Top Cyber Security Jobs in Louisville, KY

Lead and improve a 24x7 SOC by partnering with frontline analysts, owning operational metrics (MTTD/MTTR, SLAs), driving data-driven improvements, coaching analysts into career paths, optimizing tooling and automation (SIEM/SOAR), and supporting global handoffs across US, Ireland, and India.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Support and manage CHN's information security program including risk management, vulnerability scanning and remediation, incident response coordination with MSSP, audits, security case management, business continuity/disaster recovery planning and exercises, policy and control development, security awareness training, third-party risk activities, and security assessments for projects to protect information confidentiality, integrity, and availability.

Manage governance, risk, and compliance for SLED customers: develop and maintain SSPs, POA&Ms, policies, control mappings (NIST/FedRAMP/CJIS/HIPAA), evidence repositories, IRP/BCP, support audits, remediation tracking, and continuous monitoring with cross-functional teams.

Support ATO documentation and assessment for a cloud-based federal courts modernization program. Coordinate with security, engineering, and PM teams; create Visio diagrams; monitor, test, and troubleshoot IA issues; analyze CND/SIEM logs; assess configurations; implement enterprise security policies and procedures; manage vulnerability tracking and incident documentation; provide AWS cloud security expertise and ensure compliance with NIST, FedRAMP, CIS, and ISO 27001.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Contribute to corporate information security by assessing designs, selecting controls, performing threat modeling and vulnerability management, supporting risk and vendor assessments, and advising engineering teams on secure solutions and governance.

Design, implement, and test security controls for endpoints, identity, network and infrastructure. Lead vulnerability/patch management, coordinate penetration tests, manage third-party risk, triage incidents, and assess AI/LLM risks while partnering with IT and engineering to enforce Zero Trust and secure system deployments.

Lead application security across the SDLC: perform threat modeling, code reviews, vulnerability assessments (including scanner-less testing), define security maturity initiatives, integrate and automate SAST/DAST in CI/CD, advise stakeholders on mitigations, and act as subject-matter expert between application/hardware teams and InfoSec.

Harden low-level platform layers across firmware, bootloader, Linux kernel, and hardware roots of trust. Design secure/measured boot and attestation, review kernel modules/drivers for memory safety and privilege issues, build kernel telemetry (eBPF), and drive fleet-wide vulnerability response and remediation.

Lead architecture and evolution of enterprise, data center, and cloud networks for hyperscale AI; design secure, high-performance fabrics (spine/leaf, RDMA); build AI-agent review frameworks; implement segmented zero-trust network designs; set resiliency, observability, and capacity standards; mentor global engineers and guide cross-functional initiatives.

Join IT & Security to secure and scale enterprise IT, cloud, network, and infrastructure; build automation and tooling; support detection, response, and vulnerability management; improve identity, endpoint, and systems security; and partner cross-functionally to develop processes that enable secure, reliable, and scalable AI workloads.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Own cloud and network security, identity and PKI systems, and compliance for cloud and hybrid environments. Design secure cloud networking, manage NGFW/IDS/IPS, implement IAM/PAM/MFA, operate PKI and cryptography, maintain SIEM/EDR, and implement controls for CMMC L2, FedRAMP, and NIST 800-171. Support audits, documentation, risk assessments, and automation for compliance evidence and hardening standards.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.

Lead and manage SOC 1/SOC 2 exams and SOX/ICFR activities, assess and remediate ITGCs/ITACs, translate audit requirements into scalable controls, partner with engineering and finance, drive audit readiness, documentation, and automation to improve control effectiveness and audit outcomes in a cloud-native environment.

Own and execute end-to-end collaboration platform integrations for acquisitions: scope, migrate users, Slack channels, Drive, mailboxes, and configurations. Maintain Google Workspace, Slack, and Zoom at enterprise scale; manage email and domain security, DNS consolidation, phishing response, DLP, and platform incident response. Lead compliance/eDiscovery, archiving architecture, vendor selection, and automation to standardize governance across brands. Coordinate cross-functional stakeholders during M&A and build repeatable playbooks and tooling.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.