Top Cyber Security Jobs

Lead and unify Blitzy's security strategy for agentic and conventional software, focusing on ML/LLM security, cryptography, cloud, anomaly detection, and vulnerability research. Advise executives, oversee production security engineering, drive offensive/defensive initiatives, and translate research into enterprise-grade controls and designs.

Lead and mature a global Application Security capability, define strategy and standards, oversee AppSec/DevSecOps/AI Security/cloud-native controls, embed security across the SDLC and CI/CD, drive secure design reviews, tooling adoption, and communicate risk to senior leadership while supporting audits and regulatory assurance.

Sell cloud security and risk-management solutions to mid-market customers. Exceed quotas, generate and cultivate leads, manage the full sales cycle, maintain CRM accuracy, perform extensive outreach, cross-sell/upsell, coordinate handoffs to implementation, and report weekly metrics.

Analyze security data to identify risks and develop Key Risk Indicator dashboards; monitor internal reporting channels; maintain information security policies, standards, and the security intranet portal; and perform related security and risk duties in support of financial services IT security.

Conduct interviews with business and technical owners to gather policies and procedures; develop and track InfoSec implementation plans; document findings; assess agency documentation for control compliance; facilitate status reporting; collaborate with agencies and provide compliance recommendations.

Manage multiple concurrent statewide information security projects (encryption, MFA, VPN, SIEM, DLP, patching, privileged access, vulnerability assessment). Lead project planning, risk/scope/quality management, vendor coordination, RFP development, knowledge transfer, and status reporting to ensure successful implementation across state agencies.

Design, assess, and support secure application architectures. Perform threat analyses, validate penetration test and code-scan results, identify vulnerabilities, quantify and communicate risks, recommend mitigations, ensure compliance (HIPAA, SOX, CMS), and collaborate with development and business teams throughout SDLC. Provide security guidance across web and database tiers and promote security awareness.

Manage day-to-day security operations and maintain the operational security posture for DoD SAP, SCI, and Collateral systems. Develop and update RMF/A&A authorization packages, perform continuous monitoring, assess configuration changes, coordinate hardware/software modifications, review audit records, identify vulnerabilities and recommend countermeasures, and support security training, incident handling, and SAP activities. Work closely with ISSM/ISO and support internal/external customers. Requires active TS/SCI and CI polygraph eligibility.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Design and implement cloud security controls across multi-cloud environments, harden Kubernetes clusters, enforce IAM and least-privilege, manage IaC security, run CSPM and container scanning, automate compliance evidence, and monitor runtime container security.

Lead administration, security, and lifecycle operations of Cisco-based network infrastructure. Manage firewalls, access controls, VPNs, WAFs, DDoS/protection, telemetry, and cloud security. Perform upgrades, incident response, vulnerability remediation, automation, documentation, and mentor junior staff while collaborating on secure hybrid cloud and datacenter architectures.

Lead Security Engineer to design and defend cloud, network, and systems infrastructure. Implement zero-trust, IAM/PAM, SIEM/EDR, vulnerability management, incident response, vendor/customer security assessments, and drive SOC 2 Type II compliance while partnering with engineering and legal.

Design, implement, and support firewall and network security architectures for internal and MSSP customers. Provide engineering and operational support via service desk, perform packet analysis, policy and ACL development, security incident identification/remediation, and continuous process improvement across security architecture, engineering, and operations.

Contract security consultant to support and coordinate PCI-DSS compliance assessments (annual QSA engagement), prepare and submit evidence, implement and monitor PCI environments, perform vulnerability assessments and security event investigation, manage PCI training, contribute to hardening standards, and participate in incident response.

Design and build security-focused tools, automate security workflows within the product using Python and Go, maintain Terraform-based range infrastructure and virtualization for testing, integrate diverse security tools, collaborate with cross-functional teams, communicate security features to non-security stakeholders, and work directly with end users to meet operational needs.

Provide security architecture design and consulting, lead implementation projects, perform on-site and remote technical implementations, handle work orders, change requests, and incidents, and research and oversee IT security systems and policies to support business needs.

Design, implement, and operate enterprise encryption, tokenization, and key management platforms. Lead hands‑on development of production services, ensure high availability, observability, disaster recovery, and compliance alignment. Influence architecture, mentor engineers, improve performance and developer experience, and partner with security, compliance, and application teams to integrate secure data protection solutions.

Lead embedded security for vehicle platforms: assess product security, establish and maintain secure boot, integrate HSMs and key management, maintain BSPs, apply cryptographic standards, and collaborate with software/hardware/QA/product teams to embed security across the product lifecycle.

Lead application security across mobile, cloud, on‑prem, IoT, and AI features. Manage vulnerability triage, threat modeling, design and code reviews, AppSec tooling, CI/CD automation, developer training, and incident response while partnering with engineering and compliance.

Design and consult on network security architecture, lead security implementations, provide L2-L3 operational support, handle work orders/change requests/incidents, perform on-site deployments, and respond 24x7 to P1/P2 incidents.

Lead network security architecture and firewall projects, implement and operationalize FireMon policy optimization, provide L2-L3 support and 24x7 response for priority incidents, handle work orders, change requests, and customer-facing consulting engagements.

Design, implement, and support web security platforms. Troubleshoot SSL/TLS, web traffic, and packet captures. Lead projects, develop processes and reports, monitor and respond to security incidents (24x7), collaborate with development and operations to ensure compliance with security standards.

Provide IT support for business processes with focus on SAP security administration. Participate on teams, apply IT analyses, complete basic changes to documented processes, and support roles/objects/user profiles in SAP across application, distributed, and mainframe environments.

Lead detection and response across endpoint, cloud, identity, network, and SaaS telemetry. Own complex investigations and incident response end-to-end, tune detections, perform threat hunts, develop playbooks/runbooks, mentor analysts, and coordinate cross-team during incidents to reduce dwell time.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.