Top Senior Cyber Security Jobs in Ann Arbor, MI

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Implement DevSecOps controls across CI/CD pipelines, automate SAST/DAST/SCA and container scanning, secure cloud and Kubernetes infrastructure, and integrate vulnerability management into development workflows. Support compliance (SOC2/FedRAMP/DoD standards), assist teams with remediation, and document DevSecOps processes while collaborating with developers, QA, and customer security teams.

Design and implement compliance-aware software architecture for Duo, translating FedRAMP/FIPS/CRA/PQC requirements into engineering roadmaps, building AI-enabled tools, triaging CIAM issues, providing auditor evidence, and coordinating remediation across Product, Security, SRE, and Engineering teams.

Lead and drive the vehicle cybersecurity roadmap across platforms, managing requirements, risk-based triage, feature design, implementation, verification, and release reporting. Coordinate cross-functional and external OEM/supplier teams, partner with fleet operations to mitigate operational friction, and ensure architectures meet automotive security standards and regulations.

Design, implement, and manage enterprise security controls across Microsoft 365, EDR, DLP, IAM, and vulnerability management. Lead cloud security, patching audits, data protection, SDLC security integration, phishing simulations, vendor risk assessments, and threat research to improve detection, response, and remediation.

Embed security across the software development lifecycle by partnering with engineering teams to design secure systems, identify and remediate vulnerabilities, perform multi-language code reviews, integrate SAST/DAST/SCA into CI/CD, and apply authentication, authorization, cryptography, and cloud security controls while collaborating in Agile environments.

Design, implement, and operate SAP security and access-control frameworks across S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. Perform role design, user provisioning, SOD analysis, audit support, and manage SAP GRC Access Control and Process Control in partnership with audit, compliance, and business teams.

Design and review secure application architectures and IAM solutions, perform vulnerability and code-level reviews and penetration testing, apply secure coding practices for high-volume transactional systems, coordinate cross-functional teams for audits, and manage security projects while ensuring compliance with standards and regulatory requirements.

Design, implement, and operate security controls across Oracle Cloud (OCI) and hybrid environments. Harden workloads, manage identity and access, lead vulnerability and compliance programs, integrate with SIEM, and respond to incidents. Define security architecture, enforce CIS and regulatory standards, mentor junior engineers, and collaborate with product, engineering, and operations teams to deliver secure cloud solutions.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Hands-on senior IT security systems administrator responsible for administering Google Workspace and Microsoft 365, managing Windows and Mac endpoints via MDM, operating identity and SSO/MFA systems, and running security tooling (EDR, DLP, SIEM, email security). Owns threat monitoring, incident response, vulnerability and patch management, compliance evidence, DR planning, security reporting, and vendor relationships for a remote distributed workforce.

Hands-on Staff Security Engineer to build and operate DevSecOps capabilities: automate security controls, harden AWS/cloud and CI/CD, improve supply-chain security, build detection/response tooling, partner with engineering for secure design, and lead incident response and compliance automation.

Lead research and deliver strategic and tactical advice on AI data security and AI ecosystem data management. Produce written research, briefings, and presentations; advise clients and stakeholders; grow networks of thought leaders and vendors; ensure research integrity and collaborate across Gartner to support deliverables. Travel up to 25%.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.