Top Cybersecurity Jobs

Provides cybersecurity support for nonintegrated acquisitions, partnering with acquisition, IT, and security teams to ensure security visibility and alignment with enterprise use cases, compliance requirements, and detection strategies. Uses approved AI tools to automate workflows and improve processes. The role requires experience in security operations, investigations, insider risk, threat analysis or digital forensics, security logs, and user activity monitoring.

Support cybersecurity incident response, monitoring, threat intelligence, and threat hunting. Develop automation, scripts, and AI-enabled tools to improve detection and investigations. Build metrics, dashboards, and collaborate with IT, legal, privacy, and business stakeholders to strengthen security operations.

Design, build, and operate security-focused software, services, automation frameworks, APIs, and developer platforms. Integrate security controls into CI/CD and cloud-native workflows, implement identity and access-management capabilities, conduct secure code reviews and threat modeling, and maintain security telemetry systems. Collaborate with engineering, security, and compliance teams, support incident response, translate emerging threats into engineering requirements, and mentor engineers on secure coding and architecture.

The Security Engineering Manager oversees security policies, manages incident responses, monitors threats, and coordinates investigations to protect the technology environment. They also handle reporting and assurance on security incidents and ensure operational stability.

The Security Engineering Manager safeguards technology by enforcing security policies, managing incident responses, monitoring threats, and reporting on security incidents. Must collaborate across IT and business functions, ensuring compliance and conducting training.

Lead design and hands-on implementation of secure, resilient enterprise infrastructure across on‑prem, cloud, and hybrid environments. Drive network and cloud modernization, security monitoring, incident response, CMMC/NIST compliance, disaster recovery, secure AI adoption, and documentation. Mentor engineers and coordinate across engineering, compliance, facilities, and program teams.

Lead and execute adversary emulation and purple team operations to validate detections, logging, and response. Build repeatable MSV-based validation workflows, develop custom offensive tooling (C2, payloads, automation), test cloud and endpoint attack paths (AWS, GCP, Azure), and partner with Detection Engineering and Incident Response to convert findings into improved detections, documentation, and hunts.

Lead response to high‑priority security incidents, coordinate investigations with internal teams, providers and law enforcement, improve IR and forensics capabilities across Windows, Linux, Mac, network and cloud environments, run post‑incident reviews and root cause analysis, contribute to IR policies and detection tuning, and support readiness exercises and incident planning.

Lead and manage the second-line IT SOX/MAR program, integrate IT SOX/MAR with state cybersecurity regulations, liaise with first-, second-, and third-line stakeholders, drive automation and continuous controls assurance using the GRC platform, provide technical guidance, resolve control and scoping issues, and lead/jointly manage team members on compliance and remediation efforts.

Lead cybersecurity strategy and architecture for AI-enabled products across the CCB portfolio. Design reusable cloud-native security frameworks, perform threat modeling and secure design, guide adoption of modern security methods (A2A, API, service mesh, certificate management), and influence cross-functional teams to implement robust, scalable cybersecurity architectures.

Lead detection, investigation, and response to insider threats for acquisitions. Monitor user activity and logs, perform network and trace analysis, triage alerts, develop playbooks and detection strategies, provide intelligence to acquisitions, drive remediation, educate stakeholders, and serve as escalation point while supporting weekend and in-office schedules.

Lead cybersecurity architect responsible for designing and delivering cloud-native security solutions, threat modeling, secure design reviews, automation and CI/CD integration, vendor evaluations, AI-assisted security validation, driving reuse and controls compliance (e.g., NIST 800-53), and advising stakeholders while fostering communities of practice and inclusion.

Design and implement enterprise cybersecurity architecture for cloud-native applications. Embed security across SDLC and CI/CD, build Python automation for monitoring and remediation, evaluate vendors, lead practice communities, and collaborate with risk and compliance to translate regulatory requirements into technical controls while validating AI-assisted security outputs.

Lead cybersecurity architect responsible for designing and assessing data security controls across cloud and hybrid platforms (Databricks, Snowflake, AWS, GCP). Engage stakeholders, define target technical state, automate remediations, evaluate vendors, lead communities of practice, and drive secure architecture, threat modeling, and risk mitigation for enterprise-scale data platforms.

Investigate security issues from red team and assessment teams, perform root cause analysis, prioritize risk, design and implement technical and procedural mitigations, collaborate with stakeholders, and use enterprise AI tools to accelerate analysis and reporting while validating outputs and ensuring data security.

Lead cybersecurity architecture for cloud-native applications within consumer banking: define target state, assess risks, propose mitigations, drive automation, lead vendor evaluations and communities of practice, and communicate solutions to senior stakeholders.

Lead offensive product security and PSOC teams to run penetration tests, red team exercises, security research, detection and response, bug bounty coordination, and product security incident response. Define offensive services, assessment schedules, security research plans, and operations strategy while managing engineers and cross-functional stakeholder priorities.

Develop and drive enterprise cybersecurity strategy, multi-year roadmaps, portfolio governance, and risk-reduction initiatives. Manage cybersecurity budgets across operational, capital, and professional-services spending. Prepare bi-monthly executive and board reporting that synthesizes cyber posture, threats, vulnerabilities, control gaps, project progress, and remediation risks. Partner with cybersecurity leadership, Finance, technology, risk, and business stakeholders to optimize investments and support risk-informed decision-making.

Develops, edits, and maintains cybersecurity policies, SOPs, standards, plans, and RMF, security operations, engineering, training, and governance artifacts. Translates technical concepts from subject-matter experts into clear documentation, ensures consistency and compliance with templates, manages version histories, creates documentation standards, and coordinates review, adjudication, and approval workflows. The role is primarily remote but requires some TDY travel and federal background investigation or Public Trust eligibility.

Lead pre-sales activities for Sophos cybersecurity solutions across Central America and the Caribbean. Support partners, resellers, customers, and key accounts with technical expertise, product demonstrations, threat guidance, and solution positioning. Explain complex cybersecurity concepts to technical and executive audiences, promote MDR and incident response offerings, and advise on network, cloud, endpoint, and compliance protection. The role requires up to 25% regional travel and is remote within the U.S.

The role involves delivering technical support for cybersecurity solutions, ensuring successful adoption in OT environments, and providing training and ongoing support throughout the solution lifecycle.

Provides front-line cybersecurity monitoring and operational support for NIH/OD-OIT. Monitors alerts, dashboards, events, and queues; triages and documents security incidents; creates and routes tickets; identifies false positives; follows escalation procedures; gathers information for higher-tier analysts; supports reporting, shift handoffs, and timely escalation of suspicious activity.

Conduct advanced cybersecurity event analysis, incident investigations, and proactive threat hunting across network, endpoint, identity, and cloud telemetry. Analyze indicators of compromise and attacker behavior, correlate security and intelligence data, develop detection logic and analytic use cases, map activity to attack frameworks, support incident response, mentor junior analysts, and produce investigation reports and threat-hunting findings.

Leads independent oversight of cybersecurity, technology, and information security risks and controls. Manages a team conducting risk assessments, control reviews, issue remediation, risk acceptance evaluations, KRI monitoring, regulatory examination support, audit support, and executive reporting. Partners with Technology, Legal, Audit, Non-Financial Risk, and business stakeholders to address emerging risks, evaluate technology initiatives, strengthen enterprise risk programs, and provide guidance on cyber threats and regulatory developments.

Sell Stream Security's AI detection and response platform to US-market clients. Own full sales cycle from prospecting to close, generate leads, manage client relationships, maintain CRM, collaborate cross-functionally, and provide market feedback to inform product and strategy.