Top Cyber Security Jobs

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Lead a Developer Enablement Application Security team to design secure systems, integrate application security into CI/CD, perform technical analysis and security reviews, deliver scalable solutions, and communicate risks and metrics to engineering teams and senior stakeholders.

Support and mature the cybersecurity Site Reliability Engineering capability for critical security platforms. Operate SIEM, XDR, CyberArk, SOAR, NDR, IPS, and related systems; perform monitoring, incident response, problem management, and root cause analysis. Build automation with Python, Ansible, APIs, and infrastructure-as-code. Maintain observability dashboards, define SLIs and SLOs, document runbooks, support production handovers, participate in on-call duties, and conduct disaster recovery and resilience testing.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Execute hypothesis-driven threat hunts across endpoint, identity, network, and cloud telemetry; document reproducible hunt workflows; correlate multi-telemetry signals; translate findings into detections, playbooks, and engineering work; support incident response surge; collaborate on adversary simulation and detection tuning.

Lead strategy and cross-functional execution of security and compliance roadmap. Drive certification and audit efforts, translate requirements into engineering priorities, develop governance, improve secure development and automation, and communicate risks and progress to leadership while partnering across Security, Legal, IT, and Product.

Own product strategy and roadmap for Nucleus' UI/UX platform. Prioritize customer-driven features, define metrics, gather requirements, coordinate cross-functional teams, and work with engineering to deliver analytics, frontend customization, and UX-focused B2B SaaS solutions.

Operate and improve vulnerability and compliance scanning across web applications, infrastructure, networks, containers, and runtime environments. Support FedRAMP continuous monitoring, NIST 800-53 evidence collection, compliance tracking, audit reporting, and remediation workflows. Triage findings, filter false positives, prioritize risk, track Jira tickets, partner with engineering on SLAs, and automate scanning processes. The role is fully onsite in Coppell, Texas.

Lead Etix’s company-wide security program, strategy, roadmap, and risk management. Strengthen application, API, cloud, infrastructure, IAM, monitoring, and secure SDLC practices; establish data governance and privacy controls; maintain PCI-DSS compliance; prepare for SOC 2; and lead incident response. Partner with engineering, product, IT, legal, and executives across globally distributed teams while communicating security risks and priorities to leadership, customers, auditors, and partners.

Perform end-to-end SOC 2 audits for startup clients: create audit plans and system descriptions, collect evidence via video walkthroughs, review tester results, manage 20+ clients, escalate issues, and deliver 10–15 reports monthly.

Supports cybersecurity operations for classified information systems by monitoring logs, validating controls, processing access and data transfer requests, maintaining authorization documentation, tracking POA&Ms, identifying security issues, and preparing for audits and inspections. Collaborates with IT, engineering, facilities, and industrial security teams to apply cybersecurity requirements and support remediation in a DoD environment.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.

Owns cybersecurity for classified and controlled information systems, leading RMF authorization, continuous monitoring, inspections, audits, risk management, POA&M closure, change control, and compliance documentation. The ISSM communicates cybersecurity risks to leadership, coordinates corrective actions and cross-functional security activities, and mentors ISSOs. The role requires onsite work in Cedar Rapids, an active DoD Top Secret clearance, IAM Level III certification, and up to 20% domestic travel.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Leads product security initiatives and manages business risk across product engineering organizations. Partners with executives, engineering, and security teams to prioritize security backlogs, improve risk posture, and translate technical security concepts into business outcomes. Responsibilities span application, cloud, infrastructure, secure coding, security architecture, third-party risk, compliance frameworks, emerging threats, and AI security. The role requires strong stakeholder influence, executive communication, independent ownership, and cross-functional collaboration.

Leads and develops a cloud security engineering team while overseeing security operations across AWS, Azure, and GCP. Responsibilities include managing CSPM, CNAPP, vulnerability management, cloud identity, compliance monitoring, security baselines, remediation programs, automation, governance, metrics, audits, and incident response. The role partners with technical and business stakeholders to reduce enterprise cloud risk and improve security service delivery.

Leads and mentors cloud security engineers while developing and executing security strategy across AWS, Azure, and GCP. Oversees cloud security baselines, monitoring, compliance, vulnerability management, IAM, container and Kubernetes security, and enterprise-scale security solutions. Identifies service gaps, drives automation and AI/ML improvements, documents policies and operational runbooks, and partners with stakeholders to implement new security technologies in production.

Leads Trustly’s global information security and IT organizations, defining security strategy, architecture, risk management, compliance, SOC operations, incident response, and resilience programs. Oversees enterprise IT, infrastructure, workplace technology, vendors, disaster recovery, and AI-driven productivity initiatives. Advises the executive team and Board on cyber risk, regulatory requirements, and technology resilience while managing global teams and relationships with regulators, auditors, and strategic partners.

Owns security and compliance across IT, software development, GCP infrastructure, and subprocessors. Responsibilities include managing SecOps tools, improving software security posture, conducting security and AI audits, maintaining compliance artifacts, developing data and AI governance, vetting technologies, and managing contractual security obligations. The role partners with engineering teams and requires experience with Vanta, cloud DevOps, infrastructure as code, identity platforms, security reviews, and regulated industries.

Own Forterra’s product security program across autonomous vehicle platforms, including security strategy, governance, DoD ATO and IATT lifecycles, STIG compliance, threat modeling, SBOM and vulnerability management, incident response, and security requirements. Lead product security engineers and cross-functional contributors, brief executives and government stakeholders, support bids and customer evaluations, and build a security-focused engineering culture.

Designs and reviews security architectures for applications, networks, databases, operating systems, SAP, cloud environments, and service providers. Partners with business and IT stakeholders throughout project lifecycles to identify risks, define controls, document solutions, and ensure requirements are delivered on time and within budget. Maintains security procedures, recommends improvements, and supports information governance, policy development, hardening, and compliance with frameworks including NIST and NERC CIP. Global travel may be required.

Investigate and identify cybersecurity threats using Tanium, Splunk, ArcSight, syslog, and related monitoring tools. Analyze indicators of compromise, configure incident detection and reporting, follow escalation workflows, recommend corrective actions, support security tool direction, and collaborate with engineering and cross-functional teams on technical planning and projects.

Monitor and oversee the information security program, maintain annual risk assessments, evaluate technology risks and internal controls, conduct security testing, rate vulnerabilities, recommend remediation, and support compliance with security standards and regulations. The role requires collaboration across onshore and offshore teams, technical and business reporting, senior-level influence, and adaptability to shifting priorities.

As a Pre-Sales Engineer, you will provide technical expertise in identity security, conduct solution demonstrations, manage POCs, and align solutions with customer goals through strategic partnerships.