Top Senior Cyber Security Jobs in Kansas City, MO

Leads large-scale security, IT, and engineering programs from strategy through execution. Coordinates cross-functional stakeholders, manages governance, risks, dependencies, and timelines, and develops unified security and compliance frameworks. The role drives control implementation, regulatory alignment, risk mitigation, process automation, continuous improvement, and a culture of compliance while connecting security initiatives to business goals and customer expectations.

Hands-on application security engineer responsible for finding and remediating vulnerabilities across a healthcare platform. Duties include offensive security testing, custom tooling, system hardening, security monitoring, PHI protection, AI-assisted vulnerability discovery, secure code review, security training, mentoring, defensive strategy, and disaster recovery resilience.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Build, operate, and improve enterprise security telemetry and detection platforms across hybrid, cloud, and on-premises environments. Engineer SIEM, EDR, SOAR, and log pipelines; develop detection content; implement access controls, integrations, validation, and observability; troubleshoot visibility gaps; and support incident response. The role also documents architectures, evaluates emerging technologies, contributes to AI monitoring, and partners across security, infrastructure, architecture, and product teams.

Conducts independent cybersecurity assessments of MARAD information systems across authorization, reauthorization, and continuous monitoring activities. Evaluates management, operational, and technical controls under NIST RMF; develops assessment plans, reports, risk assessments, and remediation recommendations; validates evidence and system compliance; supports ATO decisions; enters data into CSAM; and collaborates with federal cybersecurity stakeholders.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Lead Uber’s highest-severity security incidents from escalation through containment, recovery, and remediation. Command response teams, make high-consequence decisions, investigate logs and system data, brief executives, conduct post-incident analysis, mentor responders, and improve incident response through simulations, threat modeling, automation, and AI-assisted tooling.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Design and lead secure AI security solutions for enterprise customers across cloud, hybrid, and on-premises environments. Conduct technical discovery, architect integrations spanning AI systems, LLM applications, data pipelines, model layers, and runtime environments, and support presales validations and implementations. Serve as a technical advisor to CISOs and security leaders while partnering with Sales, Product, and R&D to guide deployments, resolve escalations, and influence product strategy.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Provides information assurance and cybersecurity services for DoD applications, including RMF and A&A support, security documentation, vulnerability assessments, POA&M management, STIG compliance, security audits, incident reporting, continuous monitoring, and DevSecOps security integration. The role supports cloud migration, cybersecurity tooling, compliance with DoD and NIST standards, external audits, and implementation of government cybersecurity directives.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.