Top Senior Cyber Security Jobs in Minneapolis, MN

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead and scale a cross-company initiative to prepare enterprises for secure AI adoption. Drive strategic program execution, coordinate cross-functional engineering and product teams, define readiness frameworks and telemetry, manage dependencies and risks, and deliver executive reporting and customer-facing adoption programs.

The role involves engineering and data analytics for Attack Surface Intelligence, focusing on asset inventories, threat analysis, and executive briefings.

The role involves designing and improving Attack Surface Intelligence through data analysis, automation, and collaboration with security teams. Key responsibilities include asset inventory management, data manipulation, and presenting findings to senior management.

This role involves designing and improving the Attack Surface Intelligence program, focusing on data analysis and engineering to manage and reduce risks in cybersecurity.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead large-scale collection and analysis of deep and dark web data, build and maintain production-grade automated collection systems (LLM-integrated), operate Docker/cloud-based pipelines and APIs, respond to collection failures and incidents, perform threat actor research, and apply OPSEC tradecraft while collaborating globally.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Lead OSINT and engagement-driven investigations into Russian-language eCrime actors across surface, deep, and dark web. Collect actionable intelligence, produce contextual internal reports, collaborate with analytic teams, employ secure virtual OPSEC tradecraft, and leverage AI to accelerate research and decision-making under tight deadlines.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.