Top Cyber Security Jobs in Memphis, TN

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Lead Stord’s enterprise security function and build its long-term strategy, governance, operations, engineering, application and cloud security capabilities. Own NIST, SOC 2 and ISO programs, 24/7 detection and response, incident management, M&A security integration, secure product development, penetration testing, customer trust, business continuity and disaster recovery. Lead the security team, MDR partnership, executive and board communications, AI governance, and security readiness for international growth, acquisitions and potential public-market scrutiny.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Engineer and operate SIEM and SOAR platforms supporting SOC and MDR services. Responsibilities include log-source onboarding, parsing, enrichment, detection engineering, playbook automation, alert and dashboard development, end-to-end pipeline troubleshooting, vendor escalations, customer onboarding, ingest-volume management, documentation, and platform incident response. The role serves as the technical escalation point and participates in an after-hours on-call rotation.

Provides technical leadership for Zscaler Zero Trust Browser solutions across the sales lifecycle. Leads executive briefings, technical workshops, proof-of-value evaluations, deployments, and architecture discussions. Develops technical collateral, demos, test plans, and reference architectures while articulating browser security controls such as threat prevention, monitoring, DLP, private application access, and privileged remote access. Partners with sales and engineering to support customer outcomes, product enhancements, and successful technical wins.

Designs, configures, and operates ServiceNow Security Operations and Vulnerability Response capabilities. Builds vulnerability lifecycle workflows, risk-based prioritization models, dashboards, and SLA monitoring. Integrates scanners and security tools such as Qualys, Tenable, Rapid7, Defender, and CrowdStrike through APIs. Uses CMDB, Discovery, and Service Mapping to improve asset context and vulnerability correlation. Supports remediation coordination, incident investigations, governance, reporting, documentation, and continuous improvement for client exposure management programs.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Leads and coordinates security and operational incident response for infrastructure, platforms, hosting, and customer environments. Serves as incident commander, manages escalations and communications, facilitates bridge calls and post-mortems, analyzes incident trends, maintains response procedures, and tracks corrective actions. Partners with technical and leadership teams to improve incident management maturity, accountability, governance, reporting, and operational transparency during high-severity events.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Lead enterprise security risk assessments, maintain the risk register, prioritize and track remediation, evaluate vendor and architectural risks, define risk methodologies, map controls to NIST and CMMC requirements, support audits, report risk metrics to leadership, and promote risk ownership across the organization.

Leads OT/ICS and enterprise cybersecurity architecture for a federal critical-infrastructure modernization program. Responsibilities include requirements development, NERC CIP traceability, market research, RFI and vendor evaluation, lab testing, alternatives analysis, product recommendations, and executive briefings. The role bridges utility operational technology and IT security, covering access control, monitoring, asset management, vulnerability management, SCADA environments, and industrial systems. It is fully remote in the U.S. with up to 25% domestic travel and requires Public Trust eligibility.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Oversee application security scanning, vulnerability remediation, and security-related release readiness while developing and maintaining full-stack Java web applications. Coordinate with IRS personnel, create remediation milestones, lead technical meetings, troubleshoot environments, review code, perform testing, and document technical solutions. The role requires extensive J2EE development, security tooling, CI/CD, OpenShift, mainframe integration, and vulnerability management experience in a federal environment.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Supports cybersecurity risk management and authorization for the VA.gov Platform. Assesses NIST security controls, performs gap and risk analyses, maintains SSPs, POA&Ms, and authorization evidence, and translates deficiencies into engineering remediation. The role supports ATO/cATO readiness, OSCAL automation, threat modeling, secure design reviews, stakeholder coordination, incident response, and continuous synchronization between technical changes and security documentation.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.