Top Cyber Security Jobs

Design, implement, and manage large-scale network and security solutions (Cisco/Juniper). Lead incident resolution, stakeholder communications, IPv4 planning, monitoring, and customer-facing technical consulting with regular travel.

Lead application security activities including security code reviews, vulnerability assessments, tool-based scanning, and consulting product development teams. Manage project delivery, customer relationships, and documentation while aligning work to OWASP/OSSTMM/SANS standards and security best practices. Work requires travel and project management in a consulting environment.

Lead GRC Analyst responsible for building and maturing IT governance, risk, and compliance programs: vendor risk management, control design and testing, audit readiness, risk register stewardship, GRC tooling automation, policy/SOP maintenance, site walkthroughs, access governance, reporting, and cross-functional stakeholder management.

Onsite Senior ISSO responsible for assessing and monitoring system compliance, performing audits, developing security plans, investigating violations, approving configuration changes, conducting technical and administrative assessments, integrating cybersecurity processes/tools, and producing/updating security documentation. Must adhere to NIST, RMF, JSIG, DAAPM, and NISPOM requirements and support classified DoD environments.

Lead and deliver Identity & Access Management solutions: design IAM processes, manage privileged accounts across platforms, administer DELL TPAM (PPM/PSM), perform development/configuration/deployment, ensure information security controls, and support project and consulting engagements that require regular travel.

Lead assessments, design secure infrastructure and controls, implement scalable security solutions, operate and administer enterprise security tools, drive vulnerability management, incident response, and risk analysis, and report security posture to stakeholders and senior leadership.

Contract Information Security Consultant to perform PCI assessments for a client in Sacramento through Dec 31, 2017 (possible extension). Requires documented experience conducting PCI assessments and holding CISSP and QSA certifications. Candidates must be authorized to work in the U.S.; employer cannot sponsor visas.

Design, configure, operate, and troubleshoot endpoint DLP systems; create and deploy access control rules; monitor and investigate DLP logs and incidents; coordinate testing with business owners; balance data protection with business needs and participate in incident response.

Lead application security activities including static and dynamic analysis, source code review, and penetration testing using Fortify, AppScan, CodeSecure, BurpSuite and related tools. Provide security architecture and process design, manage projects and talent, perform solution validation and deployment, and support consulting engagements that require regular travel.

Design, implement, and manage enterprise risk management and GRC processes. Perform risk and third-party assessments, document policies and controls, report findings, and coordinate remediation, training, and compliance activities.

Operate and maintain endpoint DLP systems; design and implement DLP architecture and controls; create, test, and deploy access rules; monitor and investigate DLP logs and incidents; coordinate with business owners, apply risk methodology, and support security incident response.

Serve as the focal point for DLP strategy and operations: design, configure, deploy, and troubleshoot endpoint DLP; create and validate access control rules; monitor and analyze DLP logs; investigate incidents; coordinate testing with business owners; ensure alignment with policies and regulations; perform risk assessments and support incident response.

Design, configure, and manage enterprise Identity & Access Management and privileged access solutions. Administer DELL TPAM (PPM/PSM), enroll privileged accounts across Windows, UNIX, databases and mainframes, ensure IAM controls and compliance, support deployments, and provide consulting, project and talent management with regular travel.

Implement and maintain the organization's risk management and GRC program: develop processes, perform risk and third‑party supplier assessments, document policies and controls, report and track remediation, support audits and compliance, and deliver security awareness and project coordination across technical and executive stakeholders.

Perform web and network penetration testing and secure code analysis using tools like Fortify, WebInspect, Nessus, Burp and AppScan. Apply security frameworks (OWASP, NIST, ISO27001, PCI), coordinate projects and stakeholders, understand security NFRs/metrics, and work in a global delivery environment. Mobile and telco domain experience is a plus.

Provide application security consulting and architecture for software projects, perform source-code analysis and penetration testing using Fortify, AppScan, CodeSecure and interception tools (BurpSuite, Paros, TemperIE). Lead development/configuration, validation and deployment, manage projects and talent, and travel for client consulting engagements.

Serve as a trusted security liaison embedding security-by-design into product and business lifecycles. Lead early security discussions, translate business objectives into risk-oriented priorities, maintain risk registers, track metrics, and coordinate cross-functional mitigation to enable innovation while managing risk.

Provide application security consulting: design and detail secure business processes, perform source-code and dynamic analysis using Fortify, AppScan and CodeSecure, run penetration tests with BurpSuite/Paros/TemperIE, configure and deploy security solutions, manage projects and talent, and support client engagements that require regular travel.

Lead application security efforts including architecture/design of secure processes, static and dynamic code analysis using Fortify/AppScan/CodeSecure, penetration testing and traffic interception (BurpSuite/Paros/TemperIE). Support development/configuration, validation and deployment, manage projects and talent, and consult with clients requiring regular travel.

Lead application security assessments and consulting: perform source-code analysis, penetration testing, tool-based scans (Fortify, AppScan, CodeSecure), configure/deploy solutions, manage projects and teams, and support client engagements with regular travel.

Hands-on cloud security engineer responsible for vulnerability discovery, triage, and remediation across AWS, Azure, and GCP. Operate and tune security tooling (CSPM, scanners, WAF), perform security architecture reviews, support Secure SDLC, automate validation and tracking, and collaborate with platform and application teams to improve vulnerability and patch management outcomes.

Hands-on cloud security engineer responsible for reviewing cloud and application designs, operating and tuning security tooling, triaging and driving remediation of cloud security findings, automating controls, supporting vulnerability management and certificate lifecycle, and collaborating with engineering and platform teams to improve cloud security posture across AWS, Azure, and GCP.

Tier 2 SOC analyst responsible for detecting, investigating, and responding to security incidents. Duties include packet-level network forensics, malware and threat analysis, vulnerability assessment, tuning detections, producing reporting, mentoring junior analysts, coordinating cross-functional teams, and providing after-hours on-call support.

Consult on application security: design and detail secure processes, perform source code analysis and penetration testing, use SAST/DAST tools (HP Fortify, IBM AppScan, CodeSecure) and proxy tools (BurpSuite, Paros, TemperIE). Lead development/configuration, validation and deployment tasks, manage projects and talent, and work in a management consulting environment with regular travel.

Perform FedRAMP continuous monitoring and vulnerability lifecycle management: run scans, track POA&Ms, validate remediation, maintain audit-ready documentation, coordinate remediation with engineering, and support assessments and auditors.