Top Senior Cyber Security Jobs in Minneapolis, MN

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Develop and manage enterprise data governance, classification, privacy, retention, and protection frameworks, with a focus on unstructured data. Own and optimize the firm’s DLP platform, policies, detection rules, and remediation processes. Lead data protection initiatives, evaluate governance technologies, track program metrics, and collaborate with legal, compliance, security, engineering, and business stakeholders to reduce information risk and meet regulatory requirements.

Leads cybersecurity architecture for cloud-based digital health platforms, connected medical-device ecosystems, web and mobile applications, APIs, and remote monitoring services. Responsibilities include defining security requirements, threat modeling, risk analysis, identity and access controls, encryption, secrets management, SBOM requirements, DevSecOps controls, monitoring, vulnerability management, and compliance readiness. The role coordinates audits, evidence collection, remediation, regulatory submissions, and security programs involving engineering, quality, privacy, IT, and business stakeholders.

Designs, deploys, and optimizes enterprise network security solutions for clients. Leads firewall, SD-WAN, segmentation, secure access, identity, and SASE implementations; resolves critical incidents; performs security assessments; advises technical and executive stakeholders; collaborates across cloud and infrastructure teams; and mentors junior engineers.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Leads enterprise cybersecurity engineering across incident response, threat detection, identity and endpoint security, vulnerability management, cloud security, architecture, compliance, disaster recovery, and cyber resilience. Owns Microsoft security technologies, security monitoring, risk remediation, vendor relationships, security awareness, and executive reporting. Partners with infrastructure, IT, business, and external teams to strengthen controls, support audits, secure cloud modernization, and improve organizational cybersecurity maturity.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Build and lead Motive’s globally distributed SOC, owning detection engineering, 24/7 incident response, threat hunting, intelligence, security analytics, endpoint protection, cloud and workload monitoring, and AI-driven automation. Establish operating models, coverage strategies, runbooks, telemetry platforms, incident command processes, and measurable detection and response capabilities across corporate and production environments.

Leads security operations, including SOC performance, incident command, detection and response tooling, AI-agent oversight, MSP relationships, and 24x7 coverage. Manages cyber defense engineers, analysts, and an eight-person contractor SOC pod; develops SecOps roadmaps, oversees SIEM, EDR, and SOAR quality, coordinates major incidents, and partners on agentic security capabilities. Provides coaching, performance management, and career development while driving measurable security improvements.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead product security for industrial automation, embedded, connectivity, software, and cloud products. Drive secure development lifecycle activities, security architecture, threat modeling, risk assessments, vulnerability management, testing, remediation, and regulatory compliance. Partner with engineering, product, quality, legal, and security teams while providing technical guidance and mentorship. Support standards including IEC 62443 and the EU Cyber Resilience Act across the product lifecycle.

The Cloud Security Engineer designs and maintains security controls across cloud, SaaS, and enterprise application environments. Responsibilities include cloud architecture, IAM, Zero Trust, DevSecOps, vulnerability management, threat detection, incident response, security assessments, automation, compliance, and remediation. The role partners with technology and business teams, supports secure development and CI/CD practices, provides security guidance, and communicates risks and recommendations to business stakeholders.

Own the strategy, roadmap, delivery, and lifecycle of enterprise data security products. Lead data governance, discovery, classification, DLP, access governance, compliance, and secure-by-design capabilities. Manage backlogs, Agile delivery, KPIs, stakeholder communication, and risk reduction outcomes while integrating AI to improve security workflows and productivity.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Investigate and respond to connected-vehicle and API security incidents, lead complex investigations, conduct threat hunting, and improve detection capabilities. Deploy and maintain agentic AI workflows for SOC operations, tune detection logic and machine-learning models, develop playbooks, prepare reports, advise customers, mentor analysts, and track SOC performance against SLAs and KPIs.

Investigate incidents, hunt threats, build detection and response automation, improve logging and visibility, lead complex investigations, conduct root cause analysis, and mentor teammates while shaping threat detection processes.

Build and mature an insider threat detection and response program through detection engineering, threat hunting, automation, incident response, and data exfiltration monitoring. The role partners with engineering, HR, and Legal on investigations, designs countermeasures, supports 24/7 on-call coverage, and contributes to security awareness initiatives.