Top Senior Cyber Security Jobs in Birmingham, AL

Leads enterprise Identity, Credential, and Access Management architecture and application security integration for Defense Logistics Agency mission systems. Defines identity, authentication, authorization, access governance, provisioning, and integration requirements; designs secure architecture patterns; supports application onboarding and modernization; and guides RBAC, privileged access management, and segregation of duties implementations. Provides technical leadership and communicates recommendations to government stakeholders, application owners, engineers, developers, and cybersecurity teams.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Monitors SIEM dashboards, correlates logs across security and cloud sources, investigates alerts, assesses threats, performs preliminary incident triage, tunes detection rules, documents findings, and escalates high-risk events. The analyst supports continuous monitoring, SOC playbooks, detection use cases, reporting, and coordination with incident response and engineering teams in a DoD-aligned environment.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Supports AWS GovCloud IL5 cybersecurity compliance and security operations. Performs RMF impact analysis, maintains SSPs, POA&Ms, SARs, and control evidence, validates STIGs and cloud configurations, monitors vulnerabilities and logs, supports IL5 migrations, audits, ATO activities, and continuity planning, and documents remediation and compliance findings.

The Senior IT Security Engineer strengthens cybersecurity across architecture reviews, AI and emerging technology assessments, IAM governance, vulnerability management, third-party risk, security assurance, incident response, phishing simulations, automation, and regulatory compliance. The role validates security controls, supports remediation, develops risk metrics and reporting, oversees identity platforms, and partners with technology, business, audit, compliance, procurement, and vendors in a regulated banking environment.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Monitors and triages security alerts, investigates and documents incidents, supports identity and access management, vulnerability remediation, security awareness, phishing simulations, incident response, and security control checks. Collaborates with IT teams and an MSSP to resolve security issues, tune security tools, maintain documentation, and escalate threats. Requires availability for identity and access management, incident response, and escalation outside standard business hours.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Lead product security architecture and offensive testing initiatives. Responsibilities include threat modeling, architecture and design reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, defining secure architecture patterns, reviewing code and trust boundaries, and providing actionable remediation guidance. The role partners with engineering teams, validates fixes, tracks emerging attack techniques, and communicates security risks to technical and non-technical stakeholders.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Designs and develops advanced anti-cheat and game security systems for Call of Duty. Responsibilities include strengthening protection frameworks, creating cheat detection mechanisms, optimizing and debugging complex C++ systems, analyzing compiled code, and collaborating across studios. The role requires expertise in large-scale software development, algorithms, data structures, CI/CD, automation, performance tuning, and low-level systems, with preferred experience in game engines, reverse engineering, DevOps, cryptography, and anti-cheat technology.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead product strategy and roadmap for anti-cheat and game security across Call of Duty titles. Define detection, prevention, and enforcement capabilities, partner with engineering, data science, threat intel, and ops, use telemetry and experimentation to improve systems, and drive incident response and cross-functional alignment.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.