Top Senior Cyber Security Jobs in Huntsville, AL

Leads investigations of critical vulnerabilities, zero-days, KEVs, and security exposures. Correlates technical data, determines scope and impact, coordinates remediation, commands incidents, escalates potential compromises, and maintains operational continuity across coverage periods. The role also mentors analysts and collaborates with SOC, incident response, technology, and security teams to reduce enterprise risk.

Leads security compliance assessments and audit readiness across cloud infrastructure and delivery services. Translates regulatory standards into technical guidance, evaluates architectures and controls, conducts risk assessments, directs remediation, and develops compliance playbooks and automated monitoring workflows. The role also mentors team members, coordinates audit evidence collection, and represents the organization during external certification assessments and audits.

Embeds security across the software development lifecycle by leading threat modeling, security design reviews, application security assessments, red-team exercises, and secure architecture guidance. The role drives adoption of SAST, DAST, and SCA tooling, strengthens CI/CD and cloud security, supports fintech regulatory compliance, and advises engineering and product leadership on prioritized security risks.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Responsibilities include Kubernetes runtime isolation, identity and credential security, service mesh trust, Terraform infrastructure, fleet scaling, CI/CD, observability, auditability, human approval workflows, and governed agent integrations. The role also sets technical direction, mentors engineers, and partners across Product, Security, and Leadership to deliver secure, reliable distributed systems at scale.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Own strategy and roadmap for KeeperPAM across privileged access, secrets management, secure remote access, endpoint privilege, discovery, and machine identity. Translate customer and technical needs into requirements, prioritize cross-product initiatives, partner with Engineering on integrations and architecture, conduct market analysis, define success metrics, and support go-to-market execution. The role requires strong PAM or related cybersecurity expertise, technical fluency in APIs and cloud-native DevOps environments, and effective collaboration with customers and cross-functional teams.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Lead security across Zeely’s AWS infrastructure, products, CI/CD pipelines, and compliance programs. Responsibilities include cloud hardening, IAM, vulnerability remediation, incident response, security monitoring, architecture and code reviews, and implementing SAST, DAST, SCA, and secrets scanning. The role owns SOC 2, ISO 27001, and CASA compliance, leads the security roadmap, establishes policies, guides DevOps and Platform teams, and supports enterprise customer security reviews.

Designs vulnerable and secure application fixtures addressing OWASP LLM risks, creates deterministic tests and security manifests, develops answer keys for AI and scanner evaluation, and improves AppSec assessment pipelines. The role also evaluates traditional and agent-based security architectures, documents technical findings, and collaborates on peer reviews and actionable security recommendations.

Supports classified information systems by maintaining security plans, implementing and assessing controls, conducting audits, preparing systems for DCSA accreditation, delivering security training, investigating violations, and supporting classified material protection. The role requires expertise in NISPOM, DCSA assessment processes, RMF, DISA STIGs, Windows and Linux systems, SIEM tools, and DoD cybersecurity certifications. A current clearance, ability to obtain Secret clearance, and approximately 10% travel are required.

Automate security evidence generation and RMF control mapping to enable continuous authorization for U.S. Air Force systems. The role conducts audits and risk analyses, implements remediations, translates compliance requirements into engineering practices, documents inherited and implemented controls, and coaches government teams. It partners with security reviewers, authorizing officials, engineers, and contractors to embed security throughout the software delivery lifecycle.

Leads the information security program across healthcare platforms, managing security teams, controls, vulnerabilities, cloud and data protection, monitoring, incident response, governance, risk, and compliance. Partners with Engineering, Infrastructure, DevOps, Compliance, and business leaders to reduce risk, improve incident readiness, support HIPAA, HITRUST, and SOC 2 requirements, and secure AI tools and third-party integrations.