Top Cyber Security Jobs

Lead and evolve Compass’s enterprise information security and risk program. Own incident response, AppSec, cloud and product security, threat intelligence, GRC, SOX/CPRA compliance, vendor security, and security strategy. Build and scale a distributed security team, partner with Engineering/Product/Legal/Finance, and represent security to the Board, regulators, and external stakeholders.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Operate within a Managed Security Services environment to perform incident response, vulnerability scanning and remediation oversight, manage security tools (SIEM, IDS/IPS, malware defenses), automate analysis and remediation, maintain policies and SOPs, provide training and audit support, and ensure SLAs are met.

Lead vulnerability management strategy and execution across cloud and hybrid environments. Own end-to-end vulnerability lifecycle, drive automation, perform data-driven prioritization with advanced SQL, and partner with engineering, risk, and incident response teams. Provide hands-on engineering, on-call support, mentoring, and offensive security research to reduce exposure and improve operational reliability.

Manage identity and access lifecycle, administer security technologies (Entra, Okta, endpoint/email protection), monitor alerts, perform risk assessments, support incident investigations, audits, policy development, and security hardening across corporate and community systems.

Lead design and implementation of IAM, zero-trust, and anti-tamper controls for a portable C2 system. Deploy logging/monitoring (Splunk, Syslog), manage MDM and device lifecycle, coordinate encryption/TACLANE and SD-WAN protections, and enable secure rapid software integration while ensuring continuous monitoring and compliance in classified DoD environments.

Implement and integrate IT infrastructure using approved processes; support and review certificate management and PKI; define requirements for infrastructure contracts and SLAs; implement multi-process changes; provide infrastructure and security support across networks, databases, and operating systems. Onsite role with potential extension.

Perform enterprise risk assessments of networks, systems, and business applications. Collaborate with system owners and stakeholders to analyze, test, and document security controls across the agency environment.

Own and implement the platform's security and compliance posture (SOC 2, PCI, HIPAA). Design and automate controls and evidence pipelines, secure PII and tenant isolation across a multi-tenant platform, harden AI/LLM systems, partner with domains and CTO, and write production code to make compliance continuous and auditable.

Design, implement, monitor, and manage DLP and Microsoft Purview solutions and DSPM capabilities. Develop and enforce data protection policies, monitor endpoints/cloud/on-premises, manage SIEM/EDR/XDR and other security tooling, support incident response, and collaborate with SOC, architects, and IT teams to strengthen data governance and compliance.

Design and implement security controls across product, platform, and infrastructure. Threat model designs, review code and architectures, find and remediate vulnerabilities, improve detection and response, and automate security workflows and developer-friendly tooling to scale security across the company.

Lead RMF and ATO activities for Navy systems, develop and maintain SSPs/POA&Ms, perform security control assessments, manage vulnerability scanning and remediation, support continuous monitoring, analyze security logs, and coordinate cybersecurity guidance and compliance reviews with stakeholders.

Serve as an ISSO supporting RMF and DoD cybersecurity standards: assess and continuously monitor system security, maintain ATO/ATC and POA&M remediation, document cybersecurity artifacts, evaluate configuration changes, validate NIST SP 800-53 controls (eMASS), and use tools like ACAS/Nessus and SCAP to identify weaknesses.

Assess cloud designs and mobile features for security issues; evaluate builds for security best practices; design secure cloud services and automated security test frameworks; triage vulnerabilities; use SAST/DAST and AI tools; ensure regulatory compliance; engage third-party pentesting, red team, and threat modeling.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Lead secure design, deployment, and governance of cloud systems; assess and mitigate cloud risks; integrate security into CI/CD; perform threat modeling; evaluate third-party cloud tools; support incident response, audits, and regulatory compliance in a financial environment.

Manage and execute an IT risk and security assurance program: scope and perform control testing, reporting, remediation planning, metrics and analysis, drive regulatory and contractual compliance, develop training, and coordinate stakeholders to ensure IT controls operate effectively.

Provide operational information security functions focused on network and vulnerability management: run and analyze vulnerability scans, monitor IDS/IPS, lead penetration testing, perform forensics, define security controls, and assist with security tool implementations.

Lead enterprise security engineering strategy and teams across IAM, network/endpoint, SAP, application, and data security. Define architecture, embed secure-by-design practices, oversee identity, firewall, endpoint, DLP, encryption, and secure development programs, and partner with operations and business stakeholders to protect systems and data.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Administer and support the CyberArk PAM platform, onboard applications/infrastructure/cloud privileged accounts, drive automation and integrations, ensure governance/compliance, collaborate with security, cloud, and application teams, and improve PAM coverage, availability, and audit readiness.

Create, maintain, and enforce security policy documentation and controls mapping (NIST 800-53). Drive vulnerability assessment program, review and control document versions, coordinate technical teams, communicate with customers, and ensure compliance with PCI, HIPAA and personal data legislation.

Design, implement, and support network security and firewall solutions. Lead security architecture, policy optimization (Firemon), change monitoring, and incident/level 2-3 operational support. Deliver consulting, on-site implementations, and 24x7 response for P1/P2 incidents.

Perform advanced security evaluations and research on embedded devices, including firmware reverse engineering, low-level code review, hardware hacking, exploit development, and vulnerability assessments. Build tools, communicate findings to technical and non-technical stakeholders, publish research, and support engagement scoping and business development.

Design, implement, and maintain enterprise security architecture; run vulnerability scans and penetration tests; monitor SIEM and respond to incidents; manage IAM, DLP, encryption, and endpoint hardening; ensure compliance (CMMC, SOC 2, GDPR, PCI-DSS); provide security training and incident reporting.