Top Cyber Security Jobs in Dayton, OH

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Represent security compliance with customers, map frameworks to Zscaler capabilities, create reusable playbooks, educate sales teams, and complete security questionnaires and assessments. Translate technical security and data-protection concepts into business and sales messaging while supporting frameworks including NIST, ISO 27001, DORA, GDPR, PCI, and HIPAA. The role requires customer-facing credibility, compliance expertise, security architecture knowledge, and the ability to leverage AI-driven workflows.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, DCID, ICD, and SAP policies; develops security procedures and training; assesses vulnerabilities and risks; oversees facility compliance reviews and corrective actions; briefs personnel; and investigates classified-information losses or compromises. Requires SAP experience, current TS/SCI clearance, and ability to obtain TS/SCI with CI polygraph.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM and SAP policies, developing security procedures, identifying risks and vulnerabilities, conducting facility compliance reviews, tracking corrective actions, investigating classified information compromises, overseeing subordinate facilities, briefing personnel, and supporting security training and awareness programs.

Maintains the operational security posture of classified information systems supporting DoD Special Access Programs. Responsibilities include authorization package management, security compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident and recovery oversight, security documentation, and coordination with ISSMs and Authorizing Officials. The role requires day-to-day support for Collateral, SCI, and SAP environments, including current TS/SCI clearance and eligibility for TS/SCI with CI polygraph.

Provides multidisciplinary security support for Special Access Programs, SCI, and collateral activities. Ensures compliance with NISPOM, DoD, intelligence community, and SAP policies; develops procedures and training; assesses vulnerabilities and risks; conducts facility compliance reviews; tracks corrective actions; supports incident inquiries and damage assessments; and briefs government and contractor personnel on security matters.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead macOS security research, including Endpoint Security API telemetry, malware reverse engineering, attack emulation, EDR bypass research, and proof-of-concept development. Collaborate with Detection Engineering, Product, and Engineering to operationalize findings, track Apple platform changes, improve detection coverage, document risks, and mentor teammates. The role also involves building ephemeral research infrastructure and representing the company through technical publications, speaking, and media engagement.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Supports cybersecurity governance and compliance for a DoD DevSecOps environment hosted on Azure. Manages Assessment and Authorization activities, maintains ATO compliance, and develops security policies and artifacts in eMASS. Conducts risk assessments, vulnerability testing, audits, remediation coordination, and continuous monitoring aligned with RMF, NIST, CMMC, Zero Trust, and DoD Cloud SRG requirements. Serves as a liaison among government stakeholders, auditors, authorizing officials, and engineering teams while delivering security briefings and awareness training.

Leads Risk Management Framework and authorization activities for Air Force Financial Management systems. Provides cybersecurity policy guidance, manages eMASS and ITIPS artifacts, conducts vulnerability and risk assessments, oversees POA&M remediation, supports security control assessments, prepares A&A decision packages, and briefs senior leadership. Coordinates continuous monitoring, configuration and patch compliance, incident analysis, system inventories, cybersecurity policies, and enterprise governance reporting.

Supports the DoD Risk Management Framework lifecycle for assigned Air Force financial management systems. Maintains SSPs, RARs, POA&Ms, control evidence, and other authorization artifacts in eMASS and ITIPS. Performs vulnerability and risk analysis, coordinates remediation, tracks compliance and authorization status, supports security-control assessments and ATO decision packages, and prepares audit-ready cybersecurity documentation, reports, policies, and leadership briefings.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Secure Windows products and devices through security design and code reviews, penetration testing, vulnerability research, fuzzing, and mitigation development. Build reusable security-review tools, identify vulnerabilities in operating-system features and native applications, investigate attack vectors, and collaborate with Windows engineering teams to implement scalable defenses. The role also involves engaging with external security researchers and communicating the business value of security investments.