Top Cyber Security Jobs

Leads Generac’s enterprise-wide product security strategy across connected energy products, software, and digital services. Establishes IEC 62443-based governance and secure development lifecycle practices, including threat modeling, secure coding, security testing, SBOM, vulnerability management, and certification readiness. Builds product security incident response and coordinated vulnerability disclosure capabilities, manages global regulatory compliance, and advises executives, boards, customers, auditors, and regulators. Builds and develops a high-performing product security organization while embedding security champions across engineering teams.

Manages security activities for designated programs, integrating security into business capture, proposals, and program execution. Oversees NISP compliance, classified-program regulations, contractual security documentation, Security Classification Guides, secure-area administration, training, recordkeeping, and policy development. Coordinates with government agencies, customers, suppliers, program protection teams, leadership, and business development. Reviews requirements, resolves compliance conflicts, and develops security infrastructure supporting defense and engineering programs.

Supports the cybersecurity team through vulnerability data analysis, phishing and social engineering campaigns, ethical hacking, threat monitoring, identity and access management, tabletop exercises, cyber strategy development, privacy, and data protection. The 10-week hybrid internship provides practical cybersecurity experience and professional development in Raleigh, North Carolina.

Design, implement, maintain, and support cybersecurity tools and platforms, including EDR, DLP, web proxy, messaging security, vulnerability management, and identity and access management. Develop security playbooks and troubleshooting documentation, assist with incident response, collaborate across teams, and improve the confidentiality, integrity, and availability of systems and data.

Designs, implements, maintains, and supports information security tools and platforms protecting systems, networks, and data. Performs security engineering, operations, vulnerability management, incident management, threat intelligence, threat hunting, and cyber threat analytics. Manages EDR, DLP, web proxy, messaging, vulnerability management, and identity-access tools; develops playbooks and troubleshooting documentation; and assists with incident response while collaborating cross-functionally to improve security posture.

The Senior ISSO monitors and assesses information-system compliance, conducts audits and technical assessments, develops security plans, investigates security violations, and documents corrective actions. The role reviews configuration-management requests, implements cybersecurity processes and tools, supports security documentation and technical writing, and provides security education. Work is fully onsite in Dulles, Virginia, supporting classified defense environments and compliance with NIST, NISPOM, DAAPM, JSIG, RMF, STIG, and related government requirements.

Supports the bank’s information security program through technical audits, access reviews, security log and SIEM analysis, vulnerability and asset scans, trend reporting, and discrepancy investigation. The analyst uses advanced Excel functions and PowerShell for data analysis, prepares reports for security and IT leadership, supports audit remediation and security implementation projects, and collaborates with IT, business departments, management, and vendors.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Design and lead Replit’s AI agent security architecture, including runtime guardrails, semantic firewalls, sandboxing, threat modeling, red teaming, identity delegation, data isolation, observability, and auditability. Establish secure design patterns, SDKs, risk-register contributions, and compliance documentation for agentic systems. Partner with engineering, infrastructure, AppSec, GRC, executives, and sales to address AI security risks involving prompt injection, tool misuse, data poisoning, context contamination, and autonomous code execution.

Leads BackOps’ infrastructure and security engineering team, owning multi-cloud and on-premise infrastructure, reliability, networking, access controls, secrets, vulnerability management, SOC 2 controls, and security automation. The role includes hiring and mentoring engineers, establishing paved roads and operational standards, translating risks for executives and customers, improving incident response, and building scalable security and infrastructure functions.

Designs, integrates, operates, and continuously improves enterprise security platforms. Responsibilities include security monitoring, incident management, platform integrations, automation, log onboarding, alert correlation, detection tuning, SLA adherence, capacity planning, 24x7 support, and creation of security metrics, dashboards, and executive reports. Partners with cybersecurity, infrastructure, application, and engineering teams to improve security visibility, operational resilience, and the organization’s security posture.

The IGA Analyst is responsible for managing identity governance operations, audit compliance, access reviews, stakeholder engagement, and continuous improvement within IAM processes.

Own enterprise IAM governance, control effectiveness, access certifications, RBAC, identity lifecycle management, and regulated data access controls. Lead IAM operations, platform service ownership, application onboarding, audit readiness, and vendor performance. Partner with security, architecture, and business teams to improve IAM processes, controls, scalability, and compliance across hybrid enterprise environments.

Leads the design and implementation of secure IT infrastructure, advanced security monitoring, threat analysis, incident response, digital forensics, risk assessments, and security controls. Maintains Windows environments, Active Directory forests, domain controllers, certificate services, hypervisors, and hardened Group Policy configurations. Evaluates security technologies, documents breaches, mentors junior engineers, and participates in on-call incident response.

Software engineering intern supporting product security for devices, user data, and infrastructure. The role involves developing secure software, balancing user experience with privacy and security, and contributing to product design and development. Candidates should understand or be interested in cryptography, access control, authorization, network security, software security, and threat modeling.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and improving security automation. Collaborate with engineering, security, and platform teams in Agile environments while gaining hands-on experience, mentorship, and leadership development.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Conduct independent cybersecurity control assessments across on-premises and cloud environments. Perform walkthroughs, execute control test scripts, apply sampling methods, validate technical controls, collect evidence, document workpapers, identify risk-based exceptions, and retest remediation. The role requires knowledge of cloud security, technology risk regulations, banking oversight expectations, and relevant cybersecurity certifications.

Conduct cyber penetration testing, adversarial security assessments, system exploitation, network and architecture analysis, and security architecture reviews. Test enterprise systems, hypervisors, Windows installations, and cloud services; analyze results; and develop risk, threat, and mitigation plans. The role also communicates vulnerabilities and risk posture to senior executives and performs complex technical tasks with minimal direction.

Supports federal cybersecurity compliance, risk management, and authorization activities, including ATO efforts, continuous monitoring, NIST control validation, risk assessments, and security documentation. Maintains SSPs, POA&Ms, contingency plans, ISSO checklists, system records, and customer responsibility matrices. Coordinates compliance deliverables, testing, policy meetings, stakeholder communications, and security tool approval reviews in a government environment.

Design, implement, and maintain cybersecurity infrastructure for mission-critical DoD networks. Perform risk and vulnerability assessments, configure cyber architectures, integrate security controls, monitor systems, respond to incidents, and apply emerging technologies. The role supports Zero Trust, DevSecOps, RMF processes, system certification and authorization, and DoD acquisition requirements while leveraging tools such as CRIBL, GitLab, Kubernetes, and Splunk.

Lead global deployment of Qnity’s OT cybersecurity program across manufacturing sites. Responsibilities include securing ICS and PCN networks, implementing segmentation, remote access, monitoring, asset management, backup, EDR/XDR, and MFA solutions; developing cybersecurity standards, audits, and disaster recovery plans; reviewing automation and capital projects; conducting risk assessments and incident investigations; and mentoring site engineering teams.

Assist with Risk Management Framework accreditation packages and maintain Authorization to Operate certifications for networked systems and applications. Develop security and privacy documentation, manage records in eMASS, assess security controls and technical architectures, review STIGs and vulnerability scans, perform security assessments, audits, vulnerability testing, risk analysis, and breach investigations, and coordinate requirements with ISSOs and system managers.

Defines, analyzes, designs, and implements network security requirements and solutions for local and wide area networks supporting the Defense Logistics Agency. Evaluates security products, configures communications protocols, detects network vulnerabilities, performs risk analyses throughout the system development lifecycle, and integrates network security solutions. Requires five years of relevant experience, a current DoD Top Secret clearance, and a DoD 8570 IAM Level III certification such as GLSC, CISM, or CISSP.

Build and lead Cape’s security technical program across detection and response, corporate security, and product security. Define strategy, priorities, metrics, roadmaps, and execution processes; manage security tooling procurement and implementation; maintain backlogs; coordinate dependencies; and translate security risks and requirements between security engineers and the broader engineering organization.