Top Cyber Security Jobs in Des Moines, IA

Lead product strategy and execution for security, compliance, and public-sector capabilities in MongoDB Atlas for Government. Translate FedRAMP/DoD/NIST requirements into roadmaps, drive multi-team programs, align senior stakeholders, enable audit readiness, and support market expansion and GTM for regulated industries.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

This intern role in Federal Security Operations focuses on cybersecurity, project tracking, and maintaining relationships with customer stakeholders in a mission-driven environment.

Triage, investigate, and remediate security alerts from the Huntress platform. Perform forensic review of EDR telemetry, malware analysis, and cloud/M365 investigations. Escalate incidents, contribute to detection engineering, and support SOC operations and partner outcomes.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Leads advanced cybersecurity operations, including complex incident response, threat hunting, SIEM and EDR detection engineering, vulnerability management, security architecture input, audits, security controls, vendor risk assessments, and incident preparedness. Mentors junior analysts, advises stakeholders on risk, evaluates security technologies, and translates technical threats into business language.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Sell cybersecurity products and services to Fortune 1000 customers across Missouri, Kansas, Iowa, and Nebraska. Build executive and OEM relationships, develop security sales strategies, generate profitable revenue, and align solutions with customer business objectives. The role requires expert cybersecurity knowledge across areas such as cloud security, compliance, governance, threat management, and vulnerability management, along with experience leading initiatives, creating enablement materials, and holding a CISSP, CISM, CRISC, or comparable credential.

Designs, engineers, administers, and supports enterprise Exchange environments across Microsoft 365, hybrid, and on-premises systems. Owns mail flow, SMTP, transport, migration, identity integration, and messaging architecture. Administers Proofpoint, EOP, DMARC, SPF, DKIM, anti-phishing, and anti-spoofing controls. Leads incident response, root-cause analysis, security investigations, change and release management, vendor coordination, documentation, and collaboration with security operations and infrastructure teams.

Lead the Application Security Practice, overseeing team performance and business growth while delivering high-quality security consulting services and fostering innovation through AI integration and research contributions.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Monitor and investigate security events, perform incident response and threat hunting, manage vulnerabilities, develop detection use cases and dashboards, conduct security reviews and vendor assessments, support security controls implementation, contribute to governance/compliance, and lead awareness and reporting efforts.

Support and operate security infrastructure across hybrid cloud and datacenter environments. Configure and maintain security tools (e.g., Defender, IDS, firewalls), respond to incidents and tickets, validate and remediate CVEs, participate in disaster recovery and on-call rotations, lead security implementations, and provide security training and documentation.

Manage identity and access lifecycle, administer security technologies (Entra, Okta, endpoint/email protection), monitor alerts, perform risk assessments, support incident investigations, audits, policy development, and security hardening across corporate and community systems.