Top Cybersecurity Jobs

Lead IAM/SOX cybersecurity efforts by documenting control narratives and process flows, pre-auditing SailPoint and CyberArk implementations, designing and testing SOX controls for IAM/PAM, developing continuous monitoring, reviewing audit evidence (SOX/PCI), identifying/control deficiencies, coordinating remediation, and collaborating with cross-functional teams and external auditors.

Provide SOX IT subject-matter expertise by assessing ITGCs (access, change management, operations), performing technical testing, onboarding applications, advising on control design and remediation, and partnering with auditors and technology teams to maintain SOX compliance.

The Sr. Cybersecurity Engineer designs and implements CSfC architectures, validates solutions, supports security operations, and communicates security strategies, with a focus on mission-critical environments.

Lead enterprise cybersecurity, data privacy, and governance programs; define security strategy; ensure regulatory compliance (privacy, aviation, PCI/SOC); manage risk assessments, incident response, third-party risk, and AI/ML governance across business units.

The Lead Digital Product Manager oversees product security workstreams, ensuring effective delivery through collaboration, mentoring product managers, and developing enterprise roadmaps.

The Senior Cybersecurity Analyst & Threat Hunter will proactively identify and neutralize threats, conduct incident response, and mentor junior analysts, enhancing the company's security posture.

Paid, immersive fall internship in Payments cybersecurity. Learn and assist with PCI DSS and PA-DSS assessments, penetration testing, secure implementations, documentation, and client engagements to prepare for an entry-level Information Security Associate role.

Paid fall internship in Tevora's Threat practice providing hands-on training in internal/external network and web application penetration testing, shadowing consultants, remediation validation, reporting, and client communication. Interns learn networking and systems administration fundamentals, security frameworks (PCI-DSS, HIPAA, ISO 27001), assist on client engagements, document findings, and may receive a full-time offer upon successful completion.

Paid, immersive fall internship to train participants in SOC assessments, compliance frameworks, enterprise security implementations, and penetration testing. Interns support remediation, document technical procedures, gather requirements, and assist consultants with client engagements, with potential full-time placement on successful completion.

Paid, immersive cybersecurity internship to learn and support ISO compliance engagements. Duties include data collection, template/procedure creation, report writing, security posture assessments against ISO standards, assisting ISMS and BCMS development, observing security testing, and supporting client engagements while developing technical and professional skills.

Paid, immersive cybersecurity internship to develop technical and professional skills. Responsibilities include learning compliance frameworks, observing enterprise security implementations and penetration testing, gathering and executing technical plans, documenting procedures, and assisting consultants on client engagements to prepare for an entry-level Information Security Associate role.

Paid, immersive fall internship (Oct–Dec) in Enterprise Risk Management. Interns support enterprise and vendor risk assessments, governance frameworks, compliance (PCI-DSS, HIPAA, ISO 27001), observe security implementations and testing, draft execution plans and documentation, and assist consultants with client engagements to develop technical and professional skills toward an entry-level Information Security role.

Paid immersive cybersecurity internship focused on federal compliance and security consulting. Learn and assist with assessments, governance, enterprise security solutions, penetration testing, social engineering, requirements gathering, execution planning, and client engagements. Successful completion may lead to a full-time entry-level Information Security Associate role.

Support SOC 2 attestation engagements by coordinating client communications, managing evidence requests and project timelines, maintaining audit documentation, assisting senior auditors with control walkthroughs and light technical analysis, and contributing to templates and training to build toward CISA/CISSP certification.

As a Senior Cybersecurity Engineer, you'll safeguard technology systems, manage endpoint and network security, respond to threats, and ensure compliance, while collaborating with teams.

Lead strategic account sales for cybersecurity services and technologies within assigned New York Metro accounts. Develop multi-year account plans, build large pipelines, lead cross-functional teams, manage forecasts, collaborate with partners, and drive multi-million-dollar gross margin results while ensuring high client satisfaction and alignment to client business and security objectives.

Monitor and analyze network traffic, security events, and alerts; investigate and escalate incidents; support security policy implementation; collaborate with IT and business teams to integrate protections; document incidents and participate in awareness and response activities under manager guidance.

The role involves providing legal support in cybersecurity and privacy, incident response, compliance, and regulatory interactions as well as managing workstreams and client interaction.

Lead technical product marketing for Airlock Digital by creating practitioner-focused messaging, driving product launches, enabling sales with technical assets, and developing competitive differentiation. Partner cross-functionally with Product, Solutions Engineering, Sales, Channel, and Customer Success to translate complex cybersecurity capabilities into clear customer value and measurable go-to-market outcomes.

The Associate IT Auditor will assist in IT audits by evaluating controls, analyzing risks, preparing reports, and ensuring compliance with regulations.

Lead planning and execution of cyber survivability test & evaluation events (CVPAs, AAs), design tests, analyze findings, manage cyber assessment documentation, coordinate Red/Blue teams, oversee vulnerability and penetration testing, author and present cyber survivability reports, and integrate survivability requirements across the T&E lifecycle for defense information systems.

The Cyber Risk Management Analyst Sr supports the Cyber Risk team by managing the cybersecurity risk profile of the Bank through oversight, assessments, and compliance with regulations.

The GRC Analyst will lead audits, design compliance programs, develop risk registers, and mentor junior analysts while ensuring cybersecurity and compliance excellence.

The role involves leading Certification & Accreditation processes, conducting security assessments, managing teams, and ensuring compliance with cybersecurity initiatives.

The Attack Surface Management Engineer is responsible for vulnerability management and reducing cyber risk in a healthcare environment through collaboration with IT and clinical teams, maintaining security tools, and managing vendor relationships.