Top Cyber Security Jobs

Leads day-to-day security operations for assigned systems, including security alert and log triage, vulnerability and compliance scanning, STIG validation, IAM access reviews, remediation coordination, and evidence maintenance. Validates corrective actions, tracks recurring findings and remediation aging, supports change-control assessments, and provides technical security posture inputs to ISSM and government reporting. The role requires TS/SCI with polygraph clearance and IAM Tier I certification within six months.

Supports and maintains cybersecurity infrastructure for casino gaming systems, payment data, guest information, and IoT devices. Responsibilities include managing EDR, firewalls, network segmentation, NetFlow, identity-based access, SIEM and vulnerability tools; supporting PCI DSS, GLI, and regulatory compliance; monitoring incidents with a managed SOC; conducting assessments; assisting with response, audits, vendor risk, security training, system integration, documentation, and on-call coverage.

The Systems Engineer will identify, evaluate, triage, document, and support remediation of application-security vulnerabilities. Responsibilities include partnering with software-development teams, applying SAST, DAST, dependency and software-supply-chain security practices, integrating automated scanning into CI/CD workflows, and verifying remediation. The role may support GitLab, Artifactory, OpenShift, Kubernetes, containerized applications, and restricted or classified environments.

Coordinates information security projects, manages access controls, vulnerabilities, risks, and security incidents. Conducts security awareness campaigns and phishing simulations, monitors systems for threats, supports incident response, prepares security metrics, and maintains security policies and procedures. The role collaborates across departments to remediate findings, ensure regulatory compliance, and improve organizational security.

Develop and evaluate cloud security architectures for Intelligence Community systems. Assess security documentation, compliance, risk thresholds, software assurance, and RMF requirements across on-premises, cloud, and hybrid environments. Support validation, assessment, accreditation, and troubleshooting activities; recommend security tools and capabilities; and collaborate with clients and technical teams in an Agile environment.

Analyzes software code and integrates security practices throughout the software development lifecycle. Develops software and scripts, performs testing, documents defects and security findings, reviews design documents and requirements, and applies secure development standards. The role uses static and dynamic assessment tools, supports DevSecOps and compliance processes, and may guide junior employees. A Secret clearance and high school diploma or GED are required.

Operates and improves enterprise cybersecurity across endpoints, identities, networks, cloud services, applications, email, and security platforms. Responsibilities include monitoring, incident response, vulnerability management, endpoint and identity administration, firewall and cloud security, application and email protection, compliance support, awareness training, reporting, documentation, and cross-functional remediation coordination.

Designs, implements, and manages security controls across AWS, Azure, and GCP environments. Leads cloud architecture reviews, technical risk assessments, secure solution design, and compliance remediation. Automates security governance using Infrastructure as Code and Policy as Code, integrates security into CI/CD pipelines, evaluates cloud security solutions, and partners with DevOps, architecture, application, infrastructure, and risk teams to secure cloud-native systems.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Supports and improves Identity and Access Management operations, including SailPoint IIQ workflows, rules, tasks, forms, integrations, monitoring, incident remediation, patching, reporting, risk assessment, root cause analysis, and documentation. Partners with help desk and business stakeholders, supports automation and platform upgrades, and participates in 24x7x365 on-call coverage.

Designs, deploys, and manages enterprise PKI infrastructure and certificate lifecycles. Automates PKI processes, integrates solutions with Active Directory, identity, PAM, infrastructure, and DevOps platforms, and enforces certificate security policies. Monitors compliance and infrastructure health, troubleshoots certificate and encryption issues, and provides documentation, guidance, and training. The role supports secure classified networks for U.S. Government operations and requires on-site work in Phoenix with business travel as needed.

Designs, deploys, and optimizes enterprise data protection across Microsoft 365, endpoints, cloud applications, SaaS platforms, and network egress points. Manages DLP, data classification, Microsoft Defender, Sentinel, Varonis, and DSPM capabilities; investigates incidents, reduces false positives, assesses data exposure, and drives remediation. Develops data handling standards, automation, documentation, reporting, and security metrics while partnering with IT, Legal, Compliance, and business data owners.

Design, implement, and operate Apollo’s security controls across identity, cloud infrastructure, endpoints, and incident response. Build secure-by-default systems, evaluate security vendors, lead security projects, shape the roadmap, and promote effective security practices across the organization. Key initiatives include zero-trust migration, agentic SOC development, sandbox hardening, third-party access reviews, incident response, and penetration-testing tooling.

Secure Apollo’s internal software, infrastructure, and AI-agent environments through threat modeling, red teaming, attack-trajectory development, adversary tracking, and detection engineering. Own security findings through remediation by designing durable controls, automated tests, CI/CD integrations, and monitoring. Collaborate closely with engineers and research teams to address novel AI-agent and insider-risk threats while documenting threat models and failure modes clearly.

Designs and develops secure systems and architectures for U.S. Navy missions. Responsibilities include analyzing engineering and security requirements, hardening systems, reducing attack surfaces, applying secure coding and operating-system security practices, evaluating architectures against adversary threats, and implementing cybersecurity countermeasures across system lifecycles.

Designs and operationalizes enterprise cybersecurity capabilities, with a primary focus on vulnerability management. Responsibilities include maintaining consolidated vulnerability data, tuning scanning tools and detection policies, improving asset coverage, assessing project security risks, implementing mitigating controls, advising stakeholders, responding to SOC escalations, and participating in Blue and Red Team exercises.

Designs and governs secure network architectures across enterprise, cloud, manufacturing, and remote-access environments. Responsibilities include creating reference architectures and standards, leading Palo Alto Networks security solutions, reviewing firewall and segmentation designs, integrating Azure and Microsoft security technologies, and defining logging and policy-management requirements. The role partners with engineering and project teams to translate business and application needs into practical, supportable network security designs.

The Senior Cloud Security Engineer protects NYC agency systems by assessing cloud and on-premises security, identity and access management, network defenses, email filtering, and endpoint protection. The role ensures compliance with cybersecurity policies, guides security architecture and remediation, operates defensive technologies, coordinates technical projects, communicates with stakeholders, and documents deployment plans. Work occurs within a 24/7 operation and may require nights, evenings, or weekends.

Supports federal IT system cybersecurity and privacy compliance under the NIST RMF. Responsibilities include RMF/ATO documentation, SSPP maintenance, continuous monitoring, vulnerability assessment and remediation tracking, POA&M management, incident response, audits, privacy assessments, change-impact reviews, SOP development, briefings, and advising system owners. The role also supports assessments, contingency exercises, SDLC activities, and cybersecurity documentation within GRC repositories.

Manages identity and access lifecycles, security technologies, vulnerability remediation, access reviews, security monitoring, risk assessments, incident investigations, audits, policies, business continuity, and cybersecurity education. Partners with infrastructure, application, and business teams to protect organizational, resident, and clinical information and strengthen security controls.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Assesses enterprise information security risks, conducts vulnerability and compliance assessments, and coordinates remediation across networks, systems, applications, and vendors. The role monitors risk mitigation, supports audits and incident response, reports findings, develops security policies and training, and leads security projects and architecture risk assessments. It requires experience with security controls, infrastructure, SIEM, IPS/IDS, Windows administration, and regulatory frameworks including HIPAA, HITRUST, SOC 2, and PCI.

Lead cross-functional initiatives to mature cloud and enterprise detection infrastructure, including telemetry pipelines, detection-as-code, logging, and scalable coverage. Design and tune detections for cloud, identity, endpoint, SaaS, CI/CD, and service-to-service threats. Conduct threat hunting, support incident response and on-call operations, apply threat intelligence and adversary emulation, mentor SOC engineers, and improve detection capabilities based on incident lessons learned.