Top Cyber Security Jobs

Lead efforts to prevent, monitor, and respond to information/data breaches and cyber-attacks. Assist incident investigations, perform technical risk and vulnerability assessments, support secure system development (authentication, encryption), coordinate remediation, develop procedures, mentor team members, and ensure compliance with Citi's information security policies.

Design and mature product security for a cloud-scale, ML-powered SaaS platform. Perform threat modeling and security design reviews, triage vulnerabilities, conduct manual code reviews, implement automated defenses, and train engineering teams on secure development practices.

Design, implement, and manage GCP infrastructure as code (Terraform); integrate Vertex AI and BigQuery Storage; configure Wiz for continuous security monitoring; implement automation, IAM, encryption, and Policies-as-Code; perform security assessments and audits; collaborate with data scientists, engineers, and security teams.

Lead and evolve the global SOC: design and operationalize cloud threat detection and automation across GCP/AWS, manage MSSP relationships, lead incident response and hunting, tune SIEM/SOAR and endpoint/cloud tools, run exercises and track SOC metrics, and mentor teams to improve security posture and compliance.

Design, deploy, and operate enterprise information security systems across systems, networks, procedures, and operations. Collaborate with staff and the SOC to enhance data collection/correlation, identify gaps, develop prevention/detection/mitigation solutions, produce installation and operational documentation, train agency personnel on security processes, and administer security services as part of a team.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Lead and provide technical oversight for complex network and security implementations, manage engineering teams, run design workshops, support presales, ensure best practices and successful project delivery, and maintain strong client relationships while fostering team development.

Provide senior-level cybersecurity risk management expertise supporting Authorization & Assessment (A&A), FISMA and IC security standards, continuous monitoring, CDS, and secure cloud/hybrid engineering. Apply NIST 800-series, CNSSI 1253, and RMF guidance, automate A&A and continuous monitoring activities, advise on compliance, remediation, and risk posture for federal mission needs.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.

Senior IT Security Engineer responsible for security risk assessments, application security reviews, penetration testing, secure software development, code reviews, threat modeling, and malware analysis. Works with web and microservice technologies (Node.js/Java), CI/CD and DevOps practices, databases (Oracle/MySQL/MongoDB), and produces security guidance, tooling, and metrics to support modernization and sustainment projects.

Perform continuous systems and network threat assessments, analyze threat intelligence, develop and implement security controls and mitigation strategies, participate in incident response, deliver security training, and maintain Risk Management Framework documentation to protect AFRL/DoD systems and networks.

Support cyber defense operations as a Tier-2 engineer: triage and resolve escalated tickets, design detections and automations, tune security platforms, co-lead threat hunting and exposure reduction, produce metrics/reports, mentor analysts, and use AI-assisted workflows to improve investigations and remediation.

Support and coordinate IT security programs and policies. Provide information assurance and security guidance to developers, administrators, and owners. Assess security impacts of changes, maintain SSPs, conduct security assessments for A&A, support AO/DAO/SCA/ISSM to obtain and maintain ATOs, respond to security tickets daily, and use COTS/GOTS tools to report system status and compliance.

Manage vulnerability data inflow from scanning teams, identify and research findings, coordinate remediation plans with infrastructure tower teams (compute, storage, network, voice), track and report remediation progress, and contribute to multi-disciplined service delivery teams.

Build and maintain scalable security platforms, automation, and tooling to protect data across SaaS, cloud, endpoints, collaboration tools, AI systems, and data warehouses. Develop data discovery, classification, governance, DLP, DSPM/SSPM, insider-risk, and access controls; leverage AI and automation to improve detection, prevention, and incident workflows while partnering with cross-functional teams.

Lead product security across design to deployment: embed security in the SDLC, conduct threat modeling and architecture reviews, run SAST/DAST and pen tests, manage vulnerability and secrets programs, secure CI/CD/GitOps and supply chain, design cryptographic controls, and hire/mentor product security engineers while ensuring compliance with NIST, FedRAMP, and CMMC for government and commercial customers.

Lead and evolve the global Offensive Security program by designing and executing threat-informed breach attack simulations, managing BAS tools, partnering with security teams to test and remediate, prioritizing findings risk-based, reporting trends and metrics, and assessing new platforms while maintaining confidentiality.

Lead end-to-end product management for enterprise security operations platforms, translating SOC/operator needs into roadmaps, user stories, and validated AI use cases. Manage vendors, enforce SLA and model validation, coordinate Agile delivery, UAT, adoption, and report platform and AI performance to senior leadership.

10.5-week summer internship in KeyBank's Enterprise Security Services. Interns support fraud, physical security, security portfolio, or business management teams performing data analysis, project and process support, security education, and reporting. Training includes security tools and business software, with mentorship and potential post-graduation rotational placement consideration.

Build, maintain, and troubleshoot SOAR playbooks, Python automations, custom API integrations and the incident/case management tooling. Partner with SOC analysts to convert manual workflows into reliable, documented, AI-assisted automations and evaluate new security tools for integration.

Secure enterprise information by monitoring, implementing, and reviewing security systems. Identify and remediate threats and vulnerabilities, perform risk assessments, develop global security strategies, and implement security policies and controls. Focus on network security, multi-OS environments, and McAfee ePolicy Orchestrator operations across a global enterprise.

Lead and execute a multi-year university information security strategy, manage the ISMS (ISO/IEC 27001), direct incident response and CSIRT, assess AI and third-party risks, ensure regulatory compliance (GLBA, FERPA, HIPAA, PCI DSS), oversee security operations and awareness, build and develop a high-performing security team, and communicate security posture to executive and board-level audiences.

Develop and integrate anti-tamper (AT) system security solutions for advanced weapons. Identify AT-critical program information, derive and document AT requirements and architectures, create and execute V&V procedures, perform security assessments, and coordinate with systems, software, and hardware teams. Prepare technical briefings and support risk management for AT-related program risks.

Administer user access and security controls, review audit trails and access violations, respond to help desk tickets, maintain security documentation and procedures, support business continuity and audits, provide technical support for systems and projects, and stay current on information security trends.

Perform vulnerability scanning and analysis, monitor IDS/IPS, lead penetration testing, conduct forensic analysis and incident response, define security controls, and assist implementing security tools while coordinating remediation with IT.