Top Senior Cyber Security Jobs in Minneapolis, MN

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Lead delivery of cybersecurity strategy and advisory engagements as the primary client contact. Conduct security and maturity assessments, risk analyses, program roadmaps, workshops, and executive presentations. Mentor junior staff, support scoping/proposals, collaborate with GRC and engineering teams, and contribute to practice development and business development activities.

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Design, implement, and maintain a cross-platform endpoint security agent (Windows, macOS, Linux) using Go and JavaScript. Build low-level system automation, telemetry collection, secure agent-cloud communication, real-time threat detection, update mechanisms, and monitoring tools. Optimize performance, ensure multi-OS compatibility, and collaborate with security teams on detection rules and compliance checks.

Design and implement security controls across cloud, OS, Kubernetes, networks, and CI/CD. Audit infrastructure for vulnerabilities, perform threat modeling, drive mitigations, and spend significant time writing security-focused software and automation.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead and scale the Email Security engineering team, own roadmap delivery, drive architecture for high-throughput distributed systems, partner with Product and Security, mentor engineers, and oversee on-call, incident response, and system reliability.

Assess and validate a high-volume Salesforce-to-AWS notification integration (S-Docs, VA Notify). Build and deploy integration components, implement DevSecOps (SAST/DAST/SCA), automate secrets/configuration, enable monitoring and error handling, and document architecture, risks, and compliance for federal ATO/RMF alignment.

Own and implement the platform's security and compliance posture (SOC 2, PCI, HIPAA). Design and automate controls and evidence pipelines, secure PII and tenant isolation across a multi-tenant platform, harden AI/LLM systems, partner with domains and CTO, and write production code to make compliance continuous and auditable.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Lead hands-on security engineer responsible for designing, implementing, hardening, automating, and optimizing enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Builds and maintains security platforms (SIEM, SOAR, XDR/EDR), develops detection logic, automates workflows, supports incident response, and partners with cross-functional teams to raise security engineering maturity and reduce risk.

Develop, implement, and maintain security policies and controls mapped to NIST CSF; manage policy and compliance workflows in ServiceNow IRM; perform risk assessments and gap analyses; support audit readiness and vendor assessments; produce dashboards and reports; lead security awareness and AI governance training; mentor junior analysts; collaborate with IT, risk, compliance, and business teams to drive remediation and policy adoption.

Design, implement, and improve security architecture across AWS and Azure. Harden identity and privilege models, integrate CNAPP/CSPM and AppSec into SDLC, drive vulnerability and patch management, enable SIEM telemetry, implement IAM/PAM/least-privilege, and promote zero trust across engineering and product teams.

Sell IonQ's quantum-security solutions to SLED accounts by identifying and closing opportunities around quantum-safe encryption and post-quantum readiness. Manage full sales cycle, engage CISOs and IT leaders, collaborate with technical teams, maintain pipeline in CRM, and represent the company at industry events. Drive strategic, solution-oriented deals in complex, consultative environments.

Lead cross-functional security initiatives: automate security tasks and incident response, manage HITRUST/SOC2/PCI assessments and remediation, evaluate and optimize security tools, secure software development (GitHub, code scanning, AI code), respond to audits, deliver training, and investigate and remediate security incidents to advance program maturity.

Lead multiple product security engineering teams to design, implement, and operate security controls across Allstate's technology ecosystem. Architect secure digital products, drive DevSecOps, CI/CD, cloud-native and application security best practices, integrate IAM/SIEM/vulnerability management, influence stakeholders, manage security product roadmaps, mentor engineers, and own production security KPIs and compliance.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Design and implement software security solutions for diabetes care and digital health products. Lead product security risk assessments, vulnerability remediation, secure coding practices, static analysis, and incident response. Mentor engineers, run security reviews, and ensure compliance with regulated medical software development and quality management systems.