Top Cyber Security Jobs

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Assesses enterprise information security risks, conducts vulnerability and compliance assessments, and coordinates remediation across networks, systems, applications, and vendors. The role monitors risk mitigation, supports audits and incident response, reports findings, develops security policies and training, and leads security projects and architecture risk assessments. It requires experience with security controls, infrastructure, SIEM, IPS/IDS, Windows administration, and regulatory frameworks including HIPAA, HITRUST, SOC 2, and PCI.

Lead cross-functional initiatives to mature cloud and enterprise detection infrastructure, including telemetry pipelines, detection-as-code, logging, and scalable coverage. Design and tune detections for cloud, identity, endpoint, SaaS, CI/CD, and service-to-service threats. Conduct threat hunting, support incident response and on-call operations, apply threat intelligence and adversary emulation, mentor SOC engineers, and improve detection capabilities based on incident lessons learned.

Designs, operates, and secures on-premises and cloud network architectures across Cisco Meraki, Cloudflare, AWS, and GCP. Responsibilities include network segmentation, firewalls, VPNs, zero-trust access, security monitoring, incident response, and protection of CUI, EAR, and ITAR-controlled data. The role partners with IT, security, and engineering teams to meet compliance and business requirements.

Manage and enhance the firm’s information security systems, threat lifecycle, incident response, risk management, and security technology. Review and investigate security events, coordinate threat mitigation, lead third-party assessments, design scalable security environments, provide security consulting, and support users. The role requires expertise in SIEM, network and endpoint security, cloud technologies, incident response, Linux, and enterprise security controls.

Manages and strengthens IAM controls, governance, quality assurance, compliance, and risk posture across enterprise systems. Responsibilities include validating access controls, maintaining audit artifacts, managing IAM exceptions, supporting SDLC control testing, monitoring application adherence, reporting compliance metrics, and partnering with security, technology, audit, regulatory, and business stakeholders. The role also supports identity controls for cloud solutions, AI platforms, machine identities, and emerging digital capabilities.

Manage information security risk for CFO and Global Risk Management functions. Assess control gaps, exceptions, vulnerabilities, vendors, cloud services, applications, infrastructure, data protection, and identity access. Coordinate remediation, audits, regulatory activities, governance, and risk reporting across business, technology, legal, compliance, and vendor stakeholders. Translate technical risks into business impacts, provide practical guidance, monitor emerging threats, and support security strategy and modernization initiatives.

Manage vulnerability scanning, patching, threat detection, incident response, identity and access management, data loss prevention, vendor security due diligence, and complex tier 3 security support. The role also leads security investigations, remediation, root cause analysis, policy development, control testing, and implementation of security solutions while maintaining documentation and communicating risks to leadership.

Supports the cybersecurity posture of assigned DoD information systems by maintaining RMF documentation, SSPs, POA&Ms, and eMASS records. Performs continuous monitoring, vulnerability analysis, STIG compliance validation, audit evidence collection, and incident response coordination. Partners with system owners, administrators, engineers, and ISSMs to resolve security issues and maintain compliance with NIST and DoD requirements.

Leads cybersecurity oversight for assigned systems and enclaves, directing RMF execution and Authority to Operate activities. Manages vulnerability assessments, risk posture, POA&M tracking, remediation, security policies, and compliance with NIST and DoD requirements. Supervises ISSOs and security personnel while coordinating with Authorizing Officials, system owners, engineers, assessors, and leadership. Provides executive risk briefings, audit support, security training, and continuous monitoring oversight.

Engineer cybersecurity architecture, implementation, hardening, monitoring, and compliance for DoD and military systems. Guide clients through RMF, IATO, IATT, and ATO processes; conduct vulnerability scanning, remediation, security control assessments, and STIG compliance activities. Coordinate with ISSMs, enforce DoD cybersecurity policies, and maintain acceptable security postures. Support hybrid AI/ML networks and develop solutions using security engineering practices, with potential application of DevSecOps, cloud, Agile, and Linux expertise.

Manages and supervises the information security team, overseeing SIEM, DLP, endpoint protection, user monitoring, threat hunting, breach simulations, and security operations. Develops security standards, protects systems and data, monitors threats and infrastructure, manages security products and vendors, tracks metrics, and leads incident analysis. Supervisory responsibilities include hiring, training, coaching, disciplinary actions, evaluations, and promotion recommendations. The role requires on-site attendance, occasional schedule flexibility, and regular travel to conferences, meetings, and branch locations.

Provides physical security and information assurance support for collateral, SCI, and SAP systems. Maintains accreditation documentation, conducts security inspections, identifies vulnerabilities, implements corrective actions, manages media controls, and supports facility security reviews. Enforces visitor, personnel, electronic-device, and prohibited-item controls. Authors and maintains certification and accreditation documentation and conducts information assurance training.

Own and modernize PKI and certificate lifecycle systems for automotive products and EV charging. Design authentication and authorization using X.509, mTLS, OAuth2, and OIDC; build shared infrastructure with Kubernetes, service mesh, and workload identity; support secure boot and key management; operate production services through GitOps and observability; document systems and mentor engineers.

Leads cybersecurity strategy, governance, risk management, compliance, vulnerability and incident remediation, security service delivery, and business advisory activities for an assigned brand. Partners with executives and cross-functional teams, oversees security requirements and initiatives, manages reporting, budgets, resources, vendors, and continuous improvement, and develops security teams and culture across a complex global organization.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, DCID, ICD, and SAP policies; develops security procedures and training; assesses vulnerabilities and risks; oversees facility compliance reviews and corrective actions; briefs personnel; and investigates classified-information losses or compromises. Requires SAP experience, current TS/SCI clearance, and ability to obtain TS/SCI with CI polygraph.

Leads cybersecurity strategy, governance, risk, compliance, vulnerability remediation, incident coordination, service delivery, and security consulting for an assigned brand. Advises executive stakeholders, manages audits and regulatory requirements, oversees security metrics and roadmaps, coordinates cross-functional remediation, manages resources and vendors, and develops security teams. The role drives measurable security maturity and business outcomes across a complex global organization.

Develop low-level firmware for secure enclaves in custom ASICs supporting secure boot, attestation, root of trust, provisioning, secure updates, recovery, telemetry, tamper monitoring, and debugging. Collaborate with ASIC, hardware, security, software, and systems teams on interfaces and requirements. Support pre-silicon validation, FPGA and simulation development, silicon bring-up, production deployment, testing, code reviews, and documentation.

Leads cybersecurity strategy, governance, risk, compliance, vulnerability remediation, incident coordination, service delivery, and security consulting for an assigned brand. Advises executives and stakeholders, manages audits and regulatory requirements, oversees security metrics and reporting, coordinates cross-functional remediation, supports budgeting and vendor management, and develops security teams and resources. Requires 10+ years of progressive cybersecurity or information security leadership experience in complex enterprise environments.

Perform information technology security risk and compliance assessments for federal systems; research, author, and support information security policies and standards. Preferred duties include implementing eGRC platforms such as RSA Archer and developing security risk performance metrics and reporting dashboards for executive, business, and technical audiences.

Administer SAP Basis and security across ECC and S/4HANA environments, including monitoring, transports, upgrades, patching, refreshes, performance tuning, role-based access, user provisioning, SoD remediation, and audit support. Support global implementations, testing, cutover, and hypercare. The role also manages NextLabs, automation, infrastructure changes, documentation, troubleshooting, compliance readiness, and small application projects while collaborating with infrastructure, application, QA, and security teams.

Assess cloud technologies, applications, workloads, and security controls for risks and vulnerabilities. Lead cloud vulnerability identification, gap analysis, remediation planning, and hybrid-cloud security improvements. Manage Aqua, Wiz, Qualys, and CrowdStrike solutions; advise engineering teams; support audits and regulatory inquiries; monitor emerging threats; and align cloud security initiatives with enterprise strategy. The role also provides subject matter expertise, technical guidance, and leadership updates while developing team capabilities.

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.