Top Cyber Security Jobs

Lead and scale a product security organization to define and execute SaaS, cloud, and product security strategy. Embed security into the SDLC/DevSecOps, influence architecture and roadmaps, manage customer security assurance and contract reviews, define secure development standards, oversee third-party/OSS risk, and measure program effectiveness while supporting sales and compliance needs.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Architect, build, and support highly available enterprise edge infrastructure and security controls. The role includes threat hunting, mitigation, monitoring, DNS and load balancing, infrastructure automation, security standards, observability, technical documentation, technology evaluations, and cross-functional delivery. The engineer participates in an on-call rotation and helps shape the organization’s edge security strategy and roadmap.

Conduct cybersecurity risk and vulnerability assessments for USSOCOM networks, systems, applications, and technology initiatives. Analyze security architectures, implement and monitor security controls, maintain Authorization to Operate documentation, and develop security policies and procedures. Evaluate network security products, validate design solutions, support NIST and CNSSI control compliance, maintain Assessment and Authorization packages, and advise stakeholders and senior management on risks and remediation.

Own and improve corporate security across identity and access management, endpoint protection, SaaS applications, Zero Trust, automation, detection, and incident response. Implement Entra ID controls, SSO, SCIM, MFA, RBAC, JML workflows, Intune policies, EDR, and security baselines. Automate security processes with Python or JavaScript, investigate alerts, remediate incidents, and partner with IT, Security, Engineering, and business teams in a fast-moving startup environment.

Secure applications throughout the software development lifecycle by performing SAST, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD security control validation. The role uses Fortify and SonarQube, produces assessment reports, supports secure SDLC process design, and partners with developers, architects, and cybersecurity specialists.

Lead two engineering teams that build and operate the Detection Engine, Threat Intelligence Platform, SOAR, and Case Management. Own hiring, delivery quality, production operations, roadmaps, and partner-visible surfaces. Provide technical architecture guidance (~20% hands-on), ensure SLOs and incident management, coordinate with security practitioners and central engineering, and enable AI/LLM-driven workflows and platform extensibility for SOC, Detection Engineering, and Threat Intelligence customers.

Leads North American customer-facing cybersecurity and compliance programs for physical security, building automation, AV, and IT/OT solutions. Establishes secure architecture reviews, hardening standards, verification processes, governance, risk reporting, vendor evaluations, and customer questionnaire responses. Manages cybersecurity agreements, vulnerability timelines, incident response coordination, and cross-functional integration with sales, engineering, operations, legal, and corporate security teams. Recruits and develops cybersecurity architects and program managers while maintaining authority over high-risk designs.

Set technical strategy and architecture across security engineering domains, build AI security foundations, and lead cross-cutting initiatives from concept through production. The role requires hands-on development and operation of production security systems, deep IAM or cryptography expertise, broad security engineering knowledge, cross-organizational influence, ambiguity management, collaboration, and mentorship.

Designs and reviews cloud security architectures across AWS, Azure, GCP, and internet-facing environments. Partners with engineering, identity, network, application, and security teams to implement Zero Trust, IAM, segmentation, perimeter, encryption, monitoring, and other controls. Evaluates risks against security standards and regulatory frameworks, documents findings and exceptions, prioritizes remediation, and promotes secure-by-design practices and consistent cloud governance across multi-cloud deployments.

Secures applications throughout the software development lifecycle by performing SAST with Fortify, code analysis with SonarQube, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD control validation. The role documents assessment findings, supports secure SDLC process design, and collaborates with developers, architects, and cybersecurity specialists. Requires an active Secret or TS clearance, application security experience, penetration testing knowledge, and CEH certification. Quarterly travel to Scott Air Force Base is required.

Conduct IT security compliance assessments, audits, risk assessments, and control reviews. Develop and maintain security policies and procedures, identify compliance gaps, track remediation, support internal and external audits, and collaborate with technical and business teams. Monitor access management and data protection controls, interpret regulatory requirements, support security awareness training and reporting, and participate in an on-call rotation.

Monitors and assesses classified information-system compliance, performs cybersecurity audits and technical assessments, develops security plans and documentation, investigates security violations, reviews configuration changes, implements cybersecurity processes and tools, and supports RMF, NIST, NISPOM, DAAPM, JSIG, and DISA STIG compliance. The role is fully onsite and requires an active Secret clearance, U.S. citizenship, and a Security+ or equivalent certification within six months if not already held.

Oversee cybersecurity compliance, assessments, and operations for classified information systems. Conduct recurring reviews, approve configuration changes, implement security processes and tools, maintain cybersecurity documentation, and mentor ISSOs. Provide technical guidance across programs and represent cybersecurity teams to external stakeholders. The role requires onsite work in El Segundo and intermittent travel to other Raytheon locations.

Design and operationalize an enterprise API security program: implement runtime protections, embed security into CI/CD, provide secure API design guidance, build telemetry-driven analytics, define governance, support audit readiness, and partner with engineering to reduce API risk at scale.

Lead enterprise network security architecture, governance modernization, and cybersecurity strategy across on-premises, hybrid, and multi-cloud environments. Design automated governance capabilities using Policy-as-Code, Process-as-Code, workflow optimization, and AI-assisted security analysis. Establish measurable methods for evaluating controls, policy compliance, risk, and governance maturity while influencing executives, architects, engineers, and business stakeholders. The role is fully onsite Monday through Friday and requires approximately 10% travel.

Lead cybersecurity compliance for a Department of Labor FISMA Moderate application ecosystem. Manage RMF, NIST controls, ATO documentation, CSAM artifacts, risk registers, POA&Ms, vulnerability findings, continuous monitoring, audits, secure SDLC evidence, incident response coordination, and remediation across application, database, infrastructure, and DevSecOps teams. Support governance, CPIC reporting, and DOL cybersecurity stakeholders.

Design and define SoC security architectures including Root of Trust, Secure Boot, Key Management, Confidential Compute, attestation, secure manufacturing, and device lifecycle. Perform threat modeling, cryptographic analysis, hardware/software threat assessment, and collaborate across teams to develop security policies, access control, and mitigation strategies for hardware and firmware threats.

Designs, implements, and manages enterprise cloud security solutions across AWS, Azure, and Oracle OCI. Leads CSPM, CASB, CNAPP, SSE, DevSecOps, application security testing, identity, network, vulnerability, and monitoring capabilities. Develops security policies, standards, roadmaps, and compliance controls; supports audits, incident response, remediation, vendor evaluations, and maturity assessments. Collaborates with architecture, infrastructure, and cybersecurity teams, communicates recommendations to leadership, and mentors junior staff. Occasional travel supports remote network installations and upgrades.

Lead FirstEnergy’s enterprise Identity and Access Management program, strategy, roadmap, platforms, and operating model. Manage IAM staff and identity lifecycle processes while overseeing authentication, privileged access, governance, RBAC, MFA, and secure remote access across IT and OT environments. Ensure SLAs, regulatory compliance, incident response, audits, vendor management, budgeting, and continuous improvement. Partner with Cyber Operations, HR, Infrastructure, Compliance, Audit, and business stakeholders to reduce cyber risk and deliver secure, scalable IAM capabilities.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Leads Sentinel System Security Engineering supply chain risk management across hardware, software, firmware, suppliers, and services. Develops and executes SCRM plans, assesses and mitigates risks, flows security requirements to suppliers, prevents counterfeit components and tampering, and integrates threats, obsolescence, and DMSMS considerations. Manages engineering resources, budgets, schedules, earned value, technical reviews, staffing, performance evaluations, and team development while coordinating with program, procurement, quality, configuration management, and customer stakeholders.

Implements and improves security controls across cloud, endpoint, network, identity, and application environments. Manages security technologies, investigates alerts and incidents, develops detections and response workflows, performs vulnerability management, and supports penetration testing. The role secures Azure and AWS environments, assists with IAM and CI/CD security, analyzes logs and forensic evidence, and supports compliance audits involving HIPAA, HITRUST, SOC 2, and PCI-DSS. It partners with technical and GRC teams to remediate risks and maintain security documentation.

Leads Generac’s enterprise-wide product security strategy across connected energy products, software, and digital services. Establishes IEC 62443-based governance and secure development lifecycle practices, including threat modeling, secure coding, security testing, SBOM, vulnerability management, and certification readiness. Builds product security incident response and coordinated vulnerability disclosure capabilities, manages global regulatory compliance, and advises executives, boards, customers, auditors, and regulators. Builds and develops a high-performing product security organization while embedding security champions across engineering teams.

Manages security activities for designated programs, integrating security into business capture, proposals, and program execution. Oversees NISP compliance, classified-program regulations, contractual security documentation, Security Classification Guides, secure-area administration, training, recordkeeping, and policy development. Coordinates with government agencies, customers, suppliers, program protection teams, leadership, and business development. Reviews requirements, resolves compliance conflicts, and develops security infrastructure supporting defense and engineering programs.