Top Cybersecurity Jobs

Participate in four six-month cybersecurity rotations across threat and vulnerability management, governance, risk and compliance, application security, identity and access management, and protection services. Responsibilities may include incident handling, alert and dashboard configuration, firewall activity reporting, business continuity planning, security scanning and coding, and advising internal customers. Candidates need a technology-related bachelor's or master's degree and foundational cybersecurity, networking, operating system, cloud, web technology, communication, and problem-solving skills.

Conduct information security and compliance audits for financial institutions, evaluating policies, procedures, controls, cybersecurity practices, and regulatory requirements. Prepare client reports, support security assessments, manage audit engagements from kickoff through follow-up, communicate findings, maintain cybersecurity knowledge, improve audit processes, and occasionally perform onsite testing. The role is remote with minimal annual travel and requires residence in an eligible state.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.

Supports cybersecurity activities including security plan documentation, system and user activity monitoring, vulnerability and misconfiguration analysis, risk and compliance assessments, and incident response. Interns collaborate with ISSMs, ISSOs, CSOC personnel, and system stakeholders. The role is an on-site summer internship requiring at least eight weeks, full-time enrollment, U.S. citizenship, background screening, drug testing, and possible DOD investigation.

Leads enterprise technology, cybersecurity, and third-party risk assessments; evaluates controls, manages risk registers and remediation, and supports regulatory and audit activities. Develops Power BI dashboards, executive risk reporting, KRIs, and data-driven insights. Automates risk processes with Power Automate and applies AI tools responsibly to improve reporting and analysis. Partners with technology and security teams to address emerging cloud, AI, cyber, and supply chain risks while providing independent risk challenge and executive-level communication.

Serve as the ISSM to maintain cybersecurity posture for AF IT systems: manage RMF/ISCM activities, maintain certifications and ATO documentation, monitor security events, assess configuration and control effectiveness, coordinate POA&Ms and corrective actions, advise AO/PM/ISO, and ensure personnel training and clearance compliance.

Lead the enterprise Privileged Access Management program, strategy, roadmap, operating model, and analyst team. Oversee CyberArk, BeyondTrust, or Delinea deployments; privileged account lifecycle management; credential vaulting; session monitoring; just-in-time access; endpoint privilege management; secrets management; and third-party access controls. Partner with infrastructure, cloud, application, security operations, and audit teams to reduce risk and support SOX, HIPAA, ISO 27001, and NIST compliance.

Designs and governs enterprise identity security architectures across on-premises and cloud environments. Responsibilities include authentication, authorization, SSO, MFA, PAM, IGA, RBAC, access certification, threat modeling, risk assessments, architecture reviews, compliance support, documentation, and technical leadership. Requires extensive cybersecurity and IAM architecture experience with platforms such as Microsoft Entra ID, Active Directory, Okta, SailPoint, CyberArk, and cloud identity services.

Leads the enterprise non-human identity security program across cloud, on-premises, and CI/CD environments. Owns strategy, governance, roadmap, risk reporting, identity inventory, secrets management, PKI, certificate lifecycle management, credential rotation, workload identity security, and Zero Trust controls. Manages analysts and engineers, drives cross-functional adoption, supports compliance audits, and secures service accounts, API credentials, cloud identities, and AI agent identities.

Lead the enterprise non-human identity security program across cloud, on-premises, and CI/CD environments. Own strategy, governance, roadmap, reporting, identity lifecycle controls, secrets management, PKI, certificate management, credential rotation, and workload identity security. Partner with engineering, DevOps, security, and application teams to eliminate unmanaged credentials and enforce Zero Trust and least-privilege practices. Manage analysts and engineers while supporting compliance, audits, risk reporting, and cross-functional adoption.

Designs and governs enterprise identity security architecture across on-premises and cloud environments. Responsibilities include architecting SSO, MFA, PAM, IGA, federation, identity lifecycle management, RBAC, least privilege, and access certification. The role leads IAM architecture reviews, threat modeling, risk assessments, compliance alignment, technology evaluations, documentation, and technical mentorship for engineering teams.

Leads the enterprise Privileged Access Management program, including strategy, roadmap, operating standards, team leadership, and deployment of PAM platforms. Oversees privileged account lifecycle management, credential vaulting, session monitoring, just-in-time access, endpoint privilege management, secrets management, break-glass procedures, and third-party access. Partners with infrastructure, cloud, security, application, and audit teams to reduce risk and support SOX, HIPAA, ISO 27001, and NIST compliance.

Leads enterprise security engineering and architecture for a federal healthcare modernization program. Oversees ISSO and ISSE teams, ATO and System Security Plan activities, continuous monitoring, Zero Trust compliance, risk and control assessments, vulnerability remediation, application security testing, penetration testing, and federal security compliance. Provides technical direction, stakeholder communication, mentoring, and remediation planning across cloud, DevSecOps, development, testing, integration, and production environments.

Leads global cyber incident response and crisis management operations, including CIRT activation, containment, recovery, executive communications, managed detection and response oversight, AI-enabled workflows, detection lifecycle governance, tabletop exercises, and post-incident reviews. Partners with investigations, threat intelligence, engineering, legal, communications, privacy, HR, and technology teams while developing leadership depth and improving operational readiness.

Leads enterprise cybersecurity metrics, analytics, governance, and reporting strategy. Establishes KPIs, KRIs, data standards, controls, and reporting frameworks; delivers executive, board, audit, and regulatory communications. Analyzes cyber risk, resilience, control effectiveness, trends, and investment outcomes. Oversees dashboard automation, predictive analytics, telemetry integration, and AI-enabled reporting while managing teams and cross-functional initiatives.

Build and operate enterprise identity governance, authentication, and authorization services. Engineer identity lifecycle workflows, provisioning, access certifications, RBAC, role mining, segregation-of-duties controls, SSO, MFA, federation, and IGA integrations. Partner with senior stakeholders on identity architecture, standards, controls, compliance, troubleshooting, reporting, and audit evidence across enterprise platforms.

Leads the enterprise CTEM and vulnerability management program across IT, cloud, OT, product, and embedded environments. Oversees vulnerability assessment, product vulnerability triage, SBOM analysis, exposure validation, remediation, automation, and incident support. Partners with engineering and security teams to establish risk-based remediation processes, governance, metrics, and executive reporting while managing vulnerability and product security teams.

Leads enterprise cybersecurity risk quantification by developing risk models, scoring methodologies, scenario analyses, loss estimates, and control effectiveness evaluations. Partners with security, finance, audit, compliance, enterprise risk, and business leaders to guide investments and remediation. Produces dashboards, key risk indicators, executive reporting, emerging risk assessments, and quantitative insights supporting governance, regulatory, audit, and cybersecurity strategy requirements.

Leads global cyber incident response and crisis management operations, including CIRT oversight, incident containment and recovery, MDR governance, detection lifecycle management, AI-enabled automation, executive communications, tabletop exercises, and post-incident reviews. Manages cybersecurity teams, service providers, operational metrics, crisis readiness, and cross-functional coordination with legal, communications, privacy, HR, procurement, and technology stakeholders.

Build and operate enterprise identity governance, authentication, and authorization services. Engineer identity lifecycle workflows, access certifications, RBAC, role mining, segregation-of-duties controls, SSO, MFA, federation, and risk-based authentication. Develop PowerShell, Graph, REST, and SCIM integrations while troubleshooting identity platforms and producing audit evidence. Partner with senior stakeholders on identity architecture, standards, governance, and compliance controls supporting SOX, HIPAA, ISO 27001, and NIST CSF.

Leads the enterprise CTEM and vulnerability management program across IT, cloud, OT, and product environments. Oversees vulnerability assessment, product vulnerability triage, SBOM analysis, remediation, exposure validation, threat intelligence, and automation. Partners with security, infrastructure, cloud, engineering, and product teams to reduce risk, establish remediation standards, report exposure metrics, and support incident investigations. Manages vulnerability or product security teams and communicates risk and remediation progress to executives.

Leads enterprise cybersecurity risk quantification initiatives, developing risk models, scoring methodologies, scenario analyses, loss estimates, control evaluations, dashboards, and executive reporting. Partners with security, technology, finance, audit, compliance, enterprise risk, and business leaders to guide investments, remediation, governance, and cybersecurity strategy. Applies FAIR or similar methodologies, statistical modeling, and quantitative analysis to assess cyber risk exposure and emerging threats.

Leads enterprise cybersecurity metrics, analytics, governance, and reporting. Develops KPIs, KRIs, dashboards, control-effectiveness measures, risk forecasts, executive and regulatory reports, and cybersecurity investment analyses. Partners with cybersecurity, technology, risk, audit, compliance, and business leaders to guide strategy and improve measurement maturity. Manages teams and cross-functional initiatives while advancing reporting automation, data visualization, telemetry integration, predictive analytics, and AI-enabled security analytics.

Own positioning and messaging for OpenAI’s cybersecurity offerings, including Daybreak, Trusted Access for Cyber, and Codex Security. Build field assets, customer proof, enablement, campaigns, and account-based programs for enterprise security audiences. Translate AI and security capabilities into credible go-to-market narratives, coordinate launches across product and business teams, and maintain accuracy, governance, and customer trust in a sensitive category.

Lead cybersecurity architect responsible for designing and assessing data security controls across cloud and hybrid platforms (Databricks, Snowflake, AWS, GCP). Engage stakeholders, define target technical state, automate remediations, evaluate vendors, lead communities of practice, and drive secure architecture, threat modeling, and risk mitigation for enterprise-scale data platforms.