Top Senior Cyber Security Jobs in Birmingham, AL

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Leads the enterprise Red Team program, managing offensive security professionals and directing adversary emulation, Purple Team engagements, assumed-breach exercises, and AI security testing. Partners with cybersecurity, technology, legal, risk, and detection teams to improve controls, response, and resilience. Establishes operating standards, tools, metrics, and guardrails; translates findings into risk mitigation recommendations; supports compliance activities; and communicates outcomes to technical stakeholders and executives.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Lead and manage the information security and risk management function, overseeing staff, policies, projects, budgets, and security technology. Drive compliance with corporate and regulatory standards, deliver training and awareness, coordinate audits, and collaborate with stakeholders to implement security strategies and continuous process improvements.

Designs, implements, tests, and maintains enterprise IAM/SSO solutions. Troubleshoots authentication/authorization issues, integrates federation protocols (SAML/OAuth/SCIM), applies patches, trains stakeholders, and advises on IAM best practices and compliance.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Designs and implements secure, fully automated CI/CD pipelines and identity controls for cloud deployments. Builds infrastructure-as-code (Ansible, Terraform, Packer), integrates identity and auth (AWS IAM, Azure/Entra ID, SailPoint, OAuth/OIDC/SAML/SCIM), and automates guardrails for non-human identities and agent workloads. Partners with architecture, InfoSec, and engineering to ensure compliance, observability, and scalable, secure deployments.

Design, build, and operate secure cloud CI/CD pipelines and automation (infrastructure as code) to support cloud deployments. Partner with InfoSec, architecture, and engineering to enforce identity and non-human identity governance, implement IAM integrations, secrets management, and automated guardrails. Troubleshoot production pipeline issues, develop tools to reduce errors, and research technologies to improve DevSecOps effectiveness.

Design, build, and operate secure cloud CI/CD pipelines and automation (Ansible, Terraform, Packer). Lead identity governance for AI/non-human identities in SailPoint, automate access reviews/certifications, collaborate with InfoSec and platform teams to enforce controls, troubleshoot production issues, and drive centralized agent identity governance across cloud environments.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.