Top Cyber Security Jobs in Des Moines, IA

Lead IAM operations by defining strategy, governance, controls, and automation. Oversee identity governance, RBAC, PAM, privileged and non-human accounts, lifecycle management, onboarding/offboarding, access reviews, and compliance. Partner with IT, HR, auditors, and stakeholders to improve processes, drive projects, mitigate IAM risks, and deliver measurable security and operational improvements.

Leads complex information security incident response, investigations, digital forensics, security consulting, vulnerability assessment, and remediation. Designs and maintains advanced security solutions across databases, networks, cloud, authentication, applications, and endpoints. Reviews security logs, performs risk assessments, advises internal stakeholders, and leads teams. The role requires database security and administration expertise, scripting, security tools, cloud technologies, standards knowledge, on-call support, and hybrid work.

Leads information security engineering for database technologies, including incident response, digital forensics, security consulting, solution design, log analysis, vulnerability assessment, threat modeling, and remediation. The role requires expertise in database security, scripting, cloud environments, security tools, risk frameworks, and database monitoring or masking. On-call participation and hybrid work are required.

The Security and Compliance Lead ensures data center security through policy development, compliance management, incident response, and staff training while enhancing physical security systems.

Lead secure, highly available HashiCorp Vault platforms across enterprise and multi-cloud environments. Responsibilities include Vault design, deployment, automation, lifecycle management, authentication, authorization, PKI, secret engines, HSM-based auto-unseal, monitoring, troubleshooting, security hardening, documentation, vendor coordination, and engineering support. The role also provides technical guidance to cross-functional teams and participates in rotational on-call support.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.