Top Cyber Security Jobs in Huntsville, AL

Responds to and resolves cybersecurity incidents, prevents recurrence, and applies intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies. Performs complex security operations and intrusion analysis, develops innovative incident response solutions, and mentors technical staff. Requires experience supporting IT or intelligence operations, SOC tools, and incident response practices, along with a Top Secret clearance and a bachelor’s degree timeline.

Respond to and resolve cybersecurity incidents, prevent recurrence, and develop innovative solutions for complex security operations challenges. Apply incident response, SOC, intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies. Analyze security operations data, mentor employees, and support classified cyber operations. The role requires a Top Secret clearance and a bachelor’s degree scheduled for completion by Winter 2026.

Respond to and resolve cybersecurity incidents, prevent recurrence, and develop innovative solutions for complex security operations problems. Apply intelligence-driven defense, Cyber Kill Chain, and MITRE ATT&CK methodologies; use security operations tools and incident response best practices. Mentor or supervise technical staff while supporting SOC, CIRT, cyber network operations, or intelligence operations in classified environments.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Designs and implements cybersecurity architectures, requirements, countermeasures, and vulnerability mitigations for FBI information systems and network environments. The role integrates security with cross-domain solutions, develops secure network designs, ensures confidentiality and integrity, and supports FBI-directed vulnerability remediation. Requires a Top Secret clearance, DoD 8140-compliant cybersecurity certification, familiarity with security assessment tools, and substantial education and experience in cybersecurity or a related discipline.

Manage and secure client Windows Server, cloud, virtualization, Active Directory, and Microsoft 365 environments. Administer tenant hardening, migrations, identity integrations, backups, disaster recovery, patching, and compliance controls. Lead P1/P2 incident response, root-cause remediation, change management, documentation, and infrastructure improvement initiatives. Partner with service desk, engineering, and security teams, advise clients on modernization and security enhancements, maintain operational runbooks, and mentor junior technicians.

Design and scale automation and AI-driven solutions for security governance, risk, and compliance. Build pipelines to collect and validate evidence, integrate GRC platforms with security and IT systems, automate control monitoring and audit preparation, and deploy LLM-based workflows for testing, policy mapping, and risk reporting. Establish AI guardrails and quality controls while collaborating with security, engineering, data, and business teams to improve compliance and security posture.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Leads enterprise security strategy and operations across Microsoft MCAPS-Core. Oversees security programs, governance, risk management, threat intelligence, incident response, compliance, security reviews, performance metrics, budgets, and cross-organizational partnerships. Directs teams and suppliers, develops AI-enabled security capabilities, assesses geopolitical and operational threats, communicates executive-level risk insights, and ensures security controls are adopted without disrupting business or customers.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Translates compliance guidelines into business requirements, technical specifications, and security frameworks. Collaborates with internal teams, assessors, sales, project managers, support, engineering, and customers to understand web-scale systems, meet security obligations, integrate solutions, mitigate risks, and support go-live activities. Provides guidance on security controls, DDoS mitigation, network monitoring, incident escalation, threat detection, and security documentation.

Implement and validate Oracle Cloud Infrastructure security controls for a federal health customer. Responsibilities include securing IAM, networks, encryption, monitoring, Cloud Guard, Security Zones, Security Advisor, threat intelligence, key management, SIEM integrations, and Infrastructure as Code automation. The engineer will collaborate with cloud operations, migration, application, and systems teams while establishing technical security standards for cloud and on-premises environments.

Reviews and investigates security events, phishing reports, malware detections, and brand-monitoring alerts as a Tier 2 SOC analyst. Escalates incidents, supports containment and eradication, leads remediation, mentors junior analysts, documents procedures, and collaborates with security and IT teams across a multinational organization to improve threat detection and response capabilities.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Lead enterprise security risk assessments, maintain the risk register, prioritize and track remediation, evaluate vendor and architectural risks, define risk methodologies, map controls to NIST and CMMC requirements, support audits, report risk metrics to leadership, and promote risk ownership across the organization.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Leads OT/ICS and enterprise cybersecurity architecture for a federal critical-infrastructure modernization program. Responsibilities include requirements development, NERC CIP traceability, market research, RFI and vendor evaluation, lab testing, alternatives analysis, product recommendations, and executive briefings. The role bridges utility operational technology and IT security, covering access control, monitoring, asset management, vulnerability management, SCADA environments, and industrial systems. It is fully remote in the U.S. with up to 25% domestic travel and requires Public Trust eligibility.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.