Top Cyber Security Jobs in Orlando, FL

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Contribute to corporate information security by assessing designs, selecting controls, performing threat modeling and vulnerability management, supporting risk and vendor assessments, and advising engineering teams on secure solutions and governance.

Lead architecture and evolution of enterprise, data center, and cloud networks for hyperscale AI; design secure, high-performance fabrics (spine/leaf, RDMA); build AI-agent review frameworks; implement segmented zero-trust network designs; set resiliency, observability, and capacity standards; mentor global engineers and guide cross-functional initiatives.

Join IT & Security to secure and scale enterprise IT, cloud, network, and infrastructure; build automation and tooling; support detection, response, and vulnerability management; improve identity, endpoint, and systems security; and partner cross-functionally to develop processes that enable secure, reliable, and scalable AI workloads.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Own cloud and network security, identity and PKI systems, and compliance for cloud and hybrid environments. Design secure cloud networking, manage NGFW/IDS/IPS, implement IAM/PAM/MFA, operate PKI and cryptography, maintain SIEM/EDR, and implement controls for CMMC L2, FedRAMP, and NIST 800-171. Support audits, documentation, risk assessments, and automation for compliance evidence and hardening standards.

Lead accreditation, authorization, and continuous monitoring for multi-domain classified systems; develop SSPs/SARs/POA&Ms; serve as ISSO during standup; manage ATO/ATC coordination, TEMPEST/EMSEC and RED/BLACK requirements; drive incident response, stakeholder coordination, and security policy for a new classified facility.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.

Own and execute end-to-end collaboration platform integrations for acquisitions: scope, migrate users, Slack channels, Drive, mailboxes, and configurations. Maintain Google Workspace, Slack, and Zoom at enterprise scale; manage email and domain security, DNS consolidation, phishing response, DLP, and platform incident response. Lead compliance/eDiscovery, archiving architecture, vendor selection, and automation to standardize governance across brands. Coordinate cross-functional stakeholders during M&A and build repeatable playbooks and tooling.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead and manage SOC 1/SOC 2 exams and SOX/ICFR activities, assess and remediate ITGCs/ITACs, translate audit requirements into scalable controls, partner with engineering and finance, drive audit readiness, documentation, and automation to improve control effectiveness and audit outcomes in a cloud-native environment.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Build reliable, scalable data pipelines and data products to surface security, fraud, and infrastructure risks. Use big-data technologies (Spark, Presto, Flink, Kafka) and advanced SQL to ETL, model, maintain datasets, and enable analytics for security teams. Partner cross-functionally and lead complex system design and implementation.

Lead IAM consulting engagements: deliver assessments, architecture design, and implementations across IGA, PAM, access management, and cloud identity. Serve as technical SME for pursuits, scope and price engagements, produce client-ready deliverables, facilitate executive workshops, mentor consultants, and grow the IAM practice through reusable assets and thought leadership.

Lead technical IAM delivery tasks: conduct current-state discovery, configure and validate IGA/PAM/Access Management platforms, perform gap analyses against frameworks, produce client deliverables (assessments, diagrams, maturity scores), facilitate workshops, and support pre-sales and practice development while growing toward workstream ownership.

Lead and grow WWT's micro-segmentation practice, driving revenue and client engagements across Illumio, Guardicore, and Cisco Secure Workload. Manage a team of consultants, author SOWs, deliver end-to-end segmentation and zero-trust solutions, oversee project delivery, and advise clients on compliance and optimization. Partner with sales, OEMs, and executives to position offerings and ensure successful outcomes.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.

Lead scoping, presales, design, implementation, and optimization of F5 application delivery and security solutions. Act as F5 SME, build SOWs/LOEs, troubleshoot complex deployments, mentor consultants, and develop practice offerings and integrations with SIEM/SOAR/CMDB tools.

Lead and execute Governance, Risk, and Compliance (GRC) delivery tasks: conduct risk assessments, gap analyses, control and policy design, third‑party risk evaluations, and produce client-ready deliverables. Facilitate discovery workshops and stakeholder interviews, support program and roadmap recommendations, contribute to pre-sales and practice assets, and grow toward owning full workstreams while coaching junior team members.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Design, implement, and validate scalable endpoint security controls across Mac, Windows, and Linux. Lead patch and vulnerability management, host hardening, exploit validation, and threat-prioritization. Evaluate build vs. buy options, collaborate cross-functionally, translate technical risk to business impact, and provide business-hours operational support with infrequent incident response.

Develop, implement, and maintain the banks enterprise information security program. Independently assess first-line security risk management, regulatory compliance, incident response, and control effectiveness. Oversee security governance, policy, KRIs, business continuity, and third-line coordination. Provide unfiltered reporting and challenge to executive management and the Board and lead post-incident reviews and resilience testing.