Top Senior Cyber Security Jobs in Des Moines, IA

Leads application security engineering by designing scalable AppSec processes, integrating security tools into CI/CD pipelines, tuning vulnerability detection, and recommending risk mitigations. Provides technical leadership for SAST, DAST, SCA, secrets detection, IaC, SSDLC, and AI-assisted development security. Partners with cybersecurity leadership and control management, supports governance, reporting, audits, regulatory reviews, and third-party assessments while maintaining enterprise compliance and resiliency.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Build and lead Motive’s globally distributed SOC, owning detection engineering, 24/7 incident response, threat hunting, intelligence, security analytics, endpoint protection, cloud and workload monitoring, and AI-driven automation. Establish operating models, coverage strategies, runbooks, telemetry platforms, incident command processes, and measurable detection and response capabilities across corporate and production environments.

The Senior Security Engineer will secure networks, systems, applications, databases, and cloud infrastructure; embed security controls into build pipelines; manage vulnerabilities and remediation; respond to incidents through on-call rotation; and promote security awareness across engineering. The role requires cloud security, infrastructure-as-code, application security, REST API protection, IAM, and tools including AWS, Kubernetes, Terraform, Wiz, Exaforce, and CrowdStrike.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Leads and mentors a product security engineering team while remaining hands-on. Owns certification, accreditation, DISA STIG hardening, SOC 2, ISO 27001, audit readiness, vulnerability remediation, security tooling, and authorization initiatives. Coordinates with Compliance, Legal, Sales Engineering, and customers; tracks remediation SLAs and certification posture; establishes evidence collection processes; and translates technical security strategy into an executable roadmap.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Partners with Sales on enterprise cybersecurity opportunities by leading technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation. Advises security, identity, infrastructure, IT, risk, and executive stakeholders; explains integrations with network environments; creates technical documentation; delivers training; and supports events. The role requires strong cybersecurity, IAM, enterprise networking, presentation, and complex sales-cycle expertise, with travel typically ranging from 25% to 50%.

Manage identity and access lifecycles, security technologies, vulnerability remediation, access reviews, monitoring, incident investigations, risk assessments, audits, policies, and business continuity. The role partners with infrastructure and application teams, supports acquisitions and community transitions, educates stakeholders on cybersecurity, and recommends improvements to protect organizational and resident information.

Manage enterprise identity and access lifecycles, security technologies, vulnerability remediation, access reviews, monitoring, incident investigations, risk assessments, and security audits. Develop security policies and documentation, support business continuity and acquisition integrations, educate stakeholders on cybersecurity practices, and research emerging threats. The role requires collaboration with infrastructure and application teams to protect corporate, clinical, resident, and organizational information.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Administer identity and access management, security platforms, vulnerability remediation, access reviews, threat monitoring, incident investigations, risk assessments, audits, security policies, and business continuity activities. The role partners with infrastructure and application teams, supports acquisitions and integrations, educates stakeholders on cybersecurity, and protects corporate, clinical, resident, and organizational information.