Top Senior Cyber Security Jobs in Birmingham, AL

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Secure enterprise data warehouses, ETL/ELT pipelines, and data interfaces for international and government environments. Implement classification-driven controls, manage cross-border data compliance (GDPR, CCPA, LGPD, PIPL), support FedRAMP/FISMA/NIST/CMMC frameworks, secure ingestion and interfaces, enforce least-privilege access, perform risk assessments and incident response, and collaborate with data engineering, legal, and government stakeholders.

Lead design and implementation of secure CI/CD pipelines, IaC automation, cloud security and compliance. Perform vulnerability assessments, monitor environments, manage Kubernetes/Docker, support incident response and disaster recovery, and provide technical leadership and DevSecOps frameworks for enterprise global projects.

Design, implement, and maintain SAP S/4HANA Public Cloud security and role-based access controls. Perform SoD assessments, integrate identity services (IAS/IPS/SSO), support Fit-to-Standard workshops, audit/compliance requests, quarterly releases, troubleshooting, role optimization, and post-go-live support for SAP GROW implementations.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Lead Togal's security program: own SOC 2 compliance, manage audits and Vanta, respond to customer security reviews, design and lead incident response, evaluate monitoring/MDR/SIEM, tighten cloud security posture, and coordinate breach communications with Legal and executive leadership.

Design, implement, and maintain enterprise-scale Identity & Access Management solutions across hybrid environments. Drive modernization to Zero Trust, automate identity processes, strengthen privileged access and governance, integrate AI-enabled tooling, monitor and respond to identity threats, ensure compliance and audit readiness, and collaborate with cross-functional teams to reduce identity risk and enable secure business operations.

Assess customers' information security and privacy posture against standards (NIST, PCI, GDPR, HIPAA, etc.), perform gap analyses, conduct onsite/remote assessments, produce findings and remediation recommendations, support sales as SME, and travel to customer sites as needed (25–50%).

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Technical owner for the SASE platform and enterprise data protection. Design and maintain secure access policies, troubleshoot production SASE issues, manage vendors/upgrades, support Microsoft Purview DLP and sensitivity labeling, oversee endpoint persistence (e.g., Dell Absolute), produce runbooks/standards, support audits/compliance, and develop AI automation.

Lead application and operational implementation of GRC/compliance frameworks (SOC 1/2, ISO 27001, CSA STAR, NIST CSF). Develop policies, run internal audits, support risk management and remediation, coordinate with SecOps to ensure controls meet audit standards, and support access reviews and annual audits.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Join the Infrastructure team to provision and secure cloud resources (compute, containers, databases, networking). Maintain infrastructure security, implement policies, handle Jira tickets, participate in daily standups, and perform DevSecOps tasks using Terraform, Helm, CI/CD, and security tooling.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Manage daily operations of Privilege Identity applications and monitor SIEM services within the IAM infrastructure. Handle end-user escalations, maintain and update documentation, review and improve PI and SIEM processes, and evolve into strategic IAM responsibilities as services expand globally.

Lead SecOps and threat initiatives: detect, investigate, and remediate complex incidents; perform forensics and adversary emulation; develop automation and security tools; run threat exercises; mentor engineers; and communicate risks while driving closure on incidents and security projects.

Lead corporate security strategy and operations across identity, endpoints, device trust, internal networks, SaaS security, and vendor risk. Deliver a current-state assessment and multi-year roadmap, improve monitoring and incident response, establish AI governance and access controls, hire and develop a corporate security team, and represent security in audits, investor/customer diligence, and executive reporting.

Lead and grow a distributed product security engineering team, own secure SDLC and Security Foundations, embed security into CI/CD, conduct threat modeling and automated testing (SAST/DAST/SCA/fuzzing), and manage the FedRAMP security program while partnering across engineering, DevOps, and product.

Lead and develop a Security Consultants team to triage, validate, and resolve security submissions. Provide technical subject-matter guidance, manage escalations, drive operational excellence through metrics and automation, partner cross-functionally, and improve processes to deliver high-quality customer outcomes.

Lead architecture and implementation of endpoint security, automation, and orchestration across PC, mobile, cloud, and BYOD environments. Design reusable, service-oriented infrastructure, partner with product teams to prioritize automation, evaluate emerging technologies, and ensure scalability, availability, and performance aligned to product roadmaps.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.