Top Cyber Security Jobs in Des Moines, IA

Manage identity and access lifecycle, administer security technologies (Entra, Okta, endpoint/email protection), monitor alerts, perform risk assessments, support incident investigations, audits, policy development, and security hardening across corporate and community systems.

Lead enterprise information security strategy and governance for a multi-site senior living organization. Oversee cybersecurity operations, risk management, compliance (including HIPAA and SOC), vendor security, incident response, privacy protections, cloud and infrastructure security, and security architecture. Build and lead a security team, manage budgets, drive security awareness, and advise executive leadership to enable secure business growth.

Administer user credentials and maintain RACF, network, User-ID and user groups. Apply IT security policies, troubleshoot low-to-medium security issues, support SAP security and participate on teams and process-improvement projects. Make routine decisions for exceptions and contribute to projects related to existing tools and processes.

Manage and maintain application, network, and data security; administer user credentials and SAP security (roles, objects, user profiles); operate RACF and related security tools; resolve low-to-medium security incidents; follow and refine security processes; consult with business owners and participate on cross-functional teams.

Provide technical and operational support for MDR customers: investigate and validate alerts, perform log and endpoint analysis, assist containment and recovery, administer Sophos MDR platform, support compliance and cyber hygiene reviews, and coordinate with TAMs, DFIR and Sophos teams to improve service and security posture.

Perform security impact assessments, provide cybersecurity recommendations aligned with DoD and USCG requirements, participate in security-focused working groups, and guide developers in securely integrating applications with existing on-premises and cloud infrastructure. The role requires secure architecture experience, architectural diagramming, security tool integration, strong communication skills, and collaboration with government and contractor teams on rapid prototypes.

Lead delivery and growth of large cybersecurity engagements: define scope, lead teams, shape strategy, implement security frameworks, support sales and thought leadership, and mentor junior staff. Drive client relationships and manage program delivery and outcomes.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Lead research and deliver strategic and tactical advice on AI data security and AI ecosystem data management. Produce written research, briefings, and presentations; advise clients and stakeholders; grow networks of thought leaders and vendors; ensure research integrity and collaborate across Gartner to support deliverables. Travel up to 25%.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.

Act as primary technical advisor in enterprise SLED sales cycles: run technical discovery, lead architecture-level conversations, deliver demos, own Proof of Value outcomes, and drive customer satisfaction for email and identity-focused security solutions.

Design, deploy, and manage security, networking, and cloud solutions for clients. Configure and operate security tooling, support incident response, develop SIEM detection, handle network administration, mentor junior engineers, and lead small-to-medium projects while ensuring continued operational performance and compliance.

Support and secure Solventum’s Core Speech products through security patching, application coding, production deployments, maintenance, monitoring, alerting, capacity planning, and reliability improvements. Participate in an off-hours support rotation, respond to production alerts, and collaborate on projects improving system performance and architecture. The role is remote within the United States with occasional travel to Pittsburgh, Pennsylvania.

Manage and perform red and purple team engagements, external/internal penetration tests, wireless/web/mobile/embedded assessments, ransomware readiness and social engineering. Develop tools, incorporate threat intelligence, present findings to technical and executive audiences, and mentor and expand offensive security capabilities. Occasional travel (~10%).

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Leads security operations and engineering strategy, manages a 2–3-person team, and remains hands-on with WAF, DLP, AI security, automation, vulnerability management, incident response, cloud security, purple teaming, SIEM, and detection engineering. Partners with executives and cross-functional leaders, oversees vendors and tooling, reports risk metrics, and develops team capabilities and security roadmaps.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

Lead and run engagement systems for Microsoft Security field communities: design community strategy, communications, events, and feedback loops; collaborate with cross-functional teams to drive adoption of Security priorities; measure community health and impact; support planning, readiness, and change management for security field managers and individual contributors.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.