Top Cyber Security Jobs in Huntsville, AL

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Lead alliance and technical product marketing: build joint positioning and go-to-market enablement with strategic partners, own competitive intelligence and technical differentiation, create content and launch programs that drive pipeline and inform product and GTM strategy.

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

Design and execute integration and security-focused test plans for PAM and Keeper Secrets Manager. Validate integrations across cloud providers, IAM, CI/CD, and OS/databases; perform reliability and security testing; analyze logs and defects; contribute to automation and collaborate with engineering, product, and security teams to ensure reliability and compliance.

Lead design and implementation of secure CI/CD pipelines, IaC automation, cloud security and compliance. Perform vulnerability assessments, monitor environments, manage Kubernetes/Docker, support incident response and disaster recovery, and provide technical leadership and DevSecOps frameworks for enterprise global projects.

Design, implement, and maintain SAP S/4HANA Public Cloud security and role-based access controls. Perform SoD assessments, integrate identity services (IAS/IPS/SSO), support Fit-to-Standard workshops, audit/compliance requests, quarterly releases, troubleshooting, role optimization, and post-go-live support for SAP GROW implementations.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Customer-facing pre-sales cybersecurity engineer who performs technical discovery, assesses email security architectures, designs and presents email security solutions (SEG, API-based protections, DLP, ATP), runs demos and PoCs, collaborates with vendors, enables sales teams, and ensures smooth handoff to delivery.

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Senior privacy consultant to design and implement privacy technology and governance. Lead OneTrust platform configuration, privacy assessments (ROPA, PIA, PTA, DSAR), data discovery, classification, mapping, and privacy-by-design. Translate privacy requirements into technical solution architectures and Azure integrations (Data Lake, Data Factory, Databricks, SQL), build workflows, dashboards, reports, and operational procedures, and implement data protection controls (masking, encryption, retention).

Lead enterprise security architecture across hybrid and multi-cloud environments. Develop and govern reference architectures, perform architecture reviews, drive remediation, and define security standards for identity, network segmentation, data protection, monitoring, CI/CD, and AI platforms. Partner with engineering teams, support incident response and audits, and ensure secure integration of acquisitions and research/AI workloads.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Design and manage cloud and product security for AWS, perform security assessments and pen-test remediation, integrate security into DevOps/IaC, mentor engineers, and advise on compliance and threat mitigation across mobile core, applications, and cloud environments.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Lead assessment and remediation of IT security risks across network, systems, and applications. Perform vulnerability assessments, manage IDS/IPS, coordinate remediation with IT and vendors, develop policies and training, support audits (SOX/PCI/HIPAA), and report findings to stakeholders while mentoring teams and guiding security projects.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead and build the company's end-to-end security program for a genomics and AI platform: governance, compliance (HIPAA, HITECH, SOC 2, ISO 27001), AI governance, offensive security, incident response, third-party and SaaS security, and cross-functional security embedding. Manage senior offensive personnel and external partners, present to executives, and deliver SOC 2 readiness and a prioritized HIPAA remediation roadmap quickly.