Top Cyber Security Jobs in Indianapolis, IN

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Represent security compliance with customers, map frameworks to Zscaler capabilities, create reusable playbooks, educate sales teams, and complete security questionnaires and assessments. Translate technical security and data-protection concepts into business and sales messaging while supporting frameworks including NIST, ISO 27001, DORA, GDPR, PCI, and HIPAA. The role requires customer-facing credibility, compliance expertise, security architecture knowledge, and the ability to leverage AI-driven workflows.

Designs and implements enterprise DevSecOps, application security, vulnerability management, and cloud security capabilities. Integrates automated security controls into CI/CD pipelines, tunes SAST, DAST, SCA, and container scanning tools, manages CNAPP platforms, and reduces vulnerability backlog. Establishes secure SDLC practices, risk methodologies, AI code security guardrails, incident response strategies, and security KPIs. Advises engineering and management teams on complex security architecture, integration, and information security challenges.

Own the application security program strategy, roadmap, architecture standards, tooling, threat modeling, security champions program, and developer training. Integrate security tools into CI/CD pipelines, manage findings and remediation, coordinate penetration testing, maintain audit evidence, and report risk and program metrics to leadership. Operate autonomously while influencing development, infrastructure security, IT leadership, and external vendors. Support secure AI adoption and risk-based security decisions across the organization.

Partner with enterprise business units to manage security risk registers, conduct architecture reviews and threat modeling, provide security expertise, prioritize remediation, and drive bug closure. The role requires translating security frameworks into business-relevant risk, communicating with senior stakeholders, and applying sound judgment to AI-assisted security analysis. Responsibilities and autonomy vary across Senior Analyst, Lead, and Senior Lead levels.

Leads information security and technology risk management for the CareBridge business unit. Advises executives, develops security roadmaps, coordinates incident response, manages third-party and merger-related risk, supports HIPAA and HITRUST compliance, establishes governance, reports risk metrics, and promotes secure-by-design practices. The role requires broad expertise across multiple information security domains, including access control, application security, business continuity, compliance, security architecture, and network security.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Lead macOS security research, including Endpoint Security API telemetry, malware reverse engineering, attack emulation, EDR bypass research, and proof-of-concept development. Collaborate with Detection Engineering, Product, and Engineering to operationalize findings, track Apple platform changes, improve detection coverage, document risks, and mentor teammates. The role also involves building ephemeral research infrastructure and representing the company through technical publications, speaking, and media engagement.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Hands-on engineer responsible for securing internally developed applications, APIs, AI-enabled solutions, and integrations. The role performs vulnerability assessments, source-code reviews, architecture assessments, penetration testing, and remediation validation. Responsibilities include strengthening authentication, authorization, API protections, CI/CD security testing, cloud application architectures, logging, and monitoring. The engineer also evaluates LLM applications and AI agents for prompt injection, data disclosure, insecure tool execution, and excessive permissions, while communicating risks and corrective actions to stakeholders.

Designs and implements Salesforce security controls across sharing, encryption, identity, event monitoring, OAuth governance, and secure development. Configures Shield, SSO, Transaction Security Policies, Security Center, and SIEM integrations; reviews Apex and LWC for vulnerabilities; integrates static analysis into CI/CD; and advises on platform limits, security architecture, and release readiness across complex multi-org environments.

Develops enterprise cloud and application security architecture, roadmaps, reference architectures, and lifecycle controls. Advises infrastructure, application, business, and security teams; evaluates security technologies; designs IAM, SIEM, monitoring, analytics, scanning, and penetration-testing solutions; leads proof-of-concept evaluations; and provides strategic and solutions architecture guidance across cloud and on-premises environments.

Supports information security governance, risk, and compliance activities, including risk assessments, risk-register maintenance, security policies, third-party risk reviews, audit responses, ISO 27001 and ISO 27701 system operations, security awareness training, exceptions tracking, and reporting. The role collaborates with IT, Legal, Procurement, Marketing, and business stakeholders to evaluate technology risks, maintain security controls, and improve governance processes.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Monitor, detect, investigate, and respond to cybersecurity alerts and incidents in a Tier 2 SOC environment. Review logs, tool outputs, and threat intelligence; assess affected systems; support mitigation and recovery; identify attacker patterns; recommend security improvements; prepare reports; and follow escalation procedures while supporting 24/7 operations.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.