Top Senior Cyber Security Jobs in Minneapolis, MN

Designs, deploys, automates, and maintains cryptographic products and services, including HSMs, security appliances, encryption, tokenization, and key management systems. Develops monitoring and synthetic transactions, supports audits and incident response, investigates technical issues, and creates engineering documentation. The role also evaluates new products, implements upgrades, collaborates across teams, and follows Agile Scrum or Kanban practices.

Designs, deploys, and maintains F5 BIG-IP and Cloudflare web application security and traffic management solutions. Manages WAF policies, edge security rules, DDoS protections, incident investigations, and threat mitigation. Automates security operations using approved AI and scripting tools, integrates controls into application and infrastructure pipelines, documents operational procedures, and mentors junior engineers. Collaborates with application, network, and cloud infrastructure teams in a remote U.S. role.

Leads enterprise information security and firewall governance, serving as a Palo Alto Networks subject matter expert. Develops and enforces security policies, evaluates secure architectures, supports cloud security, monitors compliance, remediates vulnerabilities, and manages internal and external cybersecurity audits. Provides guidance on incident response, advises technical teams and leadership, oversees complex security projects, and directs implementation of security standards and procedures.

Leads application security operations and scales the Application Security Champion program across global engineering teams. Provides secure coding guidance, vulnerability remediation, threat modeling, secure design reviews, and architecture consultation. Integrates SAST, DAST, SCA, secrets scanning, and IaC security into CI/CD pipelines; oversees findings, metrics, governance, and risk escalation. Mentors security champions, delivers enablement programs, and partners with engineering, product, architecture, and risk leaders to improve secure development practices and cloud application security.

Leads information security strategy and execution for the Federal Reserve System’s District IT and Corporate Services portfolio. Advises senior technology and business leaders, manages cybersecurity risk and tolerance, develops resilient security practices, and partners across a matrixed organization to deliver secure technology services. Builds high-performing, AI-savvy teams, drives change and innovation, manages stakeholders and external partners, and aligns security initiatives with business objectives and system standards.

Leads information security strategy and execution for the Federal Reserve’s Central Bank Services portfolio, including Markets, Credit Risk Management, and Reserves. Advises senior business and technology leaders, manages cybersecurity risk and resilience, partners across a matrixed organization, develops security strategies, builds AI-savvy teams, drives change and innovation, and ensures secure, reliable technology delivery aligned with business objectives and System standards.

Leads information security strategy and execution for Federal Reserve System IT Operations and Policy portfolios. Advises the System CISO and business and technology leaders, manages cybersecurity risk and resilience, develops secure technology practices, and partners across infrastructure, architecture, data, innovation, and IT business teams. Builds AI-savvy security teams, drives organizational change, strengthens governance, and ensures secure, reliable technology delivery across a geographically dispersed enterprise.

Serves as a cybersecurity governance, risk, and compliance subject matter expert. Manages NIST, FISMA, CMMC, FedRAMP, DoD RMF, STIG, and ATO requirements; maintains security plans and compliance documentation; manages POA&Ms, vulnerabilities, risks, audits, penetration tests, and continuous monitoring. Collaborates with business, IT, infrastructure, operations, and government stakeholders to implement and maintain security controls across cloud and enterprise environments.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Design and operate secure endpoint and SaaS controls across GitLab’s remote workforce, with a primary focus on macOS. Build Terraform and GitOps automation, enforce security baselines, manage patching and software distribution, improve endpoint telemetry and detections, and partner with IT and security teams. Mentor engineers and serve as a senior escalation point for complex endpoint security issues.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Provides SAP security and access controls consulting, including role design, authorization solutions, SAP GRC implementation, segregation-of-duties reviews, compliance assessments, audit support, risk remediation, and access control documentation. Collaborates with clients and engagement teams, evaluates control gaps, tracks remediation, protects sensitive data, and mentors junior team members.

Leads SAP security and access-control consulting workstreams, including role design, segregation-of-duties analysis, user provisioning, SAP GRC implementation, compliance controls, remediation, and audit readiness. Reviews security architecture across SAP S/4HANA, Fiori, HANA, BTP, and cloud environments; manages project delivery, advises clients, develops team members, and supports continuous monitoring and digital risk prevention.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Manages application security assessments and client delivery across cloud environments. Designs security controls for IaaS, PaaS, and SaaS platforms; reviews architectures for vulnerabilities and control gaps; conducts risk assessments and vulnerability testing; guides remediation and security tool usage; monitors emerging threats; coaches security teams; and communicates findings to technical and business stakeholders.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.