Top Senior Cyber Security Jobs in Des Moines, IA

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Partners with Sales on enterprise cybersecurity opportunities by leading technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation. Advises security, identity, infrastructure, IT, risk, and executive stakeholders; explains integrations with network environments; creates technical documentation; delivers training; and supports events. The role requires strong cybersecurity, IAM, enterprise networking, presentation, and complex sales-cycle expertise, with travel typically ranging from 25% to 50%.

Manage identity and access lifecycles, security technologies, vulnerability remediation, access reviews, monitoring, incident investigations, risk assessments, audits, policies, and business continuity. The role partners with infrastructure and application teams, supports acquisitions and community transitions, educates stakeholders on cybersecurity, and recommends improvements to protect organizational and resident information.

Manage enterprise identity and access lifecycles, security technologies, vulnerability remediation, access reviews, monitoring, incident investigations, risk assessments, and security audits. Develop security policies and documentation, support business continuity and acquisition integrations, educate stakeholders on cybersecurity practices, and research emerging threats. The role requires collaboration with infrastructure and application teams to protect corporate, clinical, resident, and organizational information.

Administer identity and access management, security platforms, vulnerability remediation, access reviews, threat monitoring, incident investigations, risk assessments, audits, security policies, and business continuity activities. The role partners with infrastructure and application teams, supports acquisitions and integrations, educates stakeholders on cybersecurity, and protects corporate, clinical, resident, and organizational information.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.

Builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform automation, security remediation, audit evidence, and compliance support for HIPAA, HITRUST, SOC 2, and FedRAMP.

Manage identity and access lifecycles, security technologies, vulnerability remediation, security monitoring, incident investigations, risk assessments, audits, policies, business continuity, and cybersecurity education. The role protects corporate, clinical, resident, and community information while supporting acquisitions and new community integrations.

Manages identity and access lifecycles, security technologies, vulnerability remediation, access reviews, threat monitoring, incident investigations, risk assessments, audits, security policies, business continuity, and cybersecurity awareness. Partners with infrastructure, application, and business teams to protect corporate, clinical, financial, resident, and employee information across the organization.

Manage identity and access lifecycles, security technologies, vulnerability remediation, monitoring, access reviews, incident investigations, risk assessments, audits, policies, and business continuity activities. Partner with infrastructure and application teams to strengthen security controls, protect organizational and resident information, support acquisitions and integrations, and educate stakeholders on cybersecurity risks and best practices.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Manages identity and access lifecycles, security tools, vulnerability remediation, access reviews, security monitoring, incident investigations, risk assessments, audits, and security policies. Partners with infrastructure, application, and business teams to strengthen controls, support acquisitions and continuity planning, protect resident and organizational information, and educate employees on cybersecurity practices.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Leads advanced cybersecurity operations, including incident response, threat hunting, detection engineering, vulnerability management, security architecture, audits, vendor risk, and control development. Advises leadership on risk, mentors security analysts, evaluates security technologies, supports exercises and recovery testing, and translates technical risks for diverse stakeholders.

Engineer and operate SIEM and SOAR platforms supporting SOC and MDR services. Responsibilities include log-source onboarding, parsing, enrichment, detection engineering, playbook automation, alert and dashboard development, end-to-end pipeline troubleshooting, vendor escalations, customer onboarding, ingest-volume management, documentation, and platform incident response. The role serves as the technical escalation point and participates in an after-hours on-call rotation.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.