Top Senior Cyber Security Jobs in Ann Arbor, MI

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Implement DevSecOps controls across CI/CD pipelines, automate SAST/DAST/SCA and container scanning, secure cloud and Kubernetes infrastructure, and integrate vulnerability management into development workflows. Support compliance (SOC2/FedRAMP/DoD standards), assist teams with remediation, and document DevSecOps processes while collaborating with developers, QA, and customer security teams.

Design and implement compliance-aware software architecture for Duo, translating FedRAMP/FIPS/CRA/PQC requirements into engineering roadmaps, building AI-enabled tools, triaging CIAM issues, providing auditor evidence, and coordinating remediation across Product, Security, SRE, and Engineering teams.

Lead and drive the vehicle cybersecurity roadmap across platforms, managing requirements, risk-based triage, feature design, implementation, verification, and release reporting. Coordinate cross-functional and external OEM/supplier teams, partner with fleet operations to mitigate operational friction, and ensure architectures meet automotive security standards and regulations.

Design, implement, and manage enterprise security controls across Microsoft 365, EDR, DLP, IAM, and vulnerability management. Lead cloud security, patching audits, data protection, SDLC security integration, phishing simulations, vendor risk assessments, and threat research to improve detection, response, and remediation.

Embed security across the software development lifecycle by partnering with engineering teams to design secure systems, identify and remediate vulnerabilities, perform multi-language code reviews, integrate SAST/DAST/SCA into CI/CD, and apply authentication, authorization, cryptography, and cloud security controls while collaborating in Agile environments.

Design, implement, and operate SAP security and access-control frameworks across S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors. Perform role design, user provisioning, SOD analysis, audit support, and manage SAP GRC Access Control and Process Control in partnership with audit, compliance, and business teams.

Design and review secure application architectures and IAM solutions, perform vulnerability and code-level reviews and penetration testing, apply secure coding practices for high-volume transactional systems, coordinate cross-functional teams for audits, and manage security projects while ensuring compliance with standards and regulatory requirements.

Design, implement, and operate security controls across Oracle Cloud (OCI) and hybrid environments. Harden workloads, manage identity and access, lead vulnerability and compliance programs, integrate with SIEM, and respond to incidents. Define security architecture, enforce CIS and regulatory standards, mentor junior engineers, and collaborate with product, engineering, and operations teams to deliver secure cloud solutions.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead hands-on security engineer responsible for designing, implementing, hardening, automating, and optimizing enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Builds and maintains security platforms (SIEM, SOAR, XDR/EDR), develops detection logic, automates workflows, supports incident response, and partners with cross-functional teams to raise security engineering maturity and reduce risk.

Lead and grow the security operations team to detect, investigate, and respond to threats across endpoints, identity, email, and cloud. Develop SecOps strategy, incident response playbooks, run tabletop exercises, manage SIEM/EDR/email security, drive identity governance, vendor/MSSP relationships, and report security KPIs to leadership.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.