Top Cyber Security Jobs in Detroit, MI

Design, implement, and maintain Oracle HCM Cloud security including RBAC, data roles, SoD, audits, and access reviews. Manage provisioning, troubleshoot access issues, support upgrades/patches, document policies, train stakeholders, and monitor audit trails to ensure compliance with SOX, GDPR and internal controls.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Design, build, and evolve product security validation platforms, pipelines, and test frameworks. Develop automated test capabilities, scripts, and services to scale security validation. Implement AI-driven robustness and fuzz testing, create reusable security test cases, and integrate tests with CI/CD and product workflows to improve coverage, reliability, and efficiency.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Lead application security strategy and enable secure software development across the SDLC. Perform threat modeling and code reviews, design secure architecture and controls, integrate automated DevSecOps guardrails, mentor teams, and align security with compliance and business goals.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Designs and leads security architectures for AI/ML, IoT, medical devices, cloud, edge, and other emerging technologies. Establishes security standards, controls, and frameworks aligned with healthcare regulations and best practices. Collaborates with IT, enterprise architecture, cloud security, medical device security, SOC, and IPSO teams. Requires hands-on security architecture experience, expertise in SABSA, TOGAF, Zero Trust, NIST, network and cloud security, and at least one relevant architecture or security certification.

Leads the AI and cloud security program for a healthcare institution, overseeing security architecture, operations, AI model protection, training data security, inference monitoring, compliance, and secure AI development. Manages technical security professionals, establishes security frameworks, aligns controls with business objectives, and collaborates with SOC, risk, privacy, and IT teams to address emerging technology risks.

Designs and operates SAP security and GRC frameworks across enterprise SAP landscapes. Responsibilities include SAP role and authorization design, user provisioning, segregation-of-duties analysis, GRC Access Control and Process Control operations, audit support, remediation, and securing Fiori, BTP, HANA, and cloud applications. Partners with audit, compliance, and business teams to maintain secure and auditable environments.

Designs, implements, and operates security controls across OCI, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include security architecture, cloud workload hardening, IAM, vulnerability and compliance management, incident response, SIEM integration, and security automation. The role also requires collaboration with cross-functional teams, code and design reviews, documentation, troubleshooting, and mentoring junior engineers.

Embed security throughout the software development lifecycle by partnering with engineering teams, designing secure systems, conducting code reviews, identifying vulnerabilities, integrating security tooling, and reducing application risk. The role requires hands-on offensive and defensive security expertise, cloud security knowledge, programming ability, and strong communication skills. Preferred experience includes security certifications, red-team operations, bug bounties, public CVEs, AI/LLM security, and regulated industries.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Leads enterprise AI tooling and security engineering, designing scalable cloud platforms and secure AI applications. Responsibilities include protecting models, agents, prompts, data, APIs, and outputs; securing the AI/ML lifecycle; implementing identity, encryption, monitoring, threat detection, adversarial testing, and incident response; and establishing engineering standards. The role mentors engineers, influences architecture and technology strategy, and partners with governance, risk, compliance, and business teams to support responsible AI adoption.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.