, identifying risks, and communicating recommendations. Builds AI-enabled tooling, automation, monitoring, scoring, and intelligence-driven workflows to modernize security reviews and support continuous risk management. Partners with Security Engineering, Legal, Procurement, and business teams to embed security requirements into third-party onboarding and oversight.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Designs, implements, and maintains global network and perimeter security infrastructure. Responsibilities include firewall rule analysis and optimization, security solution integration, network monitoring, troubleshooting, technical support, and collaboration on security projects with internal teams and data center partners. The role requires onsite work in Chicago at least three days weekly and occasional nighttime or weekend on-call availability.

Security Engineering Intern responsible for completing a scoped security project, developing automation and investigation tools, researching vulnerabilities, analyzing findings, validating AI-assisted outputs, collaborating with engineers, and documenting and demonstrating solutions. The role requires programming, web and systems knowledge, foundational security understanding, AI familiarity, and current enrollment in a bachelor’s or master’s program.

Provides technical leadership for Zscaler’s Layer 7 proxy architecture, specializing in QUIC, HTTP/2, HTTP/3, TLS/SSL inspection, and high-throughput network security. Defines reference architectures, guides solution design, modernizes code, addresses technical debt, mentors engineers, and governs architectural decisions across teams. The role requires extensive experience designing networking security software and public-cloud infrastructure, strong C expertise, and knowledge of advanced networking, operating systems, virtualization, and kernel-bypass technologies.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Leads cybersecurity capability advancement, governance, risk assessments, control monitoring, and remediation tracking. Analyzes cyber and fraud intelligence data to produce risk indicators, metrics, dashboards, and actionable insights. Drives automation for security workflows, presents risk trends to senior leaders, supports incident analysis, and mentors cybersecurity associates. The role requires expertise in cybersecurity frameworks, cloud environments, security tooling, cyber-enabled fraud investigations, database querying, programming, and regulated-industry risk management.

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Leads cybersecurity risk reduction initiatives, capability assessments, control evaluations, and continuous improvement programs. Advises on cybersecurity tools, frameworks, threats, vulnerabilities, and remediation strategies while coordinating efforts across cyber programs. Mentors associates, communicates risks and control gaps to leadership, supports cybersecurity metrics and dashboards, and drives alignment with enterprise standards, business objectives, and regulatory expectations across multi-cloud environments.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Leads cybersecurity engineering teams developing enterprise security solutions across multiple technology domains. Clarifies security requirements, supports multi-level network security, performs threat modeling and vulnerability assessments, and advises leaders during security risks. Uses and validates enterprise-authorized AI for risk analysis, documentation, security testing, and control validation while ensuring data sensitivity, auditability, and resiliency. Coaches, develops, hires, and recognizes engineering talent.

Own Alloy’s AWS cloud security program, partnering with Infrastructure and engineering teams to secure new designs, reduce infrastructure risk, manage CSPM findings, and implement Terraform-based remediations. Build SIEM and CSPM detections, alerts, dashboards, and runbooks; improve AWS permissions and network security; participate in on-call incident response; and drive root-cause remediation and preventative controls.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Designs and deploys enterprise IAM frameworks, automated security controls, cloud and on-premise security platforms, and vulnerability and compliance automation. Partners with software, cloud, and infrastructure teams to embed security by design, evaluates security technologies, establishes engineering standards, and supports investigations and troubleshooting. Requires cybersecurity experience, cloud expertise, automation skills, and preferred SailPoint ISC and IdentityIQ experience.

Evaluate and mature cybersecurity capabilities using frameworks such as NIST CSF, analyze cyber risks and vulnerabilities, lead control assessments, track maturity objectives, and develop executive and technical risk reports. Collaborate with stakeholders across business lines to improve governance, metrics, controls, and remediation activities. Translate technical findings into actionable insights and coordinate cybersecurity reporting across multiple domains.