Top Cyber Security Jobs

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Supports Cybersecurity Assurance teams with compliance enforcement, SIEM configuration, security administration, vulnerability management, audits, security checks, automation, documentation, technical writing, and hardware/software reviews. The intern may also assist with Windows and Linux administration, defensive cyber tools, networking, troubleshooting, scripting, compliance auditing, NIST documentation, and STIG-related work.

Lead Fireworks AI’s security operations function, including CrowdStrike deployment, detection engineering, incident response, SOAR workflows, threat intelligence, playbooks, metrics, and cross-functional incident coordination. Build and tune detections, operationalize response processes, run post-incident reviews, and improve coverage against MITRE ATT&CK. The role begins as a hands-on individual contributor and may grow into team leadership, including hiring and expanding 24/7 coverage and capabilities such as cloud detection engineering and red/purple team operations.

Perform IT systems administration, including patching, user management, and ICT security. Analyze system and security event logs, report and assess incidents, conduct security risk assessments and audits, evaluate security control effectiveness, and implement controls to identify and mitigate cybersecurity risks. Support the IT Security Manager and Cyber Security Specialist in maintaining and improving the organization’s security posture.

Protect P&G’s global IT environment from cyber threats through security engineering or analysis. Responsibilities include designing and monitoring security platforms, investigating incidents, responding to threats, assessing vulnerabilities, driving remediation, researching emerging attack techniques, strengthening security controls, and communicating risks to technical and business stakeholders.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.

Conduct cyber threat intelligence analysis focused on financial-sector threats, producing reports, actor profiles, executive briefings, and visualizations. Extract and operationalize IOCs, map activity to MITRE ATT&CK, develop detections, assess vulnerabilities and attack-surface exposures, and coordinate remediation. Use AI and automation to scale intelligence workflows, support digital-threat monitoring, share intelligence with industry partners, and participate in incident response and the SOC on-call rotation.

Secures and hardens application, cloud, infrastructure, operating systems, containers, CI/CD pipelines, and networks across multi-cloud and on-premises environments. Improves patching and golden-image processes, scales AI-assisted SAST and SCA tooling, prioritizes vulnerabilities, validates fixes, tracks remediation metrics, creates reusable tooling and runbooks, mentors junior engineers, and partners with application and platform teams to deliver security improvements.

Leads enterprise incident response as senior incident commander for high-severity events across hybrid and multi-cloud environments. Directs triage, containment, eradication, recovery, evidence handling, executive communications, and post-incident reviews. Owns incident response readiness, playbooks, exercises, after-action governance, and measurable improvement programs. Advances AWS detection engineering, monitoring, logging, telemetry, automation, identity security, and threat-informed mitigation while coordinating infrastructure, cloud, endpoint, identity, and application teams.

Execute security engineering across application, cloud, and infrastructure environments by applying patches, upgrading dependencies, hardening configurations, implementing security controls, and managing WAF and network-isolation changes. Review AI-generated SAST and SCA pull requests, coordinate regression testing, support patching cycles and golden-image refreshes, track remediation through verification, and collaborate with application and platform teams. Follow established runbooks, standards, risk prioritization, and CISA guidance while developing broader security expertise.

Supports P&G’s Cyber Defense organization by helping design, test, deploy, monitor, and improve security solutions. Interns may investigate cybersecurity incidents, identify vulnerabilities, drive remediation, research emerging threats and tactics, and strengthen security controls across networks, applications, infrastructure, and CI/CD pipelines. The role also involves communicating security risks, collaborating with cross-functional teams, and promoting compliance with cybersecurity standards and best practices.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability and risk assessments, scan-result remediation, threat detection, event correlation, infrastructure security, and communicating security issues to technical teams and senior management. The role requires Secret clearance, Security+ certification, vulnerability-scanning experience, and knowledge of NIST and DoN Risk Management Framework policies.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, threat detection, event correlation, security analysis, and infrastructure protection. The role requires applying NIST and RMF policies, communicating security risks to technical and senior audiences, and securing network, system, application, and communications architectures in contested environments.

Serve as the primary cybersecurity advisor for assigned systems and lead Risk Management Framework assessment and authorization activities. Develop and maintain security plans, assessments, POA&Ms, risk acceptances, agreements, and other authorization artifacts. Conduct continuous monitoring, control assessments, vulnerability reviews, impact analyses, and user account reviews. Coordinate remediation with system owners and technical teams, support audits and inspections, and help maintain compliant Authority to Operate status.

Own corporate IT and security across employee devices, identity, SaaS, networks, endpoint protection, vulnerability management, incident response, access reviews, and SOC 2 compliance. Build onboarding and offboarding workflows, maintain inventories and controls, coordinate audits and remediation, lead vendor security reviews, respond to customer questionnaires, and partner with Engineering on application and cloud security. Automate operational processes and support safe adoption of AI tools while serving as the primary employee IT and security contact.

Designs and operates identity security controls across enterprise platforms, including conditional access, privileged access, workload identities, and phishing-resistant authentication. Analyzes security logs, supports FIDO2 rollouts, manages identity risk, and participates in attack path management. The role also researches AI-assisted security tooling, automates operational workflows, documents standards and runbooks, and collaborates with Security, Systems, DevOps, Network, and Development teams.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Designs and automates cloud security architecture, guardrails, IAM, zero-trust controls, and compliance across AWS infrastructure, Kubernetes platforms, and CI/CD pipelines. Conducts threat modeling and security assessments, monitors cloud threats, supports incident response, and builds self-service security tools that enable engineering teams to work securely. The role partners with platform, DevOps, SRE, architecture, and enterprise security teams.

Develops and validates hardware and software security solutions for DoD sensor payloads and mission systems. Responsibilities include systems security architecture, requirements development, anti-tamper and cybersecurity implementation, reverse engineering, security testing, RMF compliance, technical release analysis, exportability assessments, cryptographic protection, A&A documentation, and POA&M maintenance. The role collaborates with government, program, business development, and international stakeholders and provides technology-release training. This is a full-time, on-site position in Rolling Meadows, Illinois.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Designs and operates security controls across AWS and Azure environments. Responsibilities include cloud security monitoring, incident response, security automation, Infrastructure as Code standards, CI/CD security integration, policy-as-code, vulnerability management, architecture reviews, risk assessment, compliance support, penetration testing coordination, documentation, and mentoring. The role collaborates with DevOps, SRE, Engineering, Compliance, and Product teams and participates in an on-call incident response rotation.

Leads Nordstrom’s enterprise Identity Security Operations function, overseeing identity platforms, access lifecycle operations, privileged access, incidents, service levels, automation, staffing, budgets, vendors, compliance, and operational roadmaps. Manages managers, engineers, analysts, and managed-service teams while partnering with Identity Engineering to ensure new capabilities are supportable, secure, observable, and production-ready.

Conduct computer network defense assessments, vulnerability scans, cybersecurity compliance reviews, and RMF package development for IT and operational technology environments. Use ACAS, Nessus, and Lansweeper to identify deficiencies, recommend remediation, and continuously assess cybersecurity posture. Apply DoD, NIST, USMC, CNSSI 1253, and DISA STIG requirements; coordinate with ISSMs, system owners, vendors, and cybersecurity stakeholders. Support SCADA and ICS security evaluations, POA&M management, and emerging threat analysis.

RunSybil is seeking curious and driven individuals for their talent community to connect for future job opportunities in AI security.

Provides information systems security engineering for complex, geographically distributed systems. Responsibilities include designing security architectures, validating requirements, assessing and mitigating risks, applying the Risk Management Framework, conducting vulnerability and security testing, auditing configurations, supporting certification and continuous monitoring, enforcing security policies, and collaborating with engineering, development, integration, test, program management, and customer teams.