Top Cyber Security Jobs in Dallas, TX

Coordinate and manage IT security implementation projects: define scope, schedules, budgets, and resources; document requirements; lead change management; engage stakeholders; track risks/issues; produce status reports and meeting minutes; work with vendors and infrastructure teams; provide technical review of SOW/BOM/solution architecture; and support project turnover to delivery.

Contract Security Engineer focusing on malware detection, reverse engineering (Windows), incident response, and security event analytics using ArcSight SIEM and McAfee ePO, plus automation scripting and network/protocol analysis.

Senior Systems Engineer responsible for auditing network security compliance, designing and supporting network infrastructure, and hands-on implementation/configuration. Requires deep Windows and IIS administration, Active Directory expertise, and experience with VPNs, firewalls, load balancers, routing, and Ethernet technologies.

Monitor security alerts across endpoint, identity, and cloud tools; perform initial triage and escalate threats; assist with incident response and after-hours investigations; produce incident reports and maintain audit evidence for compliance; support endpoint/identity monitoring, security awareness, and ticketing system documentation.

Lead strategy and technical execution of vulnerability management, offensive security, and AI-augmented defenses. Own full VM lifecycle, integrate scanning and asset systems, automate remediation, generate security insights, define KPIs/SLAs, advise executives, and mentor engineers to improve organizational security posture and compliance.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Monitor and triage security events across SIEM, M365 Defender, AWS and enterprise tools; investigate incidents, perform threat hunting, correlate telemetry, produce incident reports, recommend containment and remediation, collaborate with engineering and risk teams, maintain SLAs, and participate in SOC on-call rotation.

Lead design, implementation, and operation of DSPM and DLP solutions to discover, classify, and protect sensitive data across cloud, SaaS, and enterprise systems. Partner with security and infrastructure teams to reduce exposure, enforce access controls, support audits (FINRA/SEC), develop standards and runbooks, and advise leadership on data security risks and roadmap improvements.

Manage enterprise-level vulnerability remediation across multiple areas, coordinating discovery, prioritization, and remediation tracking to reduce security risk and ensure compliance.

Protect systems and data by enforcing IT security policies, monitoring for intrusions, investigating incidents, overseeing patch management, collaborating with IT and business groups, and supporting audits and compliance activities across networks, databases, applications, and web services.

Lead hands-on container security across AWS (ECS, EKS) and serverless environments using Wiz for image scanning, runtime visibility, and risk remediation. Implement and mature container security controls, assess vulnerabilities in images and pipelines, automate remediation, partner with platform and engineering teams, leverage AI/ML for threat detection and prioritization, report metrics, and provide training and documentation.

Design and own scalable CSPM tooling and automation platforms across thousands of cloud accounts. Architect event-driven pipelines, auto-remediation, and integration patterns. Drive platform extensibility, lead technical reviews, mentor engineers, and shape AI-assisted security roadmaps while partnering with Platform, DevOps, SRE, and application security teams.

Develop, productionize, and scale AI-enabled application security and software supply chain capabilities. Integrate AI services with AppSec tools, implement SBOM and dependency intelligence, automate secure CI/CD pipelines, and monitor AI security services while partnering with engineering and AppSec teams.

Lead hiring, development, and performance management for an IAM team. Design, deploy, and oversee multicloud identity and access management solutions, resolve complex security issues, advise on vendor implementations, and drive policy and continuous improvement across the enterprise.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Perform full life-cycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems achieving ATO. Conduct security assessments per NIST SP 800-53, manage risk registries, provide configuration and vulnerability management guidance (HBSS/ACAS, IAVM), produce A&A documentation (STIG/IAVA, eMASS), and recommend mitigations to leadership.

Lead a team that designs, provisions, automates, and scales multi-cloud offensive security infrastructure and platforms. Establish engineering standards, drive IaC/CI-CD automation, manage environment lifecycle, and oversee intake/backlog, prioritization, metrics, and executive reporting. Partner with offensive security and testing teams to deliver resilient, secure environments and operational dashboards while mentoring staff and improving operational efficiency.

Lead and grow a distributed offensive security program (red team, pen testing, AI-augmented operations). Own strategic roadmaps, approve complex engagements, drive Purple Team collaboration, report to leadership, and continuously improve methodologies, automation, and detection-remediation outcomes.

Lead technical product delivery for cloud IAM and identity‑based security controls across multi‑cloud environments. Partner with engineering, architecture, and vendors to embed policy-as-code and CI/CD pipeline controls, translate audit and risk needs into technical requirements, manage backlog and agile delivery, provide stakeholder communications, mentor team members, maintain documentation and runbooks, and support production readiness including on‑call duties.

Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.

Lead and mature the company's cybersecurity program for a distributed, remote workforce. Develop strategy, governance, risk management, incident response, compliance (SOC 2/ISO/NIST), vendor assessments, device and identity controls, security awareness, and executive reporting to reduce organizational cyber risk and enable growth.

Contract SAP Security consultant role requiring hands-on experience with SAP GRC 10. 3-month engagement (possible extension) based in Plano, TX. Must have 5–7 years of relevant experience and strong communication skills. Start date around May 1.

Designs, implements, and supports SAP security and GRC (ARA, EAM) across ECC and Portal. Manages access risk analysis, emergency access, role troubleshooting, interfaces, testing, documentation, and security controls. Collaborates with technology and business teams, performs risk assessments, supports implementations, and provides production support for security/GRC issues.

Lead RMF-based A&A for Top Secret/SCI information systems, manage continuous monitoring, incident response, policy and compliance with NISPOM/DAAPM/DOD/IC requirements, liaise with DCSA/CSA, mentor ISSOs, and integrate physical and technical security controls across classified networks.

Lead application security assessments (code review, penetration testing, design review, threat modeling), evaluate and document secure architecture and policies, identify vulnerabilities and remediation, research secure cloud adoption, perform threat analysis and test-case development, and provide security consulting and guidance to engineers and incident/forensic teams.