Top Cybersecurity Jobs

Ensures systems and products meet government cybersecurity and information assurance standards through verification, validation, testing, threat analysis, and design reviews. Develops cyber threat profiles, evaluates security performance, maintains analytical procedures, prepares technical recommendations for government intelligence and operations officials, and supports the security posture of networks and systems.

Build and operate CrowdStrike Falcon Next-Gen SIEM detection and monitoring capabilities. Responsibilities include onboarding and normalizing log sources, authoring and tuning CQL searches and detection rules, maintaining dashboards, integrating telemetry across endpoint, identity, and cloud environments, reducing false positives, and partnering with IT and engineering to close security gaps and improve compliance readiness.

Lead cybersecurity strategy and architecture across products, applications, and technologies. Advise engineering teams, communicate complex risks to leadership, develop reusable security frameworks, create mitigation solutions, and evaluate emerging technologies. The role requires influencing cross-functional teams, shaping enterprise-wide architecture, and applying cloud-native, application, API, web, and mobile security expertise across a complex financial-services environment.

Serves as the technical authority for network security, endpoint security, and detection and response. Owns security reference architectures, standards, governance, technology strategies, and multi-year roadmaps. Leads architecture reviews, platform evaluations, Zero Trust and defense-in-depth initiatives, risk assessments, and remediation recommendations. Develops detection and response capabilities for AI systems and autonomous agents, mentors security professionals, and advises executive leadership on complex cybersecurity decisions.

Supports global cybersecurity governance, risk, and compliance programs by administering KnowBe4, coordinating awareness campaigns and phishing simulations, maintaining policies and governance records, tracking metrics and remediation, supporting audits and evidence collection, and preparing dashboards and executive reports. The role also assists with ServiceNow governance workflows, AI and non-human identity governance, stakeholder coordination, and process improvement.

Leads enterprise infrastructure and cybersecurity architecture across on-premises, cloud, hybrid, network, endpoint, and secure computing environments. Owns technology roadmaps, infrastructure reliability, disaster recovery, cybersecurity risk management, incident response, CMMC and DoD compliance readiness, asset lifecycle management, and secure modernization. Partners across engineering, compliance, facilities, and program teams while mentoring technical staff and implementing resilient, compliant environments.

Lead security design and assessments across applications, cloud, mobile, IoT, and network domains. Perform threat modeling, code reviews, vulnerability testing, and remediation planning. Advise engineering teams, design firewall/SSL policies, manage SIEM and scanning tools, and drive security improvements and compliance.

Monitors, triages, investigates, and responds to cybersecurity alerts across enterprise environments. Supports incident response, vulnerability management, SIEM optimization, security tooling, helpdesk requests, third-party risk, and user security education. Coordinates with internal IT teams, managed security providers, vendors, and business stakeholders on containment, remediation, reporting, and recovery. The role also analyzes logs and vulnerabilities, improves response processes, and provides after-hours support when necessary.

Engineers and operates enterprise cybersecurity platforms focused on Microsoft Defender, Purview, Azure, Microsoft 365, cloud security, and IAM. The role develops automation, security integrations, configuration baselines, monitoring, documentation, compliance controls, and security metrics. It partners with infrastructure, networking, application, data, OT, and security operations teams to improve endpoint, identity, cloud, and data protection. Responsibilities also include incident response support, vulnerability management, platform roadmaps, audit evidence, vendor coordination, and occasional after-hours support.

Administers cybersecurity systems, monitors alerts and logs, investigates and responds to incidents, analyzes threats and malware, manages vulnerabilities, supports digital forensics, enforces security policies, documents investigations, and collaborates on compliance, risk management, and employee security awareness.

Provides hands-on cybersecurity engineering and advisory services for client environments. Designs, deploys, configures, and supports security technologies across infrastructure, cloud, networks, and endpoints. Performs vulnerability management, secure application development, risk management, incident response, firewall and SIEM/XDR reviews, and security architecture work. Develops documentation and playbooks, advises clients on compliance frameworks and best practices, evaluates emerging technologies, and partners with internal teams to improve security posture.

Participates in a structured remote cybersecurity internship covering asset inventory, vulnerability assessments, threat analysis, system hardening, incident response, security monitoring, and governance, risk, and compliance. The intern documents findings, develops security policies and reports, works in an AWS-based training environment, completes weekly deliverables, and presents a capstone security program summary.

Manages cybersecurity programs for classified information systems, including security control reviews, continuous monitoring, system and network assessments, policy implementation, risk mitigation, and Assessment and Authorization activities. Leads Security Test and Evaluation, prepares security documentation such as SSPs, POA&Ms, and SCTMs, supports inspections and audits, and coordinates corrective actions with government authorities. This is a full-time, on-site role requiring an active Secret clearance and eligibility for Special Access Programs.

Leads enterprise threat intelligence, detection engineering, threat hunting, phishing resiliency, and AI-enabled security operations. Builds and mentors multidisciplinary cybersecurity teams, advises executives, manages intelligence partnerships and vendors, maps detections to MITRE ATT&CK, directs red and purple team exercises, and drives measurable improvements in detection coverage, response times, control validation, and cyber risk reduction.

Build and lead the security operations center, including staffing, operating models, playbooks, tooling, detection engineering, threat hunting, incident response, data-loss monitoring, and compliance evidence. Serve as incident commander, manage MSSP relationships, support CMMC and NIST assessments, coordinate sensitive-data investigations, conduct exercises, and report SOC performance to leadership. The role requires defense or federal cybersecurity experience, strong SIEM, EDR, SOAR, scripting, incident response, and threat-hunting expertise.

Own and advance the company’s identity security architecture across cloud and on-premises environments. Responsibilities include RBAC, JML automation, authentication policies, phishing-resistant MFA, PIM, PAM, secrets management, cloud IAM, SSO and SCIM integrations, Active Directory security, identity threat detection, access reviews, and compliance evidence. The role partners with Security Operations, IT, HR, and Compliance to implement secure, usable access controls aligned with CMMC, NIST, DFARS, and ITAR requirements.

Leads and enhances the enterprise Third-Party Risk Management program, including vendor intake, risk assessments, due diligence, monitoring, policy development, risk scoring, contractual security provisions, exception management, GRC data quality, and executive reporting. Partners with Legal, Procurement, business stakeholders, and security specialists to reduce cybersecurity, privacy, resilience, compliance, and operational risks introduced by third parties.

Designs and maintains enterprise cybersecurity architecture across cloud, endpoint, network, identity, application, and manufacturing environments. Leads security platform implementation, monitoring, threat detection, incident response, vulnerability management, penetration testing, access controls, hardening, audits, and regulatory support. Automates security workflows, develops metrics, oversees vendors and complex projects, advises business initiatives, and mentors cybersecurity staff. Occasional travel between company locations may be required.

Delivers strategic cybersecurity advisory engagements for organizational leaders. Assesses and develops cybersecurity and incident response programs, creates exercises and scenarios, identifies emerging cyber trends, and produces reports, presentations, recommendations, and findings. The role also contributes to thought leadership, methodology development, and internal initiatives while managing multiple projects and client relationships independently. Travel up to 30% is required, often on short notice.

Lead complex incident response engagements, investigate advanced threats, conduct host and network forensics across Windows, macOS, and Linux, perform malware analysis, and develop remediation plans. The consultant will communicate findings to executives, regulators, legal counsel, and customers; lead teams; conduct cloud incident response; contribute industry thought leadership; apply AI technologies; and travel on short notice up to 30%.

Leads cybersecurity analytics, security data engineering, and security intelligence strategy. Manages data scientists, data engineers, and security engineers while overseeing SIEM engineering, security telemetry pipelines, data models, dashboards, threat intelligence, vulnerability data, cloud security signals, and advanced analytics. The role requires executive stakeholder leadership, cloud-native data architecture expertise, cybersecurity risk measurement, AI-enabled security initiatives, regulatory reporting, and enterprise-scale security data platform development.

Embed security throughout the software development lifecycle by partnering with engineering teams, conducting secure code reviews, identifying vulnerabilities, and reducing application risk. Perform offensive and defensive security work, integrate SAST, DAST, SCA, and CI/CD security tooling, assess cloud controls, and communicate security improvements to technical and non-technical stakeholders.

Leads moderate-to-complex cybersecurity projects from planning through delivery, managing scope, schedules, budgets, risks, dependencies, quality, and stakeholder communication. Develops and validates project plans, facilitates meetings, resolves issues, tracks financial performance, creates business cases, and coordinates teams across the Cybersecurity organization. Advises stakeholders on tactical solutions and may mentor IT project managers. Requires cybersecurity or IT project management experience, knowledge of security frameworks, Agile and SDLC practices, and advanced project tracking skills.

Lead PKI implementation and data protection projects, advise clients on privacy laws and compliance, conduct privacy impact assessments, develop privacy policies, manage project planning and budgets, coach and mentor teams, collaborate on breach response and cross-functional cybersecurity initiatives, and review legal documents to support compliance.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.