Top Cyber Security Jobs in Milwaukee, WI

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

Leads threat actor communications and ransomware negotiations, advising clients, legal counsel, and insurers during digital extortion incidents. Conducts threat intelligence collection and analysis, supports digital forensics and incident response investigations, develops persona operations, and produces technical and executive-facing deliverables. The role also improves intelligence workflows through automation, scripting, and tool integration, contributes to cybercrime research, and participates in an emergency on-call rotation.

Conduct original research into active campaigns, attacker behavior, and email and identity attacks. Synthesize technical findings from diverse sources into threat briefs, analytical reports, customer briefings, webinars, and executive summaries. Present intelligence to customers and prospects, collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing teams, mentor analysts, and use AI tools and automation to improve research and content workflows.

Own the strategy, roadmap, and commercial success of an AI SOC platform supporting MDR, MXDR, managed network security, and managed cloud security. Drive AI-assisted triage, automation, integrations, APIs, multi-tenancy, partner enablement, and MSSP-scale service packaging. Define network and cloud security capabilities, governance requirements, competitive positioning, pricing, and business cases while presenting to customers, partners, sales teams, and executives. Measure automation, workload reduction, cost-to-serve, adoption, retention, and partner revenue.

Monitors and investigates security alerts, threats, vulnerabilities, cloud misconfigurations, endpoint activity, and incidents. Supports incident response, CrowdStrike Falcon and Wiz administration, vulnerability remediation, access reviews, compliance activities, risk assessments, and security awareness initiatives. Collaborates with IT, cloud, infrastructure, application, and business teams to improve enterprise security posture and validate remediation efforts.

The Information Systems Security Engineer will secure a USPS information system modernization project by implementing federal security controls, conducting vulnerability assessments and penetration testing, integrating security into CI/CD pipelines, maintaining SSP, RMP, and POA&M documentation, monitoring cloud security tools, supporting incident response, and delivering security training. The role requires collaboration with development, operations, and federal security stakeholders while ensuring compliance with FISMA, NIST RMF, and FedRAMP standards.

Administers mainframe security access, including datasets, user IDs, CICS applications, resources, and certificates. Performs security reporting, access recertification, violation monitoring, audits, and compliance reviews. Maintains security plans, SOPs, test plans, and documentation while supporting investigations, migrations, and system implementations. Advises technical teams on security requirements and remediation. Uses RACF, ACF2, Vanguard, JCL, TSO, DB2, and related mainframe tools to maintain secure, compliant information systems.

Leads the design, implementation, and evolution of enterprise security capabilities across federal cloud and hybrid environments. The role engineers Zero Trust architectures, FedRAMP High controls, identity and access management, encryption, logging, vulnerability management, monitoring, and incident response. Responsibilities include supporting ATO authorization, continuous monitoring, risk remediation, security assessments, and secure adoption of AI-enabled technologies. The position requires collaboration with cloud, infrastructure, DevSecOps, compliance, and operations teams.

Designs and governs enterprise security architectures across applications, infrastructure, networks, endpoints, cloud environments, and sensitive data. Translates mission, business, regulatory, and federal requirements into secure designs; conducts architecture reviews and threat modeling; defines security standards and controls; guides DevSecOps, cloud, infrastructure, and application teams; and supports security technology selection and integration. The role requires extensive enterprise or federal security architecture experience, relevant certifications, U.S. citizenship, and the ability to obtain Public Trust clearance.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Evaluate on-premises, cloud, hybrid, network, endpoint, application, identity, and infrastructure security. Identify risks and gaps, create reports, present recommendations, and support incident response and post-incident improvements. Collaborate with engagement managers and technical teams while communicating with English- and Spanish-speaking stakeholders. Travel approximately 20% for client engagements.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Design and execute AI security evaluations focused on ethical jailbreaks, LLM red teaming, prompt injection, and tool-use abuse. Develop adversarial elicitation strategies, regression test suites, and evaluation frameworks to identify vulnerabilities in AI models. Collaborate with technical stakeholders to translate findings into safety improvements, and document methodologies and results for technical and non-technical audiences.

Leads cybersecurity solution sales for enterprise and small-to-medium business customers. Builds security transformation strategies, identifies and qualifies opportunities, develops pipelines, conducts consultative conversations, and drives complex cloud solution deals through closure. Partners with internal teams and channel partners on proposals, account planning, forecasting, competitive strategy, events, and customer outcomes. Serves as a cybersecurity subject matter expert, mentors colleagues, and supports customer adoption of AI, cloud, and security solutions.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

The Security Compliance Analyst manages cybersecurity, data privacy, classification, retention, governance, vulnerability assessments, incident response, and ATO documentation. Responsibilities include monitoring cloud environments and system logs, using SIEM tools, analyzing security risks, supporting security policies, reporting incidents, and ensuring compliance throughout the system lifecycle. The role also collaborates with Agile teams and stakeholders to protect sensitive data and resolve information assurance issues.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and on-site work with occasional travel.

Build and maintain hardened, minimal container images across Linux distributions and application runtimes. Remediate CVEs, troubleshoot package and dependency issues, reduce attack surfaces, and develop automation for image building, scanning, testing, versioning, SBOM generation, and publishing. Validate compatibility with Kubernetes and containerized environments, collaborate with infrastructure and security teams, establish hardening standards, and document curated-image usage.

Research cloud and SaaS security vulnerabilities, develop proof-of-concepts, threat detections, and analytical algorithms, and hunt threat actors and insider threats. Analyze behavioral activity and large datasets, optimize detection algorithms, advise customers on hardening environments, collaborate with R&D teams, and publish cybersecurity research and threat insights.

Serves as a security subject matter expert supporting sales teams and customers. The role assesses security environments, facilitates incident response and investigations, demonstrates Varonis capabilities, supports threat detection evaluations, develops technical enablement materials, communicates product updates, and gathers customer feedback for product improvement. Strong expertise in cloud and self-hosted network security, Microsoft security ecosystems, identity management, SIEM, SOAR, and threat detection is required.

Leads enterprise security programs for a large-scale federal multi-tenant cloud environment. Responsibilities include security strategy, risk assessment, incident response, compliance, vulnerability monitoring, cloud security, DevSecOps integration, resource and financial management, stakeholder engagement, and executive communication. The role leads multidisciplinary teams, supports FedRAMP, FISMA, NIST, and Zero Trust compliance, and serves as the primary security contact for government customers.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, incident response, and compliance evidence. Partner with developers, vendors, cloud teams, and compliance stakeholders to close critical findings and embed secure delivery practices through automation and security AI tooling.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, and security automation. Partner with development, cloud, compliance, and security teams to remediate critical findings, support audits, improve secure coding, and provide security guidance. The role also involves leveraging AI-enabled tools for vulnerability triage and remediation.