Top Cybersecurity Jobs

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Sr. Manager of Information Risk & Controls drives the risk management evolution by leading risk identification, developing frameworks, and collaborating with teams across Invesco.

Leads cybersecurity risk identification, assessment, mitigation, and control implementation. Supports HIPAA and PCI DSS compliance, customer cybersecurity surveys, evidence collection, stakeholder coordination, compliance monitoring, metrics, and leadership reporting. Advises business and technology stakeholders on secure technology decisions, applies NIST, ISO, ITIL, and COBIT frameworks, and mentors less experienced team members.

Conduct mixed-method behavioral research on cybersecurity, privacy, artificial intelligence, risk, trust, and human behavior. Design and lead interviews, focus groups, surveys, and experiments; analyze quantitative and qualitative data; publish findings; support grant proposals; mentor student researchers; manage project milestones; and disseminate results with interdisciplinary and international collaborators.

Maintains information system security postures for DoD Collateral, SCI, and SAP environments. Supports continuous monitoring, authorization packages, RMF assessment and authorization activities, configuration management, vulnerability remediation, audit reviews, media protection, incident handling, and security training. Coordinates system changes with ISSMs and authorizing officials while ensuring compliance documentation and security safeguards remain current.

Maintains the security posture of DoD information systems supporting Collateral, SCI, and Special Access Programs. Responsibilities include preparing RMF authorization packages, monitoring systems, managing configuration changes, conducting security impact analyses, maintaining compliance documentation, reviewing audit records, identifying vulnerabilities, supporting remediation, overseeing media sanitization and system recovery, and assisting with physical, personnel, incident-handling, and security-awareness activities.

Ten-week, on-site Internal Audit IT and Cybersecurity internship supporting technology risk assessments, control evaluations, audit testing, system configuration reviews, and cybersecurity assessments. Interns examine access management, data integrity, network security, cloud platforms, applications, and automated processes while documenting findings and recommendations. The role includes mentorship, professional development, and exposure to audit standards and financial technology environments.

Lead Citi’s enterprise Insider Threat program within the Cybersecurity Fusion Center. Responsibilities include defining strategy, managing and developing multidisciplinary teams, implementing data-centric detection and response processes, applying AI and advanced analytics, integrating behavioral and technical indicators, advising senior stakeholders, coordinating governance and risk controls, and engaging industry and government partners. The role requires extensive cybersecurity leadership, insider threat expertise, incident response experience, and the ability to drive global transformation.

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Designs, implements, operates, and improves security controls for information systems, networks, applications, and data. The role supports risk management, incident response, vulnerability reduction, compliance, continuous monitoring, security control assessments, and DoN enterprise system accreditation. Responsibilities include analyzing scan results, documenting findings, applying security frameworks, and collaborating with technical and nontechnical stakeholders. The position is onsite in New Orleans and requires U.S. citizenship and an active interim Secret clearance.

Advises strategic enterprise customers on cybersecurity, cloud security, compliance, privacy, and risk. Leads security reviews and executive briefings for CISOs and risk leaders, presents Salesforce’s security architecture and controls, supports audits, questionnaires, contractual requirements, and escalations, and creates customer-facing security materials. Partners with Sales, Customer Success, Legal, Product, Engineering, and Security teams while translating complex technical and regulatory topics into actionable guidance.

Leads global cybersecurity governance, risk, compliance, identity and OT security programs. Establishes enterprise security frameworks, integrated risk management, regulatory compliance, audit readiness, IAM governance, Zero Trust alignment, and OT security controls. Advises executive leadership and supports board reporting, M&A due diligence, security assessments, investment decisions, and regulatory exposure management. Builds and develops global security teams, manages budgets and vendors, and drives measurable improvements across IT, OT, cloud, product, manufacturing, and third-party environments.

Leads cybersecurity integration for newly acquired sites, including security assessments, firewall and VPN deployment, network segmentation, Zero Trust and Entra ID configuration, EDR and SIEM onboarding, email security, vendor coordination, documentation, and operational handoff. The role independently owns security architecture from assessment through steady-state transition, with approximately 75–80% travel to domestic and international acquisition sites and occasional after-hours or weekend cutovers.

Plans, coordinates, and governs the cybersecurity program, aligning initiatives with organizational objectives, regulatory requirements, and security strategy. Oversees cybersecurity roadmaps, budgets, vendors, project portfolios, reporting, and knowledge management within the CISO organization. Requires cybersecurity program management experience and familiarity with Microsoft 365 tools, healthcare regulations, and security frameworks.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Provides senior cybersecurity and ISSM support for Air Force enterprise IT programs. Responsibilities include RMF compliance, continuous monitoring, authorization and security documentation, risk and configuration assessment, incident and vulnerability reporting, cybersecurity training, and advising authorization officials and program managers. The role also oversees security controls, corrective actions, developer findings, and cybersecurity personnel while supporting Agile development environments.

Provides senior ISSM cybersecurity support for Air Force REMIS, including RMF compliance, continuous monitoring, security control assessment, authorization maintenance, vulnerability tracking, configuration-change analysis, incident reporting, and cybersecurity documentation. The role guides ISSOs and privileged users, supports corrective actions, evaluates automated security findings, and ensures compliance with DoD and Air Force cybersecurity policies. Requires substantial cybersecurity experience, U.S. citizenship, a T3/Secret clearance, and an advanced DCWF ISSM certification.

Leads enterprise cybersecurity strategy, governance, operations, and transformation in a Microsoft 365 cloud-first environment. Develops security roadmaps aligned with NIST and CIS frameworks, manages internal teams and MSSP partnerships, and oversees threat detection, incident response, vulnerability management, identity governance, cloud security, security awareness, and crisis preparedness. Provides executive reporting and drives continuous improvement across the organization's cybersecurity posture and resilience.

Provides cybersecurity engineering and ISSE support for the C2BMC missile defense program. Responsibilities include administering endpoint protection, SIEM, vulnerability scanning, and compliance tools; automating cybersecurity agent deployments; analyzing security events; conducting STIG assessments; developing SIEM queries, dashboards, and data pipelines; and supporting control validation, POA&M remediation, and Cyber Tasking Orders. The role requires active Top Secret clearance, IAT/IAM 8140 certification, on-site work at Schriever Space Force Base, and 10% travel.

Supports SOC and regional teams by designing, standardizing, implementing, and operationalizing application security monitoring controls. Partners with application, technology, business, risk, audit, and cybersecurity stakeholders to assess risks, define detection requirements, onboard logs, test controls, document procedures, track remediation, and improve monitoring maturity. Maintains metrics, reporting, governance documentation, reusable monitoring standards, and process automations across global regions and business lines.

Monitor and investigate security alerts across endpoints, identity, cloud, email, networks, and applications. Manage vulnerabilities and remediation lifecycles, review access controls, support incident response, hardening, phishing prevention, audits, PCI DSS compliance, and external security assessments. Maintain evidence and documentation, coordinate with technical teams and vendors, communicate risks to stakeholders, and identify opportunities to automate security monitoring and reporting.

Lead DoD/USMC cybersecurity risk management across enterprise systems: assess AI/ML risks, drive RMF A&A using eMASS, manage POA&Ms, validate STIG compliance, implement zero-trust architectures, interpret Cyber Tasking Orders, draft policies and continuous monitoring, and provide technical leadership for mission-ready security.

Leads cybersecurity operations, including incident monitoring and response, threat hunting, vulnerability management, digital forensics, security-tool administration, and penetration-test remediation. Oversees onshore SOC activities, coordinates with offshore analysts, maintains SOPs and incident documentation, tracks security metrics and SLAs, and supports threat intelligence, security awareness, and purple, red, and blue team engagements. Provides technical guidance, analyst training, vendor coordination, management reporting, and after-hours incident support.

Engineer and harden classified systems, mission ground systems, and laboratory environments. Implement security controls, conduct RMF accreditation through ATO and ATC, manage vulnerabilities and incidents, automate compliance activities, and support continuous monitoring. The role also includes mentoring, developing security standards, collaborating with engineering and administration teams, and participating in on-call incident response for national security missions.

Leads escalated insider-risk and cybersecurity incident response across detection, investigation, containment, remediation, recovery, and reporting. Develops and tunes detections, conducts threat hunts, analyzes endpoint and network telemetry, and uses Splunk, EDR, threat intelligence, scripting, APIs, automation, and AI-assisted analytics. Builds security-tool integrations, risk-scoring models, operational reports, and response workflows. Mentors analysts, improves incident-response processes, supports tabletop exercises, and communicates incident status and risk to technical teams and executives.