Top Cyber Security Jobs in Minneapolis, MN

Secure IBM i (IBMi) servers and applications to prevent unauthorized access; produce audit evidence for ICFR/SOC/HITRUST; manage security reporting and investigations; build security reports using security tools, programming and SQL; review, prioritize, and remediate vulnerabilities.

Leads enterprise Product Security Incident Response Team operations, overseeing product-related cyber incident detection, investigation, containment, remediation, recovery, and disclosure. Defines PSIRT strategy, governance, playbooks, tooling, threat intelligence integration, and secure CI/CD controls. Partners with Product, Engineering, Legal, and Cloud Infrastructure teams; briefs executives; manages audit documentation; and builds a multidisciplinary security response team.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Leads vulnerability scanning operations for IoT and infrastructure assets, identifies security risks, performs assessments, and recommends remediation. Designs and implements automation, including AI-assisted solutions, to improve security processes. Provides consulting on security standards and develops solutions across networking, cloud, cryptography, authentication, applications, email, and endpoint security. Documents, tests, maintains, and troubleshoots security solutions while collaborating with stakeholders.

Oversee segment information risk management and support enterprise security processes. Partner with business and technology leaders on risk mitigation, audits, regulatory requirements, customer security needs, and contractual security reviews. Advise senior management on risks and mitigation strategies, lead security process improvements, and provide guidance and accountability to managers and senior professionals while supporting the BISO and Office of Information Security.

Designs, deploys, configures, and maintains enterprise Privileged Access Management solutions across hybrid-cloud environments. Automates vault operations, privilege elevation, and credential rotation using PowerShell and infrastructure-as-code. Integrates privileged accounts and target systems with enterprise PAM architecture, monitors performance, troubleshoots issues, manages upgrades, and ensures high availability and disaster recovery. Maintains least-privilege compliance, auditing, technical documentation, standard operating procedures, and operational guides.

Own enterprise security reference architectures, secure-by-design patterns, modernization roadmaps, and technical standards. Lead architecture transformation, threat modeling, risk reviews, and regulatory control mapping for Azure and hybrid environments containing HIPAA/PHI and PCI data. Build AI-enabled security automation, guide distributed delivery teams, review implementations, and mentor engineers while partnering with security operations, compliance, product, and platform stakeholders.

Leads enterprise application security architecture across applications, APIs, cloud-native platforms, DevSecOps, and AI-enabled solutions. Conducts threat modeling, architecture reviews, security assessments, and risk analysis; develops security standards, reference architectures, design patterns, and requirements. Advises engineering and platform teams on secure software development, application testing, supply chain security, and cloud security. Influences enterprise security strategy, supports compliance, mentors technical staff, and promotes responsible AI adoption in a regulated environment.

Designs, deploys, automates, and manages enterprise HashiCorp Vault platforms for secrets, certificates, encryption, authentication, and authorization. Responsibilities include Vault lifecycle management, high availability, multi-cloud and Kubernetes integrations, PKI, HSM auto-unseal, secret engines, monitoring, troubleshooting, security hardening, documentation, vendor coordination, engineering support, and rotational on-call coverage.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Serve as the technical backbone to sales by designing, demoing, and proposing Arctic Wolf CyberSOC solutions. Educate prospects, architect technical solutions, support qualification, overcome sales obstacles, and translate customer needs to the product team. Support MSP and commercial segments with light travel required.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Provide day-to-day operational support for enterprise cryptographic appliances, HSMs, and PKI (ADCS); design, build, and maintain secure cryptographic platforms; automate workflows with scripts and approved AI tools; participate in 24x7 on-call rotation and occasional local data center travel.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Responsible for leading security initiatives, implementing policies, evaluating security architectures, and ensuring compliance with firewall and cloud security standards.

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Lead program management for the Center of Excellence and Trust Office, establishing governance, frameworks, and operational standards. Manage executive reporting, dashboards, KPIs, risk metrics, and cross-functional dependencies. Use enterprise digital and AI tools to automate workflows, track progress, and align security initiatives with enterprise priorities while evaluating emerging technology trends.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.