Top Senior Cyber Security Jobs in Minneapolis, MN

Architects and develops secure, scalable backend services and AI-assisted workflows for identity and access security. Leads architecture, feature delivery, performance optimization, testing, reliability, and production operations. Integrates AI, ML, and LLM capabilities for access intelligence, risk detection, and remediation. Partners with cross-functional leaders, explores emerging IAM technologies, conducts code reviews, and mentors engineers while driving enterprise-ready solutions.

Leads application security operations and scales the Application Security Champion program across global engineering teams. Provides secure coding guidance, vulnerability remediation, threat modeling, secure design reviews, and architecture consultation. Integrates SAST, DAST, SCA, secrets scanning, and IaC security into CI/CD pipelines; oversees findings, metrics, governance, and risk escalation. Mentors security champions, delivers enablement programs, and partners with engineering, product, architecture, and risk leaders to improve secure development practices and cloud application security.

Designs, deploys, automates, and maintains cryptographic products and services, including HSMs, security appliances, encryption, tokenization, and key management systems. Develops monitoring and synthetic transactions, supports audits and incident response, investigates technical issues, and creates engineering documentation. The role also evaluates new products, implements upgrades, collaborates across teams, and follows Agile Scrum or Kanban practices.

Plan and execute risk-based information security control assessments across identity, access, network, cloud, and data protection domains. Validate controls against regulatory obligations and security frameworks, review evidence, track deficiency remediation, facilitate governance groups, and deliver executive-ready risk summaries. Improve control assurance through GRC platforms, dashboards, automation, and standardized compliance procedures.

The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

As a Security Engineer, you'll develop and deploy security controls for cloud workloads, ensuring compliance and working collaboratively with teams on automation and security assessments.

Leads Pluralsight’s enterprise-wide information security strategy across corporate and product environments. Oversees security architecture, regulatory compliance, policies, third-party audits, business continuity, disaster recovery, and security reporting. Builds operational rigor, monitors program effectiveness, translates regulations into practical controls, and communicates with executives, auditors, regulators, and technical teams. The role requires extensive information security leadership, deep knowledge of security technologies and regulations, and strong organizational communication skills.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Own enterprise security reference architectures, secure-by-design standards, and modernization roadmaps. Lead architecture transformation, threat modeling, risk reviews, and regulatory control mapping across Azure and hybrid environments. Build AI-enabled security automation, guide distributed delivery teams, review designs, mentor engineers, and align security architecture with operations, compliance, product, and platform stakeholders.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.