Top Cybersecurity Jobs

Leads enterprise vulnerability management across data centers, endpoints, multi-cloud, AI workloads, and manufacturing environments. The role prioritizes exposures using threat intelligence, exploitability, asset criticality, business context, and attack-path analysis. Responsibilities include vulnerability scanning, remediation governance, patch coordination, exception management, automation, dashboards, intelligence workflows, 0-day response, stakeholder influence, and mentoring. The engineer partners with infrastructure, cloud, application, SOC, and incident response teams to reduce organizational risk and mature cybersecurity capabilities.

Leads Morgan Stanley’s global internal audit strategy for cybersecurity, information security, and cyber resilience across the Firm and banking entities. Directs risk-based coverage of AI, digital assets, quantum readiness, cloud, identity, network, data, incident response, resilience, and third-party security. Evaluates controls against regulatory and industry frameworks, oversees findings and remediation, advises senior management, regulators, the Board, and Audit Committee, and manages and develops a global audit team.

Performs cybersecurity operations across alert monitoring, incident response, threat hunting, vulnerability management, detection engineering, identity security, and regulatory compliance. The role administers security tools, investigates suspicious activity, coordinates containment and remediation, supports NERC CIP-008 and CIP-015 activities, maintains audit evidence, and partners with technical and business stakeholders. Participation in on-call coverage, security assessments, projects, vendor reviews, and periodic industry travel is required.

Leads complex cybersecurity incident investigations across cloud and on-premises environments. Directs investigative priorities, coordinates threat hunters and technical specialists, communicates findings and response recommendations to executive customers, and balances containment with recovery and evidence preservation. Conducts threat research, develops analytical automation, improves data quality, mentors colleagues, and contributes to technical publications and presentations.

Leads global cyber defense and response operations, including the full incident response lifecycle, critical incident containment, detection coverage, operational metrics, playbook development, and SOC automation. Manages distributed teams, drives agile improvement backlogs, expands security monitoring across hybrid and multi-cloud environments, and partners with engineering, product, legal, and compliance stakeholders. The role also advances AI-driven security workflows and protects corporate, cloud, product, containerized, and AI/ML environments.

Own the IT infrastructure and cybersecurity function for a classified site. Responsibilities include infrastructure lifecycle management, incident response, security policy enforcement, RMF and accreditation execution, vendor and budget management, customer integration, and direct leadership of IT and cyber personnel. The role requires hands-on troubleshooting, executive risk briefings, inspection readiness, and alignment with federal classified-system frameworks.

Serves as the senior technical authority for complex cybersecurity investigations, incident response, threat intelligence, threat hunting, vulnerability analysis, penetration testing, detection engineering, and audit support. Leads high-impact investigations, develops detection and analytical content, evaluates vulnerabilities and attack paths, improves operational standards, mentors junior analysts, supports security platforms and automation, and communicates technical findings to stakeholders. The role is a senior individual contributor without direct personnel-management responsibility.

Leads enterprise cybersecurity risk analysis, risk and threat modeling, cyber risk quantification, metrics reporting, and executive presentations. Evaluates exceptions, audit findings, controls, policies, asset inventories, and emerging threats across cloud, access, application, vendor, data, and infrastructure security. Manages risk projects end to end, identifies control and process gaps, recommends policy enhancements, and influences technical and business teams to mitigate risk.

Investigates and responds to high-severity cybersecurity incidents across identification, containment, eradication, recovery, and lessons learned. Performs endpoint, network, and cloud forensics; malware analysis; threat hunting; and root-cause assessments. Documents findings, presents reports, collaborates with technical and business teams, improves detection content and response playbooks, and supports automation and AI capabilities within the incident response program.

Supports Air Force cybersecurity programs by installing and maintaining ACAS vulnerability-management tools, scheduling scans, analyzing vulnerabilities, and directing STIG-based hardening. Performs DoD compliance assessments, RMF and authorization documentation, incident reporting, root-cause analysis, corrective action planning, and POA&M maintenance. Collaborates with system administrators on remediation and supports ACAS server and database administration across classified networks.

Leads cybersecurity detection engineering by designing, deploying, and optimizing SIEM, EDR, SOAR, and AI-driven detection systems. Develops detection rules, automated remediation playbooks, and multi-agent security solutions; integrates threat intelligence and incident response; performs attack simulations and purple teaming; manages log ingestion and data lakes; and ensures compliance with security standards. Provides technical leadership, mentorship, documentation, stakeholder collaboration, and occasional off-hours support.

Leads cybersecurity investigations and engagements for major law firms, financial institutions, and corporations. Responsibilities include incident analysis, threat identification, intelligence collection, insider threat analysis, security operations, forensic investigations, penetration testing, client reporting, consultant management, methodology development, proposal enhancement, and service strategy. The role requires hands-on cybersecurity expertise, strong analytical and communication skills, subcontractor oversight, and travel to clients and company offices.

Lead design, implementation, and operationalization of Microsoft security solutions across identity, endpoint, cloud, data, and SOC domains for mission‑sensitive federal environments. Serve as technical advisor, integrate Microsoft Zero Trust stack with compliance frameworks, mentor consultants, and contribute reusable architectures, playbooks, and delivery accelerators.

Support enterprise cybersecurity by deploying and configuring BigID for data discovery, classification, and protection across cloud and hybrid environments. Build and tune DLP classifiers, automate workflows with Python, analyze scan results, recommend remediation, and support compliance with GDPR, CCPA, and NIST. Collaborate with cybersecurity and cross-functional teams in a Cyber Fusion Center, mature data protection programs, train stakeholders, and address data exfiltration risks.

Supports Air Force cybersecurity operations by installing and maintaining ACAS components, conducting Nessus vulnerability scans, analyzing findings, enforcing DISA STIG hardening, and assessing compliance. The role generates security and remediation reports, supports ACAS servers and databases, manages incident reporting and root-cause analysis, develops corrective action plans, and maintains POA&Ms. It also contributes to RMF, A&A, cloud security, access control, and collaboration with technical and government stakeholders.

Leads complex cloud security investigations across Microsoft Azure and Microsoft 365, serving as the senior escalation point for incident response. Develops playbooks, cloud detections, alerts, and repeatable response processes; mentors responders; performs forensic analysis using Microsoft security telemetry; and participates in on-call support. The role also requires stakeholder communication, technical documentation, automation, threat hunting, and continuous improvement of cloud incident response operations.

Develops and tracks compliance with AFRL cybersecurity architecture, strategy, plans, and policies. Provides cybersecurity support, systems and network engineering, enterprise architecture design, policy compliance monitoring, reporting, SharePoint administration, pilot project management, and customer support to AFRL technical directorates. Occasional travel may be required.

Maintains cybersecurity operations and security posture for an Air Force logistics system. Integrates cybersecurity throughout the system lifecycle, maintains authorization and compliance documentation, monitors security events and configuration changes, evaluates security controls, reports cybersecurity impacts, and supports training and certification of ISSOs and privileged users. The role is onsite at Gunter Maxwell AFB and requires advanced ISSM certification, significant professional experience, U.S. citizenship, and eligibility for a Secret clearance.

Manages school cybersecurity initiatives, including monitoring alerts, vulnerability remediation, incident response, identity and access management, security awareness, and compliance. Evaluates emerging and instructional technologies, trains faculty, supports enterprise applications, assists with integrations and workflow automation, coordinates vendors, maintains technology documentation and inventories, and participates in technology implementations.

Supports federal cybersecurity compliance and operations for NICHD systems, including FISMA authorization, RMF and ATO activities, NIST control assessments, authorization documentation, vulnerability management, continuous monitoring, incident response, remediation tracking, audit readiness, and stakeholder coordination. The role maintains security evidence and CSAM records, investigates alerts, supports containment and recovery, and translates operational findings into risk-management and compliance actions.

Lead cybersecurity policy, compliance, information assurance, and security architecture for enterprise cloud applications in DoD environments. Manage RMF workflows and the full ATO lifecycle, develop federal security documentation, implement DevSecOps and NIST 800-53 controls, evaluate cloud configurations and risks, and guide cross-functional teams and senior government stakeholders. The role requires hands-on eMASS experience, DoD security framework expertise, an IAT Level II certification, and an active Secret clearance.

Lead cybersecurity policy, compliance, information assurance, and DevSecOps implementation for enterprise cloud applications in DoD environments. Manage the complete RMF and ATO lifecycle, develop security documentation, implement NIST 800-53 controls, evaluate cloud architectures and configurations, and use eMASS to manage compliance workflows and artifacts. Provide architectural guidance, risk mitigation strategies, and stakeholder coordination with senior Department and Service-level officials.

Designs, implements, and maintains enterprise cybersecurity systems across university infrastructure, networks, cloud environments, and research systems. Configures security platforms, manages identity and access services, leads incident response and investigations, develops automation, supports zero-trust and cloud security architectures, and conducts security reviews. The role also supports HIPAA, FERPA, PCI-DSS, CMMC, and NIST compliance, documents technical processes, collaborates across IT teams, and mentors colleagues.

The Senior Manager for Medical Device Cybersecurity will lead the strategy and execution of cybersecurity initiatives for medical devices, ensuring compliance with FDA guidelines and integrating security into product development processes.

Paid cybersecurity internship focused on threat practice and penetration testing. Interns support internal, external, and web application penetration tests, remediation validation, reporting, client communication, and social engineering projects. The program develops technical and consulting skills through training labs, industry frameworks, execution planning, documentation, and client engagement support. Successful participants may receive a full-time Information Security Associate offer.