Top Cyber Security Jobs in Wilmington, NC

Lead cybersecurity governance, risk assessments, compliance, and Authorization to Operate efforts for applications, products, and cloud environments. Identify vulnerabilities, manage POA&Ms, assess security controls, support continuous monitoring, coordinate audits, and ensure compliance with federal cybersecurity mandates and RMF requirements. Collaborate with stakeholders and security engineering teams across IAM, SaaS, enterprise IT, and cloud platforms, while leading multidisciplinary efforts in federal environments.

Executes and helps define the information security strategy by leading risk assessments, audits, control testing, policy development, business continuity planning, vendor risk reviews, incident response, and remediation tracking. The role aligns security programs with CIS, NIST, ISO 27001, and SOC 2 frameworks, maintains risk and compliance reporting, and mentors junior security staff while partnering with global business and IT leaders.

Lead enterprise AI security architecture, strategy, governance, and secure-by-design implementation across cloud, hybrid infrastructure, software, and AI/ML environments. Design security patterns for LLM hosting, agentic systems, vector databases, and inference endpoints; translate regulatory requirements into technical standards; review complex architectures; implement AI security guardrails and policy enforcement; advise engineering and product teams; and mentor teams while influencing senior stakeholders.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Operate and improve security across cloud, endpoint, identity, SaaS, and corporate environments. Responsibilities include 24/7 alert triage, incident investigation and containment, threat hunting, phishing and fraud analysis, vulnerability management, evidence collection, and incident reporting. The role also engineers security-tool integrations and SOAR automation, supports PCI DSS and SOC 2 audits, maintains security posture, and communicates risks and remediation guidance to technical and nontechnical stakeholders.

Implements and supports security data ingestion pipelines across applications, cloud services, infrastructure, security tools, and business systems. Develops transformations, parsing, normalization, enrichment, masking, validation, and delivery workflows. Troubleshoots data quality and pipeline issues, documents architectures and data flows, coordinates with client stakeholders, and supports SIEM, detection, investigation, observability, and automation use cases. Requires data engineering experience, scripting, query languages, integration knowledge, and strong client communication.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Lead remediation of MQ security vulnerabilities on mainframe systems for a regulated financial services client. Design and implement Broadcom Top Secret access controls, security patterns, and governance across batch processing, CICS, user permissions, and third-party integrations. Collaborate with mainframe and MQ engineers, document security standards, and complete audit remediation within strict deadlines.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads and develops an engineering team building and operating cloud security controls as software products. Provides technical direction through architecture, design, and code reviews; owns production reliability and continuous improvement; translates security risks into automated, scalable solutions; and coordinates roadmaps and dependencies with product, platform, application, and security teams. The role also drives agile delivery, secure engineering practices, mentoring, and adoption of reusable cloud security patterns across AWS, Azure, and GCP.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

The Information Security Analyst will manage security operations, penetration testing, antivirus and SIEM tools, security assessments, AI-system risk evaluations, business continuity improvements, and compliance frameworks including SOC 2, NIST, and CJIS. The role also delivers security training, evaluates vendors, responds to security questionnaires and RFPs, and partners with IT, engineering, sales, and product teams. U.S. citizenship and FBI fingerprint and background checks are required.

Administer and enhance enterprise data security platforms, including SecuPi, while implementing access controls, masking, encryption, tokenization, monitoring, classification, and DLP across databases, cloud platforms, applications, and AI services. The role integrates security tools with IAM, PAM, SIEM, SOAR, and monitoring systems; troubleshoots complex environments; develops automation; investigates anomalous access; supports audits and incidents; and partners with infrastructure, cloud, database, application, privacy, and governance teams.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Design, deploy, maintain, and automate enterprise data security capabilities across on-premises, cloud, and hybrid environments. Support DLP and DSPM rollout, monitoring, compliance playbooks, SOPs, and Python or PowerShell automation. Partner with IT, security architects, compliance, and investigation teams to implement NIST-aligned controls, reduce data-loss risk, strengthen security posture, and improve detection and prevention of data exfiltration.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.

Owns the architecture and technical roadmap for the Ping Identity platform. Designs enterprise SSO, MFA, identity governance, application integrations, RBAC and ABAC frameworks, lifecycle management, and cloud or hybrid deployments. Leads migration and multi-region availability strategies while producing architecture designs, solution blueprints, integration standards, and audit-ready runbooks.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.

Designs, deploys, configures, migrates, and troubleshoots Palo Alto Networks security infrastructure in customer environments. Responsibilities include firewall, Panorama, Prisma, Strata Cloud Manager, and GlobalProtect implementation; migration from legacy platforms; routing and switching support; change-window execution; technical design and migration documentation; post-deployment stabilization; and communication with customers, account teams, and engineering. Travel to customer sites and evening, overnight, or weekend maintenance windows may be required.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.