Top Cyber Security Jobs in Des Moines, IA

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Operate Azure security services, monitor cloud threats, investigate and respond to incidents, manage vulnerabilities, and support secure Azure deployments. The role requires hands-on experience with Microsoft Sentinel, Defender for Cloud, Entra ID, Azure Key Vault, KQL, SIEM workflows, incident response, and vulnerability management.

Automate security evidence generation and RMF control mapping to enable continuous authorization for U.S. Air Force systems. The role conducts audits and risk analyses, implements remediations, translates compliance requirements into engineering practices, documents inherited and implemented controls, and coaches government teams. It partners with security reviewers, authorizing officials, engineers, and contractors to embed security throughout the software delivery lifecycle.

Provides consultative pre-sales cybersecurity engineering for email security solutions. Leads customer discovery, assesses security architectures, designs solution proposals, delivers demonstrations and technical presentations, supports proofs of concept, collaborates with vendors, enables sales teams, and transitions closed opportunities to delivery teams. Focus areas include secure email gateways, phishing and BEC protection, API-based security, DLP, advanced threat protection, and hybrid cloud environments.

Leads the information security program across healthcare platforms, managing security teams, controls, vulnerabilities, cloud and data protection, monitoring, incident response, governance, risk, and compliance. Partners with Engineering, Infrastructure, DevOps, Compliance, and business leaders to reduce risk, improve incident readiness, support HIPAA, HITRUST, and SOC 2 requirements, and secure AI tools and third-party integrations.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Conduct original research into active campaigns, attacker behavior, and email and identity attacks. Synthesize technical findings from diverse sources into threat briefs, analytical reports, customer briefings, webinars, and executive summaries. Present intelligence to customers and prospects, collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing teams, mentor analysts, and use AI tools and automation to improve research and content workflows.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Lead security operations and incident response engineering across hybrid cloud environments. Conduct deep-dive investigations, digital forensics, threat modeling, detection engineering, SIEM tuning, threat intelligence review, and automated remediation. Develop incident response playbooks, maintain investigation documentation, apply MITRE ATT&CK, and support incident command and SOC process optimization.

Leads Tier-3 security monitoring, threat hunting, incident response, and SLA delivery across multi-tenant environments. Serves as incident commander while engineering detections, SOAR playbooks, integrations, and AI-assisted automation using Python, APIs, LLMs, and cloud security data. Advises clients, reduces alert noise, and aligns operations with NIST, ISO 27001, privacy, and regulatory requirements.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Lead identity and access management implementations for federal and enterprise customers. Responsibilities include IAM solution design, architecture, deployment, integration, testing, troubleshooting, documentation, customer workshops, and knowledge transfer. The consultant provides technical leadership, advises stakeholders on authentication and identity governance, collaborates across project teams, and mentors junior consultants. The role requires extensive IAM consulting experience, strong security technology knowledge, active Top Secret clearance with full-scope polygraph, and customer-facing technical leadership.

Designs, deploys, and optimizes enterprise network security solutions for clients. Leads firewall, SD-WAN, segmentation, secure access, identity, and SASE implementations; resolves critical incidents; performs security assessments; advises technical and executive stakeholders; collaborates across cloud and infrastructure teams; and mentors junior engineers.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Leads cybersecurity competitive strategy and execution, including deal coaching, competitive positioning, win/loss analysis, compete playbooks, field enablement, and cross-functional recommendations for sales, product, engineering, marketing, and partner teams. The role focuses on Google Security, Mandiant, Wiz, and Microsoft Security competitive scenarios, translating market and customer insights into scalable go-to-market motions and product strategy.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Directs security operations for a complex Department of State contract. Manages security teams, develops and implements compliance procedures, investigates violations, prepares incident reports, mitigates risks, coordinates with government agencies, and ensures adherence to federal regulations and company policies. Requires strong leadership, communication, organizational, reporting, and strategic assessment skills, along with a bachelor's degree, extensive federal program management experience, U.S. citizenship, and an active Secret clearance.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

Provides customer-facing presales cybersecurity expertise by leading discovery, assessing cloud and hybrid security architectures, designing CNAPP-based solutions, delivering demonstrations and technical presentations, supporting proofs of concept, enabling sales teams, collaborating with vendors, and assisting with statements of work and post-sale handoffs.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.