Top Senior Cyber Security Jobs in Detroit, MI

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.

Lead and scale enterprise WIAM governance: define policy and control standards, centralize governance, drive risk-to-control traceability, prioritize remediation, monitor KPIs and audit readiness, advise senior stakeholders, and mentor staff to strengthen control effectiveness and regulatory compliance.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Leads and mentors a product security engineering team while remaining hands-on. Owns certification, accreditation, DISA STIG hardening, SOC 2, ISO 27001, audit readiness, vulnerability remediation, security tooling, and authorization initiatives. Coordinates with Compliance, Legal, Sales Engineering, and customers; tracks remediation SLAs and certification posture; establishes evidence collection processes; and translates technical security strategy into an executable roadmap.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Lead GM's Software Supply Chain Security function: translate strategy into execution, build and coach a high-performing team, own KPIs, and embed secure-by-design controls across source control, build pipelines, containers, SBOM, third-party software, and developer tooling while partnering with engineering, platform, cloud, procurement, and risk.

Lead GM's Secure Development & Application Security function to embed developer-friendly preventative and detective controls across the software lifecycle. Define roadmap for SAST/DAST, API and AI security, runtime resilience; own metrics and operational performance; partner with engineering, platform, product teams; build talent, scale programs, and drive risk reduction through measurable outcomes.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads cybersecurity consulting across the customer lifecycle, supporting presales demonstrations, proof-of-concepts, executive reviews, cyber skills programs, crisis simulations, and platform adoption. Advises strategic customers on cyber resilience, risk measurement, security initiatives, and program roadmaps. Partners with sales, product, content, and engineering teams while serving as a trusted embedded advisor and escalation point.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.