Top Senior Cyber Security Jobs in Detroit, MI

Lead the creation and growth of a new OT/IoT cybersecurity practice, owning its P&L, offerings, pricing, partnerships, hiring, delivery quality, and go-to-market strategy. Serve as a senior technical SME and trusted advisor for client assessments, regulatory compliance, executive workshops, roadmaps, and security engagements. Shape and close consulting opportunities, develop methodologies and deliverables, manage teams, and advise organizations on ICS/SCADA, segmentation, monitoring, IT/OT convergence, and AI-related risks.

Leads Security Operations Center activities, including incident response, complex threat investigations, detection engineering, SIEM development, security tooling, log pipeline management, vulnerability remediation, risk analysis, automation, and operational reporting. Serves as the senior escalation point and incident coordinator, leading containment and eradication while collaborating with technical and business stakeholders. The role is fully remote within approved states and may require extended or non-business hours during crises.

Leads governance, risk, and compliance engagements for clients, including vCISO accounts. Develops security roadmaps, conducts maturity and risk assessments, governs incident response and policies, supports audit readiness, advises on budgets, delivers executive communications, and mentors security advisory staff.

Lead customer-facing application security engagements, including architecture reviews, threat modeling, secure code reviews, penetration testing, and cloud security assessments. Translate technical risks into actionable remediation guidance, communicate findings to technical and executive stakeholders, develop assessment methodologies and automation, define secure development standards, research emerging threats, and mentor consultants while helping build Salesforce’s Professional Services Security Assurance practice.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Leads regulatory and security compliance for evaluating agentic AI vendors within a CMS Fraud Prevention Services authorization boundary. Assesses vendor security postures, authors control inheritance, boundary, data-flow, SSP, POA&M, PIA/SORN, and compliance artifacts, and coordinates with CMS security stakeholders. Advises on AI-specific risks involving data retention, prompt logging, PHI, tool authorization, and RBAC. Requires extensive federal compliance experience, AWS security knowledge, HIPAA/FISMA expertise, and the ability to obtain Public Trust clearance.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Leads ISSO and risk and compliance teams overseeing FedRAMP, NIST RMF, FISMA, HIPAA, and accreditation activities. Conducts security control and vulnerability assessments, develops ATO and compliance documentation, manages continuous monitoring and remediation, advises authorization officials, and coordinates audits, penetration testing, and assessments. Provides technical leadership, trains security personnel, maintains risk registers and policies, and supports federal healthcare cybersecurity programs.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Assess cloud, network, infrastructure, and application designs against security and compliance requirements. Translate requirements into technical specifications, security blueprints, and engineering guardrails. Support compliance programs, control assessments, and audits, investigate security risks, define remediation, and improve security-control adoption through AI and automation.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Leads enterprise security architecture by assessing threats, performing application security assessments and threat modeling, reviewing designs, and integrating controls into SDLC and DevSecOps environments. Advises business and engineering stakeholders on secure solutions, remediates vulnerabilities, protects APIs, web applications, and cloud workloads, and improves security processes through automation and standardization.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.

Builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform automation, security remediation, audit evidence, and compliance support for HIPAA, HITRUST, SOC 2, and FedRAMP.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Lead GM's Software Supply Chain Security function: translate strategy into execution, build and coach a high-performing team, own KPIs, and embed secure-by-design controls across source control, build pipelines, containers, SBOM, third-party software, and developer tooling while partnering with engineering, platform, cloud, procurement, and risk.