Top Cyber Security Jobs

Lead enterprise incident response as senior incident commander across hybrid and multi-cloud environments. Own incident readiness, runbooks, exercises, and after-action governance. Drive detection engineering and telemetry in AWS, coordinate containment/recovery, improve detection quality, and brief executive leadership. Mentor teams and operationalize compliance and measurable response outcomes.

Operate and maintain Cisco ASA firewalls, Cisco IPS and Bluecoat Proxy SG; schedule changes, apply patches, monitor systems, resolve incidents, perform troubleshooting and initial incident response, escalate as needed, maintain documentation, follow change management and SLAs, and participate in 24/7 on-call rotations.

Short-term (2-month) contract to design, build, and secure multi-site networks (LAN/MAN/WAN). Responsibilities include routing (EIGRP/OSPF/BGP), VPN and remote-access deployments, VLANs, ACLs, NAT, STP, DMVPN/MPLS designs, and integrating firewalls/load balancers across Cisco, F5, Palo Alto, and Citrix NetScaler platforms.

Consult on application security: design and detail secure processes, perform source code analysis and penetration testing, use SAST/DAST tools (HP Fortify, IBM AppScan, CodeSecure) and proxy tools (BurpSuite, Paros, TemperIE). Lead development/configuration, validation and deployment tasks, manage projects and talent, and work in a management consulting environment with regular travel.

Perform FedRAMP continuous monitoring and vulnerability lifecycle management: run scans, track POA&Ms, validate remediation, maintain audit-ready documentation, coordinate remediation with engineering, and support assessments and auditors.

Lead vulnerability assessment and infrastructure security efforts, design and detail business processes, configure and deploy security solutions (AirWatch MDM, Symantec), manage projects and talent, and provide consulting with regular travel.

Run and operationalize a threat-intelligence program for maritime/autonomy defense: track nation-state/APT adversaries, convert indicators/TTPs into detections and hunts, build ingestion/enrichment pipelines, fuse external intel with internal telemetry, author finished intelligence, perform infrastructure and malware analysis, and design deception and automation for high-fidelity alerts.

Administer, troubleshoot, and maintain Cisco ASA firewalls, Cisco IPS, and Bluecoat Proxy SG. Build/support IPSec site-to-site VPNs, monitor systems, resolve incidents, perform change management, maintain documentation, and participate in 24/7 on-call rotations in a global team following ITIL practices.

Lead application security and DevSecOps across product, cloud, and enterprise systems. Implement secure SDLC practices (threat modeling, code reviews, SAST/DAST/SCA), own software supply-chain security (SCA, SBOMs, signing), govern secrets and application controls, harden self-hosted deployments across AWS/Azure/on-prem, and embed scalable security tooling with engineering teams.

Implement and maintain the risk management framework: identify, assess, track, and report security risks and controls; perform third-party supplier risk assessments; document policies and remediation plans; support audits, security awareness, and GRC documentation; coordinate projects and communicate risks to technical and executive audiences.

Lead and shape Outtakes security function as the second security hire: secure cloud infrastructure (AWS, EKS, Vercel, Supabase), build detection & response (SIEM/SOAR), design secrets and access management, implement secure-by-default patterns, and perform hands-on incident response while partnering with engineering to balance security and velocity.

Design, develop, and operate high-fidelity detection content and security data pipelines across endpoint, cloud, network, identity, and DLP telemetry. Implement detection-as-code with CI/CD and automated testing, map coverage to MITRE ATT&CK, build SOAR playbooks for automated response, support incident response, and partner across teams to close visibility gaps.

Triage and investigate security alerts across endpoint, cloud, identity, network, and SaaS using SIEM/XDR; perform root-cause analysis and initial incident response; tune detections, run targeted hunts, contribute playbooks and post-incident reviews, and participate in on-call rotation and SecOps enablement.

Lead and govern SIEM and DLP operations, manage security managed service providers, participate in CSIRT incident response, perform vulnerability and penetration test remediation, administer controls and account reviews, and provide guidance on malware and security tool use (firewalls, IDS/IDP, anti-malware). Support audits and implement security standards and procedures across diverse platforms.

Own continuous cloud security posture across commercial AWS and AWS GovCloud: detect and remediate misconfigurations, run cloud vulnerability management, build Terraform-based guardrails and policy-as-code, design least-privilege IAM and secrets/key management, build cloud-native detections and automated remediation, and support SOC investigations while mapping controls to government and commercial frameworks for audit readiness.

Manage and maintain Cisco ASA firewalls, Cisco IPS, and Blue Coat Proxy SG; troubleshoot network/security incidents; schedule changes and apply patches; monitor systems, perform initial incident resolution, maintain documentation, support 24/7 on-call rotations, and help develop compliance controls and assessments.

Lead application security activities including vulnerability scanning, security code reviews, tool configuration and deployment, consulting product teams to remediate findings, enforcing OWASP/OSSTMM/SANS standards, managing projects, teams, and customer relationships in a consulting environment requiring travel.

Design and maintain enterprise security capability architectures, translate business requirements into technical specifications, develop roadmaps and lifecycle plans, prioritize investments, ensure adherence to architectural standards, and collaborate with product management, engineering, operations, and third-party suppliers to defend against internal and external cyber threats.

Provide security oversight for network and mainframe systems, evaluate security architecture, recommend/security hardware and software, perform security audits and penetration testing, support disaster recovery, and assist in creating and reviewing information security policies and standards.

Provide Tier-3 support and maintenance for Microsoft Active Directory and related Windows Server environments. Serve as SME for AD escalations, troubleshoot outages, advise customers on preventative configurations, and support VMware virtualization. Requires a security background and hands-on server engineering skills. 12-month contract with option to hire; must be GC/EAD or US citizen.

Assess and validate a high-volume Salesforce-to-AWS notification integration (S-Docs, VA Notify). Build and deploy integration components, implement DevSecOps (SAST/DAST/SCA), automate secrets/configuration, enable monitoring and error handling, and document architecture, risks, and compliance for federal ATO/RMF alignment.

Lead vulnerability management strategy and execution across cloud and hybrid environments. Own end-to-end vulnerability lifecycle, drive automation, perform data-driven prioritization with advanced SQL, and partner with engineering, risk, and incident response teams. Provide hands-on engineering, on-call support, mentoring, and offensive security research to reduce exposure and improve operational reliability.

Lead architecture, implementation, automation, and support of network security and segmentation. Integrate LLM/AI-driven automation, manage firewalls and security platforms (Palo Alto, Illumio, WAF, NAC), troubleshoot escalations, collaborate with infrastructure and application teams, mentor others, and drive security architecture and policy alignment across global teams.

Manage identity and access lifecycle, administer security technologies (Entra, Okta, endpoint/email protection), monitor alerts, perform risk assessments, support incident investigations, audits, policy development, and security hardening across corporate and community systems.

Serve as the primary security partner for assigned business units, embedding security into product and technology delivery, sponsoring enterprise security initiatives, guiding architecture and risk decisions, overseeing assessments and remediation, supporting SOC/IR, and reporting security metrics to leadership.