Top Cyber Security Jobs in Minneapolis, MN

Leads IAM application onboarding and integration, security risk assessments, compliance remediation, control execution, and stakeholder engagement. Advises senior leaders and application teams on security policies, access controls, regulatory requirements, and risk mitigation. Manages complex information assets, leads projects and teams, coordinates third-party risk activities, supports security awareness, and mentors staff.

Leads endpoint and mobile security architecture initiatives, including endpoint protection, EDR, DLP, and information security control design. Develops enterprise architecture strategies, security patterns, blueprints, and technical specifications; evaluates security products and vendors; supports complex technology projects; and advises cybersecurity, infrastructure, governance, and technical teams. The role also assesses risks, designs mitigating controls, ensures compliance with security standards, and provides strategic technical guidance.

Leads enterprise IAM onboarding, integration, validation, governance, and access control programs. Manages an IAM team, oversees application integration and identity data validation, ensures regulatory and policy compliance, improves workflows through automation, tracks operational metrics, and partners with risk, audit, compliance, cybersecurity, technology, and business stakeholders to remediate control gaps and strengthen enterprise security.

Leads design, implementation, refresh, configuration, and operational support for corporate firewall infrastructure. Troubleshoots critical network security issues, manages audit and operational health activities, coordinates vendors and partner teams, supports after-hours changes and on-call rotations, develops technical documentation, manages large-scale projects, and mentors security engineering staff.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Monitor and investigate cybersecurity alerts, analyze endpoint telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity, then coordinate threat remediation. The analyst also supports escalations, contributes to detection engineering and tuning, and collaborates across the SOC. The role requires knowledge of operating systems, enterprise administration, networking, web security, attacker techniques, and malware analysis while working a remote weekend 4x10 shift after training.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Drives cross-functional enterprise security and compliance programs, coordinating roadmaps, schedules, risks, audits, KPIs, and stakeholder communications. Supports engineering leads, improves scalable security processes, tracks initiative delivery, and applies AI tools to increase workflow efficiency and visibility. The role also contributes to program management practices and community development across Samsara's Security organization.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Leads enterprise vulnerability management and cloud security posture management across on-premises, cloud, and application environments. Administers security platforms, monitors AWS environments for vulnerabilities and misconfigurations, prioritizes remediation, automates workflows, and partners with engineering and DevOps teams. Tracks risk metrics and aligns security practices with FedRAMP, NIST CSF, ISO 27001, and CIS Controls.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Lead GameChanger's Information Security and Technology organization, owning strategy, roadmaps, and teams across product/cloud/AI security, security operations, GRC, vulnerability management, and internal IT. Partner with engineering, product, legal, and parent-company security to manage risk, incident response, and secure adoption of AI while supporting a remote-first workforce.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Lead complex internal and external cybersecurity fraud investigations, including evidence collection, analysis, interviews, chain-of-custody documentation, and case reporting. Advise stakeholders on investigations and law-enforcement referrals, maintain external law-enforcement relationships, support digital-fraud collaboration, and help develop investigative processes aligned with industry best practices.

Triage security alerts from SIEM, EDR, email, and other sources; support users with security issues; investigate suspicious activity; escalate incidents; document resolutions; and collaborate with IT, compliance, and security teams. The role also identifies recurring patterns and process gaps, improves detections and workflows, evaluates automation opportunities, and uses approved AI tools to streamline security operations.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Partners with Sales to conduct technical discovery, design security solutions, deliver demonstrations, and lead proof-of-value and proof-of-concept engagements. Advises enterprise security, identity, infrastructure, risk, and executive stakeholders, translating technical capabilities into business outcomes. Develops customer documentation, leads training, supports marketing events, and collaborates cross-functionally to improve sales execution. The role requires cybersecurity expertise, enterprise networking knowledge, strong presentation skills, and experience supporting complex enterprise sales cycles.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Defines and governs enterprise cybersecurity architecture across cloud, infrastructure, applications, data, AI, identity, and cyber defense. Establishes security principles, reference architectures, standards, roadmaps, and Zero Trust patterns; influences technology strategy, architecture decisions, modernization, integrations, and build-versus-buy choices. Partners with engineering, enterprise architecture, risk, legal, and business teams to implement scalable security capabilities, improve resilience, reduce architectural complexity, and address emerging threats across complex enterprise environments.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.