Top Cybersecurity Jobs

Lead technology risk and controls activities across employee and data platforms. Identify, assess, quantify, and mitigate operational, compliance, cybersecurity, and data risks; evaluate control effectiveness; maintain control inventories; manage issues and governance reporting; and advise technology stakeholders, auditors, regulators, and executives. Use authorized AI capabilities to support risk evidence synthesis and reporting while validating outputs for security, auditability, and regulatory compliance.

Leads multiple engineering teams delivering customer-facing cybersecurity products. Sets technical direction and strategy, partners with Product Management, mentors engineering managers and engineers, establishes performance metrics, manages cross-organizational projects, hires engineering talent, and drives continuous improvement while fostering an empathetic, results-oriented engineering culture.

Leads technology risk and controls for an AI/ML data platform. Responsibilities include identifying and quantifying technology risks, evaluating control effectiveness, managing issues, supporting governance and regulatory compliance, and reporting risk posture to senior leadership. The role partners with technology, business control, data, assessment, and regulatory stakeholders, while using and validating enterprise-approved AI tools for risk evidence synthesis and reporting.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value engagements, customer validation, training, and executive discussions. Translates technical capabilities into business outcomes while supporting complex enterprise sales cycles. Collaborates with Product, Marketing, Customer Success, and Support teams, and travels approximately 25–50% as required.

Leads IT audit engagements assessing digital environments, processes, controls, cybersecurity, data integrity, and AI systems. Manages client relationships, audit teams, project delivery, compliance challenges, data quality validation, governance improvements, and risk management. The role also involves mentoring staff, applying IT governance frameworks, promoting innovative audit technologies, and ensuring assurance standards are met.

Lead critical cybersecurity incident response across on-premises and cloud environments. Analyze alerts, manage containment and remediation, coordinate with security, privacy, compliance, legal, and architecture teams, and drive corrective actions. Mentor analysts, improve security tooling and procedures, produce incident reports, and provide security engineering consultation. The role includes on-call responsibilities and a Wednesday-to-Saturday schedule.

Designs, implements, and maintains cybersecurity controls including firewalls, encryption, IDS/IPS, MFA, and network security measures. Conducts vulnerability assessments and penetration testing, monitors and responds to incidents, supports security audits, and develops security documentation. Collaborates with engineering teams on secure software development, cybersecurity requirements, compliance, and cyber supply chain threat monitoring. Provides technical troubleshooting and stays current with emerging threats and security practices.

Monitors and investigates security alerts, endpoint detections, vulnerabilities, and suspected incidents. Performs triage, documents findings, escalates threats, supports containment and remediation, and helps maintain cybersecurity tools. Collaborates with IT and other departments on incident response, audits, compliance assessments, tabletop exercises, reporting, and security improvements. The role requires foundational cybersecurity, networking, logging, threat, vulnerability, and security framework knowledge, along with relevant education, experience, and certifications.

The Cybersecurity Engineer III manages enterprise vulnerability programs across infrastructure, endpoints, applications, cloud, and networks. Responsibilities include developing scanning strategies, analyzing vulnerabilities and threat intelligence, prioritizing remediation, coordinating remediation teams, managing exceptions and compensating controls, producing risk reports, integrating security platforms, supporting assessments and audits, and automating scanning and reporting workflows. The role also provides technical guidance and communicates emerging security risks.

Advise Rapid7 customers on improving security posture, optimizing platform usage, and advancing security program maturity. Provide tailored recommendations, threat awareness reporting, customer deliverables, incident response assistance, and executive business reviews. Build relationships with technical and executive stakeholders, coordinate support, support renewals and retention, identify customer risks, and relay client requirements to influence the managed services roadmap.

Supports cybersecurity initiatives across security operations, threat detection and response, governance, risk and compliance, application security, cloud security, M&A cyber-risk assessments, security architecture, zero-trust access, research, documentation, and human-centered design.

Paid summer 2027 internship supporting Spirit Commercial’s Information Digital Technology & Security organization. Interns may work in software and application support, systems and network infrastructure, cybersecurity, data analytics, digital products, or technology project management. The role includes mentorship, exposure to aerospace manufacturing technology, and collaboration with technology teams. The position is fully onsite in Wichita, Kansas, requires full-time summer availability, and is subject to export-control requirements requiring U.S. Person status.

Paid summer 2027 internship supporting secure technology environments for defense and space programs. Interns may work on applications, systems, cybersecurity, infrastructure, networks, endpoints, data analytics, automation, or technical project activities. The role is fully onsite in Wichita, Kansas, offers relocation for eligible candidates, and requires eligibility to obtain a U.S. security clearance and meet U.S. person export-control requirements.

Own product cybersecurity frameworks and maturity models, assess program health, coordinate complex initiatives, manage dependencies, define KPIs, establish governance workflows, and translate technical information into executive-ready plans and recommendations. The role partners with cybersecurity leaders and internal customers to deliver services, improve program maturity, and drive measurable outcomes across a matrixed organization.

Paid, onsite summer cybersecurity and information security internship supporting project-based assignments at the Federal Reserve Bank of Chicago. Interns work 40 hours weekly for 10–12 weeks, analyze data, communicate findings, present information, and collaborate with internal stakeholders. Applicants must be current students graduating December 2027 or later, meet GPA requirements, and be authorized to work in the United States without visa sponsorship.

Deploy, configure, and manage Palo Alto Networks XSIAM for threat detection and response. Develop detection rules, use cases, and playbooks; onboard data sources and integrate security tools; analyze cybersecurity challenges; support clients; and mentor junior team members.

Own and administer Caterpillar’s enterprise Qualys platform, including vulnerability scanning, Cloud Agents, asset data, integrations, reporting, governance, and platform health. Analyze and prioritize vulnerabilities using risk scoring, threat intelligence, predictive analytics, and AI-assisted tools. Partner with infrastructure, cloud, application, DevOps, governance, and compliance teams to coordinate remediation, resolve scan issues, improve automation, and advance vulnerability management maturity.

Support annual cybersecurity compliance certifications, regulatory examinations, reporting, and information requests. Maintain requirement and evidence trackers, coordinate stakeholders and control owners, review documentation for accuracy and completeness, organize repositories, manage executive DocuSign approvals, and support SEC and FINRA compliance reporting. Identify process improvements and assess cybersecurity controls and technology risk evidence. The role requires strong organization, project management, communication, analytical, and stakeholder management skills.

Leads regional cybersecurity operations and incident-response campaign administration across 24/7/365 Regional Operations Centers. Oversees incident prioritization, investigation quality, reporting, documentation, SOP compliance, stakeholder coordination, ticket reviews, resource allocation, and surge support. Develops training curricula, leads tabletop exercises, mentors analysts, and drives process improvement while ensuring adherence to DoD cyber incident-handling requirements.

Conduct IT audits by evaluating process documentation, testing control design and effectiveness, identifying risks, documenting findings, and supporting remediation. The role partners with IT, Internal Audit, and control groups; provides advisory recommendations; prepares reports; and maintains audit workpapers in TeamMate+. It also involves special assignments, ongoing business education, senior-management communication, and up to 20% travel.

Conducts technology and cybersecurity risk analyses, identifies control gaps, develops mitigation plans, supports compliance and regulatory engagements, prepares documentation and reports, and helps improve risk management processes. Collaborates with Technology, Cybersecurity, leadership, auditors, and regulators while providing guidance to newer analysts and escalating issues exceeding risk appetite.

Leads risk response activation and assurance across data, technology, and workforce management risks. Converts validated risks into remediation, compensating control, or risk acceptance pathways; validates evidence and control effectiveness; assesses residual risk; and strengthens governance and issue resolution. The role coordinates complex remediation initiatives across cybersecurity, technology, audit, data governance, and business teams, while applying AI and ML techniques in cybersecurity contexts.

Serves as the technical authority for enterprise cybersecurity architecture, tools, and platforms across hybrid and multi-cloud environments. Leads security tool selection, integration, optimization, governance, architecture design, risk management, compliance, ATO support, lifecycle modernization, and incident-response architecture. Establishes security standards and metrics, evaluates emerging technologies, mentors technical staff, and communicates recommendations to leadership. Requires extensive cybersecurity architecture and engineering experience, federal compliance expertise, advanced security tooling knowledge, scripting and automation skills, and an active Top Secret clearance.

Lead enterprise vulnerability management by analyzing cyber threats, CVEs, and security risks; prioritizing remediation based on severity and operational impact; monitoring mitigation efforts; assessing vulnerability and configuration data; documenting cybersecurity incidents; and advising stakeholders and team members on cybersecurity, networking, system administration, hardening, privacy, and risk management.

Cybersecurity interns support projects across cloud security, identity and access management, vulnerability management, threat intelligence, governance, risk and compliance, AI security, and automated incident-response playbooks. Interns collaborate with security experts, analyze risks and vulnerabilities, develop scripts and automation, support security controls and compliance efforts, and present project outcomes. The hybrid program is based in Cary, North Carolina, requires at least three office days weekly, and runs for ten weeks beginning June 1, 2027.