Top Cyber Security Jobs in Memphis, TN

Build, customize, and maintain secure configuration baselines using CIS Benchmarks and DISA STIGs. Map technical settings to FISMA and NIST controls, develop baselines from vendor documentation, apply NVD and CVE data, and verify compliance through Tenable scans. The role requires independent ownership, collaboration with system teams, clear risk communication, and support for baseline rollout across servers, networks, cloud, SaaS, and mobile platforms.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Leads the university’s information security architecture and engineering strategy, including cloud, network, endpoint, application, data, identity, and AI security. Establishes zero trust, DevSecOps, infrastructure-as-code, and security-as-code practices; oversees architecture, technology selection, compliance alignment, automation, and AI security initiatives. Builds roadmaps, secures funding, manages strategic initiatives, and leads, recruits, mentors, and develops security architects, engineers, and managers while advising executive leadership.

Researches and analyzes cybercrime threats, threat actors, tools, techniques, and vulnerabilities. Develops customer-facing threat intelligence profiles, briefs internal and external stakeholders, and adapts content to business needs and feedback. The role also synthesizes research into mitigation recommendations, collaborates across teams, tracks emerging attacks, and contributes to security products and professional publications.

Lead the design and implementation of Aalyria’s security platform, including identity, authentication, authorization, PKI, workload identity, secrets, key management, audit evidence, and security standards. Build systems that operate securely in commercial, government, classified, and disconnected environments. Set technical direction across teams, mentor engineers, threat-model distributed systems, and operate production services through upgrades, maintenance, and incidents.

Build and operate Spacetime’s security platform, including authentication, authorization, PKI, workload identity, secrets and key access, SDKs, audit logging, and threat mitigations. Develop secure capabilities for commercial, government, classified, and disconnected environments. Collaborate with product and infrastructure teams, support production operations, participate in on-call and incident response, and maintain hardened supply-chain and deployment controls.

Own and build LiveKit’s vulnerability management and security operations program. Responsibilities include deploying scanning tools, triaging vulnerabilities, assessing severity, assigning remediation owners and SLAs, creating dashboards, automating remediation workflows, and collecting compliance evidence. The role partners closely with engineering and compliance teams and may involve agentic security automation, incident response, application security, and AI security.

Designs, implements, and maintains enterprise security solutions across networks, endpoints, email, identity, and data protection. Responsibilities include firewall and VPN management, threat detection, incident response, vulnerability management, security audits, penetration testing, SOC 2 compliance, phishing response, SIEM monitoring, threat hunting, and security assessments. The role also supports Azure security, third-party risk questionnaires, technical design reviews, and off-hours security operations.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Owns Blueberry’s day-to-day security operations, including vulnerability management and remediation across GCP and Python/Django applications. Maintains detection, logging, monitoring, incident readiness, backups, endpoint security, network controls, access management, and IT administration. The role requires production Python experience, Linux administration, cloud experience, and hands-on familiarity with security tools and controls.

Supports cybersecurity control implementation, security baselines, compliance assessments, risk mitigation, audits, documentation, and vulnerability remediation. Develops and customizes CIS and STIG benchmarks, translates baseline requirements into FISMA and NIST controls, and collaborates with technical teams to protect client systems. The role requires five-plus years supporting IT operations and eligibility for a Public Trust determination. Preferred experience includes cloud, networking, automation, infrastructure-as-code, containers, serverless technologies, monitoring, and security-related certifications.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.

Research and analyze threat intelligence, attacker tactics, vulnerabilities, and forensic evidence. Conduct threat hunts and investigations, develop detection logic and security recommendations, create customer and internal briefings, produce threat content, and improve Microsoft security tooling and investigative practices. The role supports global efforts to identify adversary activity, catalog TTPs, and protect enterprise customers.

Leads security operations strategy, incident response, penetration testing, SOC coordination, detection engineering, M&A security assessments, control improvement, security engineering teams, and vendor management. Acts as the CISO’s technical deputy while remaining hands-on with security investigations and engineering. The role requires expertise across cloud, network, identity, detection, and incident response, with strong Azure and Microsoft Sentinel experience.

Leads end-to-end information security and IT infrastructure projects, including risk remediation, security tool deployments, compliance initiatives, and process improvements. Manages project plans, resources, risks, dependencies, stakeholder communications, governance requirements, audit documentation, and change adoption while coordinating technical and business teams.

Leads the enterprise Cybersecurity and IT Audit program, including risk assessments, audit strategy, IT SOX and ITGC oversight, cybersecurity and technology audits, advisory reviews, and Audit Committee reporting. Partners with technology leaders on governance, cloud, privacy, resilience, third-party risk, AI, and emerging technology initiatives. Manages audit budgets, co-sourced resources, talent development, and innovation through analytics, automation, and AI-enabled audit techniques.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Leads enterprise product and AI security strategy, secure-by-design implementation, SDLC controls, AI model risk management, product security architecture, vulnerability and incident management, software supply-chain integrity, regulatory alignment, and acquisition integration. Oversees security teams and partners across operating companies, establishes metrics and standards, supports customer security requirements, and reports program effectiveness and risk to executive leadership and the Board.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Lead cybersecurity across the lifecycle of military aircraft, avionics, mission, communications, and ground systems. Manage DoD RMF, ATO, IATT, security documentation, vulnerability assessments, risk analysis, compliance reviews, and mitigation strategies. Integrate cybersecurity requirements into system architectures, support TEMPEST and Program Protection activities, assess critical components and supply-chain risks, and participate in laboratory, ground, and flight testing. Coordinate with engineering teams and support audits, configuration management, and cybersecurity impact assessments.

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Designs and scales AI-driven security GRC automation, including compliance evidence collection, control testing, risk assessment, audit preparation, and workflow integration. Builds scripts, bots, APIs, and AI/LLM solutions; integrates GRC platforms with security and IT systems; establishes quality controls and guardrails; monitors automation risk and performance; and partners with technical and business stakeholders to improve security compliance maturity.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.