Top Senior Cyber Security Jobs in Madison, WI

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Lead delivery of cybersecurity strategy and advisory engagements as the primary client contact. Conduct security and maturity assessments, risk analyses, program roadmaps, workshops, and executive presentations. Mentor junior staff, support scoping/proposals, collaborate with GRC and engineering teams, and contribute to practice development and business development activities.

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Design, implement, and maintain a cross-platform endpoint security agent (Windows, macOS, Linux) using Go and JavaScript. Build low-level system automation, telemetry collection, secure agent-cloud communication, real-time threat detection, update mechanisms, and monitoring tools. Optimize performance, ensure multi-OS compatibility, and collaborate with security teams on detection rules and compliance checks.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead and scale the Email Security engineering team, own roadmap delivery, drive architecture for high-throughput distributed systems, partner with Product and Security, mentor engineers, and oversee on-call, incident response, and system reliability.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Design, implement, and improve security architecture across AWS and Azure. Harden identity and privilege models, integrate CNAPP/CSPM and AppSec into SDLC, drive vulnerability and patch management, enable SIEM telemetry, implement IAM/PAM/least-privilege, and promote zero trust across engineering and product teams.

Sell IonQ's quantum-security solutions to SLED accounts by identifying and closing opportunities around quantum-safe encryption and post-quantum readiness. Manage full sales cycle, engage CISOs and IT leaders, collaborate with technical teams, maintain pipeline in CRM, and represent the company at industry events. Drive strategic, solution-oriented deals in complex, consultative environments.

Lead cross-functional security initiatives: automate security tasks and incident response, manage HITRUST/SOC2/PCI assessments and remediation, evaluate and optimize security tools, secure software development (GitHub, code scanning, AI code), respond to audits, deliver training, and investigate and remediate security incidents to advance program maturity.

Lead multiple product security engineering teams to design, implement, and operate security controls across Allstate's technology ecosystem. Architect secure digital products, drive DevSecOps, CI/CD, cloud-native and application security best practices, integrate IAM/SIEM/vulnerability management, influence stakeholders, manage security product roadmaps, mentor engineers, and own production security KPIs and compliance.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Design and implement software security solutions for diabetes care and digital health products. Lead product security risk assessments, vulnerability remediation, secure coding practices, static analysis, and incident response. Mentor engineers, run security reviews, and ensure compliance with regulated medical software development and quality management systems.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.