Top Cyber Security Jobs in Jacksonville, FL

Leads a team of intelligence analysts and translates security priorities into threat intelligence requirements. Oversees intelligence production workflows, establishes standards, reviews finished intelligence products, tracks sophisticated adversaries and ransomware campaigns, and partners with engineering and external organizations to improve customer protection. The role also manages escalations, communicates technical findings and business impact, and supports security objectives across Microsoft and its customers.

Leads hypothesis-driven threat hunting, cloud vulnerability analysis, remediation, and incident response across AWS, Azure, GCP, and OCI. Administers Qualys and Tenable, analyzes SIEM and cloud telemetry, investigates threats, prioritizes vulnerabilities, remediates misconfigurations and IAM risks, develops detections and hunt playbooks, documents findings, briefs stakeholders, and mentors junior engineers.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Leads enterprise cybersecurity, infrastructure, cloud, technology risk, governance, and operational resilience. Advises executive leadership and Board committees, owns security strategy and risk remediation, directs incident response and security operations, oversees Microsoft cloud infrastructure, resilience planning, regulatory compliance, vendors, budgets, and technology investments. Recruits and develops security and infrastructure teams while ensuring secure, reliable, and cost-effective technology supporting the institution’s strategic goals.

Supports federal cybersecurity authorization and ongoing authorization activities under the NIST RMF. Reviews ATO packages, SSPs, PIAs, risk assessments, contingency plans, POA&Ms, and security controls. Maintains assessment records in CSAM or similar GRC tools, tracks authorization renewals, supports continuous monitoring, and coordinates audit and compliance responses with technical and non-technical stakeholders.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Leads product security, cloud and infrastructure security, AI security, security architecture, vulnerability management, and edge security. Oversees threat modeling, secure development standards, AWS controls, vulnerability remediation, AI risk governance, customer security reviews, and security engineering delivery. Reports to the CISO, partners with engineering and GRC leaders, and hires and develops the security engineering organization.

Lead enterprise security architecture across AWS cloud, applications, infrastructure, and CI/CD pipelines. Responsibilities include threat modeling, DevSecOps integration, policy-as-code guardrails, IAM, encryption, data protection, container security, compliance, risk assessments, and evaluation of AI security solutions. The role partners with engineering and cloud teams to implement secure architectures and controls aligned with NIST, OWASP, CIS, ISO 27001, FedRAMP, and SOX.

Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Designs and implements automation for federal security authorization and ATO processes. Responsibilities include automating evidence collection, validation, workflow routing, reporting, policy checks, and readiness dashboards; integrating security scans, SBOM/SCA, vulnerability, repository, and system-of-record tools; and maintaining testing, documentation, traceability, and release artifacts. Requires collaboration with security, engineering, platform, data, and government stakeholders.

Assess and improve federal information-system security authorization programs. Review ATO packages, SSPs, privacy assessments, system artifacts, POA&Ms, audit reports, and continuous-monitoring activities under RMF. Coordinate stakeholders, support compliance reporting, track authorization renewals, advise on security and privacy requirements, and develop best practices. The role requires cybersecurity incident response, systems administration, SOC, malware analysis, threat intelligence, and enterprise credential-store experience.

Conducts security and privacy control assessments, vulnerability and penetration testing, ATO artifact reviews, risk analysis, and compliance reporting. Develops assessment plans, test schedules, findings reports, POA&M remediation templates, and executive briefings. Advises system owners, ISSOs, contractors, and stakeholders on corrective actions, acceptable evidence, authorization requirements, and enterprise security improvements while applying NIST, FedRAMP, RMF, FISMA, and related government standards.

Administers enterprise security infrastructure, investigates and responds to security alerts and incidents, performs threat hunting, maintains security asset inventories, documents procedures, and coordinates resolution across internal and external teams. The role requires at least three years of information security experience and hands-on operation of multiple security technologies, including protections, filtering, proxies, antivirus, threat hunting, or log investigation tools.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Leads product cybersecurity for AI COE products, coordinating security requirements, threat modeling, risk assessments, vulnerability management, SBOM and third-party software reviews, mitigation activities, and lifecycle documentation. Partners with engineering, ML, architecture, quality, regulatory, and security teams to establish repeatable cybersecurity practices and ensure traceable, compliant releases across AI/ML software products.

Lead the AWS cloud security program and manage security engineering teams. Establish AWS security standards, oversee IAM, encryption, logging, monitoring, vulnerability management, Terraform automation, CI/CD security, incident response, and secure architecture reviews. Manage risk registers, compliance workflows, audits, control testing, and FedRAMP, FISMA, NIST, and SA&A readiness. Guide investigations, remediation, runbooks, tabletop exercises, and secure cloud practices while reporting risks and metrics to leadership.

Conduct hardware, network, web, mobile, and application security assessments, including threat modeling, code review, penetration testing, firmware and binary analysis, and technical writing. Analyze embedded architectures, debug interfaces, firmware security mechanisms, proprietary protocols, IoT devices, and customer environments. Communicate findings and recommendations to customers while adapting quickly to unfamiliar technologies and delivering quality results on complex projects.

Performs digital forensics and incident response investigations, including host forensics, network traffic analysis, malware triage, log review, and business email compromise analysis. Produces technical reports and recommendations, communicates findings to technical and managerial audiences, supports client engagements, automates DFIR workflows, participates in on-call rotations, and contributes to threat hunting, proactive investigations, and Purple Team activities.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.