Top Senior Cyber Security Jobs in Madison, WI

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Owns Microsoft’s Security Compete Program, developing competitive strategy, battlecards, positioning, and objection-handling guidance for AI security offerings. Provides deal coaching, analyzes competitive wins and losses, tracks performance metrics, gathers field intelligence, and delivers executive reporting. Partners across sales, marketing, engineering, product, and regional teams to improve go-to-market execution, strengthen competitive differentiation, accelerate strategic deals, and influence product and field-readiness decisions.

Leads complex security alert triage, incident investigations, threat hunting, detection improvement, and incident response. Develops playbooks, operationalizes threat intelligence, builds automation, and mentors analysts. The role partners with detection engineering to improve security monitoring across cloud, endpoint, identity, network, and application telemetry while raising investigation and documentation standards.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Conducts independent cybersecurity assessments of MARAD information systems across authorization, reauthorization, and continuous monitoring activities. Evaluates management, operational, and technical controls under NIST RMF; develops assessment plans, reports, risk assessments, and remediation recommendations; validates evidence and system compliance; supports ATO decisions; enters data into CSAM; and collaborates with federal cybersecurity stakeholders.

Designs, implements, and operates Azure-native security controls for identity, networking, and workloads. Manages Defender for Cloud and Microsoft Sentinel, implements Conditional Access, MFA, and Zero Trust patterns, embeds security into Infrastructure-as-Code pipelines, monitors cloud posture, supports incident response, drives remediation, and maintains compliance documentation and metrics. Partners with cloud and infrastructure security teams to ensure secure, resilient, and compliant Azure environments.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, governance, risk and compliance, security architecture, and third-party risk. Oversees security tools, audits, penetration testing, automation, AI enablement, and incident preparedness. Develops security strategy, manages vendors and projects, reports risk and performance to leadership, and directly leads, coaches, and develops the security team.

Lead security engineering for a federal health supply chain and logistics software product line. Own security architecture through authorization, establish engineering standards, assess and remediate complex findings, advise stakeholders on risk, and mentor engineers. The role requires federal security framework expertise, cloud security experience, cross-team remediation leadership, and eligibility for a Public Trust background investigation. Preferred experience includes federal health IT, ATO packages, Kubernetes security, incident response, HIPAA, and Agile or SAFe environments.

Secure federal health IT supply-chain and logistics software by designing and validating application and infrastructure controls, assessing vulnerabilities, driving remediation, embedding security checks into CI/CD pipelines, monitoring security tools, supporting incident response, and translating federal security requirements into implementable technical designs.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

Manages enterprise information security governance, risk, and compliance initiatives. Develops security policies and frameworks, leads data classification and threat modeling, conducts risk assessments, oversees vulnerability remediation, evaluates security controls, supports audits, and prepares risk metrics and executive reports. Partners with technical teams to embed security requirements and promotes governance best practices across the organization.

Protect Air Force modernization efforts by assessing legacy and modernized applications, conducting security audits and risk analyses, implementing RMF, ATO, and cATO processes, authoring security controls and authorization evidence, researching emerging threats, and coaching government engineering teams on secure software development and compliance.

Define and drive Security Operations strategy at the intersection of Identity and AI. Analyze IAM and AI roadmaps, perform threat modeling, build security frameworks for AI-enabled systems and agentic workloads, identify capability gaps, incubate new security approaches, and partner with engineering and security teams to influence long-term direction and operational readiness.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Lead Uber’s highest-severity security incidents from escalation through containment, recovery, and remediation. Command response teams, make high-consequence decisions, investigate logs and system data, brief executives, conduct post-incident analysis, mentor responders, and improve incident response through simulations, threat modeling, automation, and AI-assisted tooling.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.