Top Cyber Security Jobs in Huntsville, AL

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Monitors SIEM dashboards, correlates logs across security and cloud sources, investigates alerts, assesses threats, performs preliminary incident triage, tunes detection rules, documents findings, and escalates high-risk events. The analyst supports continuous monitoring, SOC playbooks, detection use cases, reporting, and coordination with incident response and engineering teams in a DoD-aligned environment.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Supports AWS GovCloud IL5 cybersecurity compliance and security operations. Performs RMF impact analysis, maintains SSPs, POA&Ms, SARs, and control evidence, validates STIGs and cloud configurations, monitors vulnerabilities and logs, supports IL5 migrations, audits, ATO activities, and continuity planning, and documents remediation and compliance findings.

The Senior IT Security Engineer strengthens cybersecurity across architecture reviews, AI and emerging technology assessments, IAM governance, vulnerability management, third-party risk, security assurance, incident response, phishing simulations, automation, and regulatory compliance. The role validates security controls, supports remediation, develops risk metrics and reporting, oversees identity platforms, and partners with technology, business, audit, compliance, procurement, and vendors in a regulated banking environment.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Build and mature the application security program across the SDLC. Manage SAST, DAST, SCA, and IAST tooling; conduct penetration tests and vulnerability assessments; drive remediation; and embed Secure by Design practices. Partner with engineering on threat modeling, secure coding, architecture reviews, and CI/CD integration. Support HIPAA, NIST, and GDPR compliance through audits, reporting, documentation, policies, and cross-functional risk reduction initiatives.

Assesses and mitigates security risks across AI, machine learning, and Generative AI systems. Responsibilities include threat modeling, vulnerability assessment, security monitoring, incident response, governance, compliance, access controls, policy development, audit support, and advising engineering and business teams on secure AI development and responsible adoption.

Twelve-week summer internship supporting application, API, and AI security testing. Responsibilities include documenting findings, researching security technologies, improving metrics and dashboards, assisting with automation, preparing technical reports, and collaborating with security and technology teams. The role is open to students pursuing cybersecurity, information technology, computer science, or related degrees who graduate in December 2027 or later.

Supports sales teams and partners in technical sales activities for cloud security products. Responsibilities include understanding customer requirements, integrating solutions, delivering technical presentations and demonstrations, managing product evaluations, responding to RFPs and RFIs, supporting partner development, discussing cloud architectures, resolving technical obstacles, and training sales and partner teams on product and business value.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Monitors and triages security alerts, investigates and documents incidents, supports identity and access management, vulnerability remediation, security awareness, phishing simulations, incident response, and security control checks. Collaborates with IT teams and an MSSP to resolve security issues, tune security tools, maintain documentation, and escalate threats. Requires availability for identity and access management, incident response, and escalation outside standard business hours.

Leads cloud security architecture and implementation, focusing on data privacy, GDPR compliance, Kubernetes security, mTLS, RBAC, zero-trust networking, audit logging, threat modeling, and vulnerability assessments. Collaborates across teams, mentors junior engineers, documents security practices, monitors industry trends, and drives resilient, compliant cloud infrastructure.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Lead cybersecurity risk strategy for frontier AI auditing. Design secure audit systems and privacy-enhancing technologies, evaluate AI-related cybersecurity risks, develop code and data tools, and strengthen internal IT infrastructure. Responsibilities include access controls, data protection, device management, incident response readiness, and communicating threat models, cryptography, and risk to technical and non-technical stakeholders.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Architects, deploys, and configures data security solutions for federal, DoD, and IC clients. Designs Zero Trust architectures, develops custom policies for hybrid cloud data control, and interfaces with agency stakeholders and internal engineering teams. Documents technical architectures and applies DSPM, DLP, data labeling, and tagging technologies. Requires TS/SCI clearance and experience with data security tools.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.