Top Cybersecurity Jobs

Maintains the security posture of DoD information systems supporting Collateral, SCI, and SAP environments. Responsibilities include preparing authorization packages, monitoring compliance, reviewing audit records, coordinating configuration changes, conducting security impact analyses, identifying vulnerabilities, supporting incident recovery, maintaining security documentation, and assisting with self-inspections and countermeasure implementation. The role collaborates closely with ISSMs, ISOs, and authorization officials.

Manage day-to-day security operations for DoD information systems supporting Collateral, SCI, and SAP environments. Responsibilities include maintaining authorization packages, monitoring compliance, coordinating system changes, reviewing audit records, conducting continuous monitoring and self-inspections, identifying vulnerabilities, implementing countermeasures, and supporting assessment and authorization efforts. The role requires collaboration with ISSMs, security officials, government agencies, and contractors while ensuring physical, personnel, incident, training, and configuration security.

Designs and develops secure systems and architectures for U.S. Navy missions. Responsibilities include analyzing engineering and security requirements, hardening systems, reducing attack surfaces, applying secure coding and operating-system security practices, evaluating architectures against adversary threats, and implementing cybersecurity countermeasures across system lifecycles.

Leads classified IT and information assurance operations, including cybersecurity governance, system security engineering, RMF assessment and authorization, classified systems administration, lifecycle management, and security compliance. Directs multidisciplinary and geographically dispersed teams, develops operational roadmaps, manages budgets and performance metrics, coordinates with government and security stakeholders, oversees cyber remediation and information-spillage reporting, and serves as the organization’s Insider Threat Official.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Sr. Manager of Information Risk & Controls drives the risk management evolution by leading risk identification, developing frameworks, and collaborating with teams across Invesco.

Leads cybersecurity risk identification, assessment, mitigation, and control implementation. Supports HIPAA and PCI DSS compliance, customer cybersecurity surveys, evidence collection, stakeholder coordination, compliance monitoring, metrics, and leadership reporting. Advises business and technology stakeholders on secure technology decisions, applies NIST, ISO, ITIL, and COBIT frameworks, and mentors less experienced team members.

Conduct mixed-method behavioral research on cybersecurity, privacy, artificial intelligence, risk, trust, and human behavior. Design and lead interviews, focus groups, surveys, and experiments; analyze quantitative and qualitative data; publish findings; support grant proposals; mentor student researchers; manage project milestones; and disseminate results with interdisciplinary and international collaborators.

Provides technical leadership for digital safety, online safety, and cybersecurity programs. Designs and improves technical approaches, training, curricula, tools, and knowledge products; manages workstreams, budgets, consultants, deliverables, and implementation risks; engages partners and donors; conducts research and translates evidence into practical recommendations; supports proposals, business development, presentations, and organizational learning.

Leads first-line technology and cybersecurity risk and controls across multiple financial-services entities. Advises the CTO, CISO, senior leaders, and board committees; owns RCSA, control testing, risk reporting, issue remediation, audits, and regulatory exams. Builds and governs enterprise programs including Insider Threat, End User Computing, AI Governance, and IT Asset Management while aligning practices with NIST, COBIT, FFIEC, and OCC requirements.

Maintains information system security postures for DoD Collateral, SCI, and SAP environments. Supports continuous monitoring, authorization packages, RMF assessment and authorization activities, configuration management, vulnerability remediation, audit reviews, media protection, incident handling, and security training. Coordinates system changes with ISSMs and authorizing officials while ensuring compliance documentation and security safeguards remain current.

Maintains the security posture of DoD information systems supporting Collateral, SCI, and Special Access Programs. Responsibilities include preparing RMF authorization packages, monitoring systems, managing configuration changes, conducting security impact analyses, maintaining compliance documentation, reviewing audit records, identifying vulnerabilities, supporting remediation, overseeing media sanitization and system recovery, and assisting with physical, personnel, incident-handling, and security-awareness activities.

Lead operational cybersecurity initiatives for Department of War maritime missions, including cyber architecture, Defensive Cyberspace Operations, COTS sensor procurement, hardware integration, testing, deployment, and RMF compliance. Manage cross-functional teams, subcontractors, government stakeholders, OEMs, and partners. Direct technical reviews, system integration testing, engineering documentation, threat and vulnerability mitigation, supply chain risk management, and secure operations in classified, contested, and disconnected environments.

Supports a national security customer by addressing cybersecurity inquiries, translating security needs into technical requirements, developing architecture risk and mitigation plans, identifying security gaps, shaping cybersecurity policies, and publishing baseline requirements for enterprise services. Provides security guidance, contributes to ICAM and Zero Trust initiatives, participates in technical exchanges, and ensures compliance with cybersecurity directives.

The ISSO ensures classified information systems comply with NISPOM, DAAPM, JSIG, and related cybersecurity requirements. Responsibilities include auditing, security plan development, security awareness training, investigating violations, documenting corrective actions, collaborating with security and government personnel, and managing system sustainment activities such as hardware/software changes, accounts, media protection, and file transfers. The role is fully onsite and requires an active Secret clearance and U.S. citizenship.

Support ransomware and cyber extortion engagements through threat actor communications, negotiation documentation, case tracking, stakeholder coordination, and concise reporting. Research threat actor groups, campaigns, malware, tactics, techniques, and procedures using open-source and internal intelligence. Maintain actor notes, intelligence artifacts, communication logs, templates, playbooks, and operating procedures while contributing to process improvements and engagement strategy.

Leads cyber resilience across North and Latin America while owning global cybersecurity products and services. Partners with executives and cross-functional teams to translate cyber risks into business priorities, drive secure digital transformation, implement policies and controls, improve recovery readiness, and measure resilience maturity. The role also develops service roadmaps, accelerates adoption, strengthens IT, OT, cloud, and emerging technology security, and promotes AI-enabled security operating models.

Supports digital and online safety programs through coordination, partner engagement, trainings, events, content development, reporting, procurement, grants, and financial processes. The role also contributes to proposals, donor engagement, presentations, and new partnerships by translating technical approaches and program learning into clear materials. Candidates need program coordination experience, strong writing and presentation skills, digital safety interest, organizational judgment, cross-cultural communication abilities, and proficiency with Microsoft Office and Copilot.

Lead embedded systems security engineering for DoD sensor payloads and mission systems. Responsibilities include developing security architectures and requirements, ensuring JSIG and DAAPM compliance, supporting security testing and authorization activities, maintaining security plans and POA&Ms, assessing exportability, and applying reverse engineering, anti-tamper, cyber resiliency, and hardware/software assurance techniques. The role requires collaboration across program and business development teams, strategic cybersecurity planning, and full lifecycle systems engineering from architecture through verification and validation.

Lead Citi’s enterprise Insider Threat program within the Cybersecurity Fusion Center. Responsibilities include defining strategy, managing and developing multidisciplinary teams, implementing data-centric detection and response processes, applying AI and advanced analytics, integrating behavioral and technical indicators, advising senior stakeholders, coordinating governance and risk controls, and engaging industry and government partners. The role requires extensive cybersecurity leadership, insider threat expertise, incident response experience, and the ability to drive global transformation.

Lead the development and execution of Citi’s enterprise insider threat program. Responsibilities include strategic planning, AI-driven threat detection, data-centric process implementation, threat triage and response, stakeholder engagement, governance, risk management, metrics, reporting, and incident response support. The role partners with cybersecurity, legal, HR, compliance, risk, technology teams, industry peers, vendors, and government agencies while helping drive organizational transformation and mentor team members.

Leads product vision, strategy, and roadmap for Illumio Insights, a SaaS security analytics platform. Owns advanced threat detection, behavioral analysis, investigation, response workflows, AI/ML capabilities, and ecosystem integrations. Partners with engineering, customers, field teams, and strategic partners to define requirements and validate product-market fit. Oversees competitive positioning, enterprise product delivery, and product manager development while advancing Illumio’s detection-and-containment platform.

Leads the risk-based IT audit function, including audit planning, control testing, reporting, remediation validation, and external audit support. Evaluates IT general controls, cybersecurity, application and infrastructure controls, cloud environments, third-party providers, disaster recovery, and compliance frameworks. Partners with Finance, IT, Cybersecurity, Legal, executives, and the Audit Committee to address technology risks, improve internal controls, and advise on emerging technology governance. Manages consultants and helps build a scalable IT audit team.

Lead PKI implementation and data protection projects, advise clients on privacy laws and compliance, conduct privacy impact assessments, develop privacy policies, manage project planning and budgets, coach and mentor teams, collaborate on breach response and cross-functional cybersecurity initiatives, and review legal documents to support compliance.

Advises strategic enterprise customers on cybersecurity, cloud security, compliance, privacy, and risk. Leads security reviews and executive briefings for CISOs and risk leaders, presents Salesforce’s security architecture and controls, supports audits, questionnaires, contractual requirements, and escalations, and creates customer-facing security materials. Partners with Sales, Customer Success, Legal, Product, Engineering, and Security teams while translating complex technical and regulatory topics into actionable guidance.