Top Cyber Security Jobs in Minneapolis, MN

Cybersecurity interns support SOC operations by monitoring SIEM and EDR alerts, triaging and investigating threats, analyzing security logs, assisting incident response and phishing analysis, researching vulnerabilities, and maintaining playbooks and documentation. They collaborate with cybersecurity professionals on client-facing deliverables while developing practical experience in threat detection, security operations, and incident response.

Leads product and platform security for Federal Reserve Financial Services, overseeing security architecture, secure development lifecycles, threat modeling, DevSecOps, security testing, risk management, and cloud security. Advises product, engineering, architecture, and executive stakeholders; establishes security standards and reference architectures; evaluates security technologies; and leads, mentors, and develops the security team. The role also represents security interests across Federal Reserve System forums and requires occasional travel and national security clearance eligibility.

Monitor, triage, and investigate security alerts across Microsoft Sentinel and Azure infrastructure. Follow playbooks to contain and escalate threats, document investigations, apply MITRE ATT&CK and Cyber Kill Chain concepts, identify detection gaps, and support tuning efforts. The role requires clear communication, methodical alert handling, and a willingness to develop scripting, log analysis, and evidence collection skills.

Own detection engineering and SOAR automation for an Azure-native platform. Build and tune Microsoft Sentinel analytics rules, close telemetry gaps across AKS, endpoints, and networks, and develop automated workflows for triage, enrichment, and response. Translate threat intelligence into detection logic, integrate security tools through APIs and scripting, reduce false positives, and improve detection coverage and analyst efficiency.

Leads cloud security advisory engagements across IaaS, PaaS, and SaaS environments. Develops security strategies, architectures, controls, monitoring, and incident response processes; directs risk assessments and vulnerability testing; advises executive clients; drives business development and thought leadership; and mentors security leaders and teams.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Leads Connected Device Security, Data Protection, and Insider Risk programs across healthcare environments. Develops cybersecurity roadmaps, DLP and information protection capabilities, insider threat governance, IoMT/IoT security processes, operational metrics, and investigative workflows. Partners with Security Operations, Engineering, Clinical Engineering, Privacy, Legal, HR, Compliance, and IT. Ensures alignment with HIPAA, HITECH, NIST, CIS Controls, and HITRUST while using approved AI tools to automate analytics and improve operations.

Secure IBM i (IBMi) servers and applications to prevent unauthorized access; produce audit evidence for ICFR/SOC/HITRUST; manage security reporting and investigations; build security reports using security tools, programming and SQL; review, prioritize, and remediate vulnerabilities.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Architect, develop, optimize, and maintain AI-enhanced access security features and backend services. Integrate LLMs and AI workflows for identity intelligence, risk detection, and remediation. Lead architecture, design, testing, performance, reliability, and production readiness for enterprise systems. Deliver features end to end, collaborate cross-functionally, conduct code reviews, and mentor engineers while improving scalability, maintainability, and security.

Build and maintain behavioral threat detections across GitLab corporate, cloud, SaaS, and customer environments. Identify MITRE ATT&CK coverage gaps, develop and troubleshoot SIEM detections, orchestrate AI agents across the detection lifecycle, and improve detection quality through automation. Collaborate with incident response, red teams, threat intelligence, and engineering teams on threat hunting, purple teaming, root-cause analysis, and security observability.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Own enterprise security reference architectures, secure-by-design standards, and modernization roadmaps. Lead architecture transformation, threat modeling, risk reviews, and regulatory control mapping across Azure and hybrid environments. Build AI-enabled security automation, guide distributed delivery teams, review designs, mentor engineers, and align security architecture with operations, compliance, product, and platform stakeholders.

Leads enterprise data security and information governance by building data intake, catalog, marketplace, classification, lineage, and access-control programs. Translates privacy and security requirements into technical controls, self-service workflows, and governance documentation. Partners with Legal, InfoSec, engineering, product, and data teams to support compliant data use, AI/ML initiatives, and regulatory requirements including HIPAA, GDPR, and CCPA. Measures adoption, turnaround times, and governance maturity across a global SaaS organization.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads Enterprise Security services, setting and enforcing security standards across identity, endpoints, business applications, cloud infrastructure, networking, IoT, and automation. Partners with IT, SOC, vulnerability management, governance, and threat operations teams to secure applications, monitor environments, manage EDR policies, remediate vulnerabilities, assess risks, and maintain compliance. Also drives AI security initiatives and uses AI tools to improve enterprise security capabilities and team efficiency.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.