Top Cyber Security Jobs in Detroit, MI

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

Leads threat actor communications and ransomware negotiations, advising clients, legal counsel, and insurers during digital extortion incidents. Conducts threat intelligence collection and analysis, supports digital forensics and incident response investigations, develops persona operations, and produces technical and executive-facing deliverables. The role also improves intelligence workflows through automation, scripting, and tool integration, contributes to cybercrime research, and participates in an emergency on-call rotation.

Conduct original research into active campaigns, attacker behavior, and email and identity attacks. Synthesize technical findings from diverse sources into threat briefs, analytical reports, customer briefings, webinars, and executive summaries. Present intelligence to customers and prospects, collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing teams, mentor analysts, and use AI tools and automation to improve research and content workflows.

Own the strategy, roadmap, and commercial success of an AI SOC platform supporting MDR, MXDR, managed network security, and managed cloud security. Drive AI-assisted triage, automation, integrations, APIs, multi-tenancy, partner enablement, and MSSP-scale service packaging. Define network and cloud security capabilities, governance requirements, competitive positioning, pricing, and business cases while presenting to customers, partners, sales teams, and executives. Measure automation, workload reduction, cost-to-serve, adoption, retention, and partner revenue.

Monitors and investigates security alerts, threats, vulnerabilities, cloud misconfigurations, endpoint activity, and incidents. Supports incident response, CrowdStrike Falcon and Wiz administration, vulnerability remediation, access reviews, compliance activities, risk assessments, and security awareness initiatives. Collaborates with IT, cloud, infrastructure, application, and business teams to improve enterprise security posture and validate remediation efforts.

The Information Systems Security Engineer will secure a USPS information system modernization project by implementing federal security controls, conducting vulnerability assessments and penetration testing, integrating security into CI/CD pipelines, maintaining SSP, RMP, and POA&M documentation, monitoring cloud security tools, supporting incident response, and delivering security training. The role requires collaboration with development, operations, and federal security stakeholders while ensuring compliance with FISMA, NIST RMF, and FedRAMP standards.

Administers mainframe security access, including datasets, user IDs, CICS applications, resources, and certificates. Performs security reporting, access recertification, violation monitoring, audits, and compliance reviews. Maintains security plans, SOPs, test plans, and documentation while supporting investigations, migrations, and system implementations. Advises technical teams on security requirements and remediation. Uses RACF, ACF2, Vanguard, JCL, TSO, DB2, and related mainframe tools to maintain secure, compliant information systems.

Leads the design, implementation, and evolution of enterprise security capabilities across federal cloud and hybrid environments. The role engineers Zero Trust architectures, FedRAMP High controls, identity and access management, encryption, logging, vulnerability management, monitoring, and incident response. Responsibilities include supporting ATO authorization, continuous monitoring, risk remediation, security assessments, and secure adoption of AI-enabled technologies. The position requires collaboration with cloud, infrastructure, DevSecOps, compliance, and operations teams.

Designs and governs enterprise security architectures across applications, infrastructure, networks, endpoints, cloud environments, and sensitive data. Translates mission, business, regulatory, and federal requirements into secure designs; conducts architecture reviews and threat modeling; defines security standards and controls; guides DevSecOps, cloud, infrastructure, and application teams; and supports security technology selection and integration. The role requires extensive enterprise or federal security architecture experience, relevant certifications, U.S. citizenship, and the ability to obtain Public Trust clearance.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Evaluate on-premises, cloud, hybrid, network, endpoint, application, identity, and infrastructure security. Identify risks and gaps, create reports, present recommendations, and support incident response and post-incident improvements. Collaborate with engagement managers and technical teams while communicating with English- and Spanish-speaking stakeholders. Travel approximately 20% for client engagements.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Design and execute AI security evaluations focused on ethical jailbreaks, LLM red teaming, prompt injection, and tool-use abuse. Develop adversarial elicitation strategies, regression test suites, and evaluation frameworks to identify vulnerabilities in AI models. Collaborate with technical stakeholders to translate findings into safety improvements, and document methodologies and results for technical and non-technical audiences.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads cybersecurity solution sales for enterprise and small-to-medium business customers. Builds security transformation strategies, identifies and qualifies opportunities, develops pipelines, conducts consultative conversations, and drives complex cloud solution deals through closure. Partners with internal teams and channel partners on proposals, account planning, forecasting, competitive strategy, events, and customer outcomes. Serves as a cybersecurity subject matter expert, mentors colleagues, and supports customer adoption of AI, cloud, and security solutions.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and on-site work with occasional travel.

Build and maintain hardened, minimal container images across Linux distributions and application runtimes. Remediate CVEs, troubleshoot package and dependency issues, reduce attack surfaces, and develop automation for image building, scanning, testing, versioning, SBOM generation, and publishing. Validate compatibility with Kubernetes and containerized environments, collaborate with infrastructure and security teams, establish hardening standards, and document curated-image usage.