Top Senior Cyber Security Jobs in Wilmington, NC

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Build and operate Dave’s technology governance program covering cyber risk, IT controls, change and incident management, business continuity, policies, and audit readiness. Own control inventories, risk registers, exceptions, assurance programs, and remediation accountability across SOX ITGC, PCI, SOC 2, and related frameworks. Partner with Security, IT, Engineering, Data, Internal Audit, Legal, and external assessors to establish practical controls, escalate material risks, and improve governance through automation and AI while maintaining appropriate oversight.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Lead the creation and growth of a new OT/IoT cybersecurity practice, owning its P&L, offerings, pricing, partnerships, hiring, delivery quality, and go-to-market strategy. Serve as a senior technical SME and trusted advisor for client assessments, regulatory compliance, executive workshops, roadmaps, and security engagements. Shape and close consulting opportunities, develop methodologies and deliverables, manage teams, and advise organizations on ICS/SCADA, segmentation, monitoring, IT/OT convergence, and AI-related risks.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Leads regulatory and security compliance for evaluating agentic AI vendors within a CMS Fraud Prevention Services authorization boundary. Assesses vendor security postures, authors control inheritance, boundary, data-flow, SSP, POA&M, PIA/SORN, and compliance artifacts, and coordinates with CMS security stakeholders. Advises on AI-specific risks involving data retention, prompt logging, PHI, tool authorization, and RBAC. Requires extensive federal compliance experience, AWS security knowledge, HIPAA/FISMA expertise, and the ability to obtain Public Trust clearance.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Leads ISSO and risk and compliance teams overseeing FedRAMP, NIST RMF, FISMA, HIPAA, and accreditation activities. Conducts security control and vulnerability assessments, develops ATO and compliance documentation, manages continuous monitoring and remediation, advises authorization officials, and coordinates audits, penetration testing, and assessments. Provides technical leadership, trains security personnel, maintains risk registers and policies, and supports federal healthcare cybersecurity programs.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Assess cloud, network, infrastructure, and application designs against security and compliance requirements. Translate requirements into technical specifications, security blueprints, and engineering guardrails. Support compliance programs, control assessments, and audits, investigate security risks, define remediation, and improve security-control adoption through AI and automation.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Leads enterprise security architecture by assessing threats, performing application security assessments and threat modeling, reviewing designs, and integrating controls into SDLC and DevSecOps environments. Advises business and engineering stakeholders on secure solutions, remediates vulnerabilities, protects APIs, web applications, and cloud workloads, and improves security processes through automation and standardization.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.

Builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform automation, security remediation, audit evidence, and compliance support for HIPAA, HITRUST, SOC 2, and FedRAMP.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.