Top Cyber Security Jobs

Design, implement, and operate security platforms (firewalls, IDS/IPS, SIEM, MDM). Perform vulnerability assessments, monitor and analyze security logs, drive remediation, enforce security policies, and evaluate new security technologies.

Design and manage GCP infrastructure using Terraform; architect compute, storage, and networking; integrate Vertex AI and BigQuery for ML and analytics; implement Wiz Security Control and Policies-as-Code (Rego) for continuous security and compliance; build automation and tooling; perform security assessments and collaborate with cross-functional teams.

Manage and administer authentication, PAM, and identity governance systems; integrate IAM into CI/CD with DevSecOps; enforce cloud security policies (AWS/Azure/GCP); support incident response; document configurations and advise IT teams; automate identity governance and workflows using AI where applicable.

Lead product security for UAS platforms across hardware, firmware, flight software, APIs, backend services, and cloud. Design secure architectures, perform security assessments and adversarial testing, integrate security into CI/CD, secure communications and OTA updates, build security tooling, and mentor engineers to embed security across the development lifecycle.

Lead and scale application security across engineering: implement automated SAST/DAST/SCA testing in CI/CD, administer GHAS, perform pentests and vulnerability management, threat model designs, secure cloud-native workloads (AWS), and drive secure coding practices and training.

Design, implement, and manage GCP infrastructure using Terraform; integrate Vertex AI and BigQuery; configure Wiz for continuous security monitoring; automate tooling and enforce GCP security best practices, policies-as-code, and compliance; collaborate with cross-functional teams.

Design, implement and maintain network security solutions (firewalls, IDS/IPS, proxies). Investigate compromises, manage security policies, support remediation, troubleshoot complex network and connectivity issues, and produce process documentation.

Secure autonomous vessels and supporting infrastructure via vulnerability assessments, penetration testing, network architecture/hardening (VPN/mesh, firewalls), AWS security, SAST/SCA integration into CI/CD, monitoring (Datadog), incident response, security tooling, documentation, and DevOps support to embed security into the SDLC.

Provide cybersecurity ISSO support for TSA Checkpoint Technologies: apply RMF to obtain ATOs, enforce NIST/FISMA/Zero Trust controls, perform vulnerability and patch management (Tenable Nessus), use CSAM, support CCB reviews, develop technical requirements and acquisition inputs, attend/document meetings, assist SOPs, and support audits and vendor coordination.

Serve as an ISSO supporting Air Force weapons program: manage ATO packages, maintain eMASS records, execute continuous monitoring, implement NIST SP 800-53 controls and DISA STIGs, use ACAS for vulnerability scanning, draft SSPs and POA&Ms, and handle USAF/DoW incident reporting within the RMF lifecycle.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Lead Oracle Identity and Access Management implementations: consult on business processes and architecture, develop/lead Oracle IDAM work, integrate Active Directory, manage SDLC deployments, perform identity administration, reconciliation and reporting, handle environment migrations and audit log retention, and coordinate stakeholders and offshore teams.

Lead security strategy, operations, and GRC across corporate and customer-facing transit systems. Drive security architecture, incident response (incident commander), threat intelligence, tabletop exercises, vendor risk management, and compliance across PCI DSS, SOC 2, and ISO 27001. Serve as primary auditor contact and communicate risk to leadership.

Lead cross-functional security initiatives: automate security tasks and incident response, manage HITRUST/SOC2/PCI assessments and remediation, evaluate and optimize security tools, secure software development (GitHub, code scanning, AI code), respond to audits, deliver training, and investigate and remediate security incidents to advance program maturity.

Manage industrial and personnel security for Special Access Programs: process PSQs/PARs, enforce policies, deliver indoctrination/debrief/refresher training, coordinate government visits, handle incident reporting and investigations, interface with senior leadership and multi-agency clients, and support on-site assessments and periodic travel.

Lead efforts to prevent, monitor, and respond to information/data breaches and cyber-attacks. Assist incident investigations, perform technical risk and vulnerability assessments, support secure system development (authentication, encryption), coordinate remediation, develop procedures, mentor team members, and ensure compliance with Citi's information security policies.

Lead enterprise application security architecture and secure SDLC practices. Drive DevSecOps integration, code security (SAST/DAST/SCA), threat modeling, risk management, governance, and collaboration with engineering to embed security across cloud, on-prem, hybrid, and SaaS environments.

Design, implement, and manage GCP infrastructure as code (Terraform); integrate Vertex AI and BigQuery Storage; configure Wiz for continuous security monitoring; implement automation, IAM, encryption, and Policies-as-Code; perform security assessments and audits; collaborate with data scientists, engineers, and security teams.

Lead and evolve the global SOC: design and operationalize cloud threat detection and automation across GCP/AWS, manage MSSP relationships, lead incident response and hunting, tune SIEM/SOAR and endpoint/cloud tools, run exercises and track SOC metrics, and mentor teams to improve security posture and compliance.

Design, deploy, and operate enterprise information security systems across systems, networks, procedures, and operations. Collaborate with staff and the SOC to enhance data collection/correlation, identify gaps, develop prevention/detection/mitigation solutions, produce installation and operational documentation, train agency personnel on security processes, and administer security services as part of a team.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Lead and provide technical oversight for complex network and security implementations, manage engineering teams, run design workshops, support presales, ensure best practices and successful project delivery, and maintain strong client relationships while fostering team development.

Lead design and implementation of scalable cloud security controls and automated guardrails. Build security-as-a-service tooling, perform assessments and threat modeling, support incident investigations, and partner with engineering teams to deploy security improvements and third-party/AI tool assessments.

Lead application security across product, pipeline, and customer environments by partnering with engineering to integrate secure design, conduct threat modeling and risk assessments, manage code and supply-chain security (SAST/DAST), triage bug bounty findings, harden Kubernetes and multi-tenant architectures, and participate in on-call rotation.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.