Top Cyber Security Jobs in Houston, TX

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Embed as the Falcon team's full-time security engineer to own security architecture for agents, MCP integrations, and identity. Perform threat modeling, write and review security-critical code, define least-privilege identity and session boundaries, design secure prompt/tool-calling patterns, maintain audit logging, and align product architecture with enterprise AI security standards.

Supervise and secure Microsoft 365 and Azure environments, including identity, access, compliance, data protection, and threat detection. Configure Intune, Entra Connect, Windows Hello for Business, Purview, Conditional Access, Defender products, and CIS Benchmarks. Advise clients on Zero Trust and security best practices, deliver workshops, troubleshoot complex issues, and support regulatory compliance across Microsoft ecosystems.

Leads consultative cybersecurity solution sales for managed customers, driving pipeline, business-value selling, strategic opportunities, partner collaboration, forecasting, and deal execution. Advises business decision-makers on security solutions, cloud platforms, competitors, and digital transformation strategies. Builds customer and partner relationships, develops joint proposals, mentors junior sellers, organizes security discussions and events, and shares cybersecurity best practices while coordinating internal teams to deliver customer outcomes.

Strengthen the security and resilience of operational technology environments by evaluating architectures and data flows, improving asset visibility, governing remote and vendor access, supporting secure commissioning and change management, developing monitoring and incident-response capabilities, and maintaining risk and remediation records. The role partners with engineering, operations, IT, cybersecurity, compliance, legal, and third parties while applying NIST SP 800-82 and IEC 62443 concepts.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Design and deliver enterprise-scale security engineering solutions for .NET applications; write and maintain secure production code; apply vulnerability scanning, threat modeling, and AI-assisted tools (e.g., Copilot) to identify and remediate risks; produce architecture/design artifacts; define guardrails and audit controls for agentic AI; and lead security training and resiliency activities across SDLC.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Lead strategy to define, measure, and evolve Solution Engineer and Cloud Solution Architect excellence for Microsoft Security. Use data, AI-powered analytics, and customer insights to identify performance drivers, design capability strategies, advise senior leaders, and drive field transformation. Build governance, risk remediation, and scalable enablement programs while partnering across engineering, product, sales, and enablement to measure impact and continuously improve outcomes.

Owns Microsoft’s Security Compete Program, developing competitive strategy, battlecards, positioning, and objection-handling guidance for AI security offerings. Provides deal coaching, analyzes competitive wins and losses, tracks performance metrics, gathers field intelligence, and delivers executive reporting. Partners across sales, marketing, engineering, product, and regional teams to improve go-to-market execution, strengthen competitive differentiation, accelerate strategic deals, and influence product and field-readiness decisions.

Leads information security governance, compliance, data protection, privacy, enterprise risk, third-party risk, and customer trust programs. Owns SOC 2 and ISO 27001 certifications, audits, security policies, data security strategy, GDPR and CCPA/CPRA compliance, and executive risk reporting. Builds and manages a team spanning GRC, privacy, and risk while partnering with engineering, legal, product, sales, and leadership.

Leads complex security alert triage, incident investigations, threat hunting, detection improvement, and incident response. Develops playbooks, operationalizes threat intelligence, builds automation, and mentors analysts. The role partners with detection engineering to improve security monitoring across cloud, endpoint, identity, network, and application telemetry while raising investigation and documentation standards.

Develops and strengthens threat detection, response, and remediation capabilities for CrowdStrike infrastructure. Responsibilities include researching attacker techniques, creating network and host-based detections, implementing security analytics and automation, investigating and remediating threats, supporting cloud security across major providers, tracking operational metrics, and collaborating on complex cross-functional programs. The role requires expertise in SIEM/SOAR technologies, cloud-native systems, programming, operating systems, networking, web security, and security engineering principles.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Leads AI governance and cybersecurity risk advisory engagements for large, regulated organizations. Advises C-suite executives and boards on AI threats, regulatory requirements, governance operating models, risk assessments, control frameworks, and cyber resilience. Owns complex engagement delivery, client relationships, team leadership, business development, proposals, engagement economics, and practice growth. Develops methodologies, thought leadership, and risk-management solutions covering AI governance, cloud security, identity management, data protection, incident response, and third-party risk.

Leads cybersecurity architecture, policy, ATO/A&A, RMF compliance, vulnerability management, cloud security, Zero Trust implementation, incident response, and continuous monitoring for federal VA systems. Coordinates with VA security stakeholders, maintains compliance artifacts and POA&Ms, enforces cryptographic and access-control requirements, and advises on AI/ML security. Requires extensive federal cybersecurity experience, ATO expertise, and knowledge of NIST, FISMA, FedRAMP, VA policies, and related security frameworks.