Top Senior Cyber Security Jobs in Boise, ID

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Lead multiple product security engineering teams to design, implement, and operate security controls across Allstate's technology ecosystem. Architect secure digital products, drive DevSecOps, CI/CD, cloud-native and application security best practices, integrate IAM/SIEM/vulnerability management, influence stakeholders, manage security product roadmaps, mentor engineers, and own production security KPIs and compliance.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead and grow WWT's micro-segmentation practice, driving revenue and client engagements across Illumio, Guardicore, and Cisco Secure Workload. Manage a team of consultants, author SOWs, deliver end-to-end segmentation and zero-trust solutions, oversee project delivery, and advise clients on compliance and optimization. Partner with sales, OEMs, and executives to position offerings and ensure successful outcomes.

Lead IAM consulting engagements: deliver assessments, architecture design, and implementations across IGA, PAM, access management, and cloud identity. Serve as technical SME for pursuits, scope and price engagements, produce client-ready deliverables, facilitate executive workshops, mentor consultants, and grow the IAM practice through reusable assets and thought leadership.

Lead technical IAM delivery tasks: conduct current-state discovery, configure and validate IGA/PAM/Access Management platforms, perform gap analyses against frameworks, produce client deliverables (assessments, diagrams, maturity scores), facilitate workshops, and support pre-sales and practice development while growing toward workstream ownership.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.

Own protocol and cryptographic foundations for Netflix Open Connect edge appliances. Design and implement security primitives, optimize crypto/transport for performance, build DoS mitigations, conduct vulnerability research, and partner cross-functionally to deploy end-to-end security controls across delivery infrastructure.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform end-to-end blockchain security services including consulting, manual code reviews and audits of smart contracts and protocols (Solidity, Go, Rust), threat modeling, property-based and gas-related testing, penetration testing, and deliver detailed security assessments to clients.