Top Cyber Security Jobs in Albuquerque, NM

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads Enterprise Security services, setting and enforcing security standards across identity, endpoints, business applications, cloud infrastructure, networking, IoT, and automation. Partners with IT, SOC, vulnerability management, governance, and threat operations teams to secure applications, monitor environments, manage EDR policies, remediate vulnerabilities, assess risks, and maintain compliance. Also drives AI security initiatives and uses AI tools to improve enterprise security capabilities and team efficiency.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Leads cybersecurity compliance and risk management for classified and unclassified systems. Develops and maintains ATO packages, conducts risk assessments, vulnerability management, audit log analysis, SIEM tuning, continuous monitoring, and incident response. Creates security policies, documentation, and compliance reports; supports audit readiness and data-spillage cleanup. Advises leadership, collaborates with technical teams, interfaces with government agencies, and ensures compliance with NIST, RMF, DoD, JSIG, and AFIC requirements.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Supports cybersecurity operations, security planning, access management, countermeasure implementation, compliance audits, technical documentation, and security training. Assists with cloud architecture, cross-domain data solutions, cybersecurity accreditation, DoD Risk Management Framework compliance, and obtaining and maintaining Authorities to Operate for Air Force Research Laboratory systems.

Leads cybersecurity strategy, governance, accreditation, risk management, continuous monitoring, and incident preparedness for satellite ground systems. Ensures compliance with DoD and U.S. Space Force policies, including RMF, CNSSI 1253, DISA STIGs, ATO, and SAP requirements. Integrates DevSecOps and Zero Trust across the system lifecycle, oversees cybersecurity tools and audits, directs engineering teams, engages DoD stakeholders, and mentors junior personnel.

Supports cybersecurity architecture, security planning, access authorization, risk management audits, security documentation, policy training, and incident countermeasures. Maintains compliance with security policies and DoD requirements, supports cloud and cross-domain architectures, and obtains and maintains Authorities to Operate for ground systems.

Supports cybersecurity and information assurance for AFRL spaceflight systems, including cloud architectures, cross-domain data solutions, security policies, access controls, risk audits, security countermeasures, and DoD Risk Management Framework compliance. The role also supports cybersecurity accreditations and obtaining and maintaining Authorities to Operate.

Supports cybersecurity and information assurance activities for Air Force Research Laboratory spaceflight systems. Responsibilities include developing security plans, managing access controls, implementing countermeasures, maintaining documentation, supporting risk audits, addressing threats, and ensuring DoD Risk Management Framework compliance. The role also supports cloud and cross-domain architectures and obtains and maintains Authorities to Operate for ground systems.