Top Cyber Security Jobs in Ann Arbor, MI

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Join the security team to run security operations, monitoring, incident response, application and infrastructure security reviews, bug bounty management, and compliance (SOC 2, ISO 27001, GDPR). Participate in on-call rotations, triage alerts, remediate vulnerabilities (libraries, images, containers), threat model systems, and integrate defensive tooling to protect SaaS and on-prem deployments.

Design and implement software security solutions for diabetes care and digital health products. Lead product security risk assessments, vulnerability remediation, secure coding practices, static analysis, and incident response. Mentor engineers, run security reviews, and ensure compliance with regulated medical software development and quality management systems.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Provide cybersecurity consulting for clients including risk assessments, policy and disaster recovery planning, incident response, security awareness, regulatory IT examination support, AI integration guidance, vendor oversight, reporting to leadership and boards, project management, and IT audit assistance. Deliver tailored security programs, documentation, tabletop testing, and timely communications while adapting to evolving regulations and client needs.

Lead architecture and continuous security improvement of enterprise Snowflake platforms. Build proactive monitoring and threat detection, integrate Snowflake telemetry with SIEM, perform threat modeling and remediation, guide governance and access controls, and drive managed services automation and runbooks while mentoring engineers.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.

Hands-on offensive and defensive security engineer for a Layer 1 blockchain: audit Move modules, Solidity and Rust code, build fuzzers/static analysis/formal-verification tooling, threat-model protocol layers, run bug bounty triage, lead incident response, and partner with engineers and external auditors to harden the network against sophisticated adversaries.

Lead and deliver information security governance, risk, compliance, and privacy assessments; develop security programs, roadmaps, policies and executive presentations; advise C-level clients; perform PCI and CMMC advisory services; mentor staff and produce remediation recommendations and reports.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Manage and execute RCA's cybersecurity program: lead audits and vendor risk assessments, run security awareness/phishing programs, oversee vulnerability remediation and MDM, ensure HIPAA/HITECH/NIST compliance, build security reporting, and coordinate incident response and tabletop exercises.

Lead enterprise cybersecurity and IT operations for a HIPAA-regulated healthcare company: build and mature security programs, manage IAM/endpoint/cloud security, drive vulnerability management and incident response, ensure compliance (HIPAA/HITECH), oversee IT operations and vendor risk, and mentor a technical team while partnering with cross-functional leadership.

Lead and improve a 24x7 SOC by partnering with frontline analysts, owning operational metrics (MTTD/MTTR, SLAs), driving data-driven improvements, coaching analysts into career paths, optimizing tooling and automation (SIEM/SOAR), and supporting global handoffs across US, Ireland, and India.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Manage governance, risk, and compliance for SLED customers: develop and maintain SSPs, POA&Ms, policies, control mappings (NIST/FedRAMP/CJIS/HIPAA), evidence repositories, IRP/BCP, support audits, remediation tracking, and continuous monitoring with cross-functional teams.

Support ATO documentation and assessment for a cloud-based federal courts modernization program. Coordinate with security, engineering, and PM teams; create Visio diagrams; monitor, test, and troubleshoot IA issues; analyze CND/SIEM logs; assess configurations; implement enterprise security policies and procedures; manage vulnerability tracking and incident documentation; provide AWS cloud security expertise and ensure compliance with NIST, FedRAMP, CIS, and ISO 27001.