Top Cyber Security Jobs in Minneapolis, MN

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Leads information security audit engagements from planning through reporting, evaluating risks, controls, audit evidence, and management action plans. Reviews audit work for quality and compliance with internal policies and IIA Standards, monitors schedules, coaches audit staff, and collaborates across lines of defense. The role requires strong cybersecurity knowledge across areas such as cloud architecture, APIs, DevSecOps, encryption, Zero Trust, and vulnerability management, along with experience applying technology frameworks and conducting risk-focused audits.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Cybersecurity Engineering Intern will help analyze, implement, monitor, troubleshoot, and enhance the company’s security posture. Responsibilities include recommending security controls, monitoring compliance, investigating suspicious activity, triaging alerts, and implementing security technologies such as firewalls, antivirus, IDS, IPS, web content filters, and Windows security services. The intern will work alongside experienced cybersecurity engineers while gaining hands-on experience in security engineering and operations.

Leads the enterprise-wide cybersecurity strategy, governance, risk management, compliance, architecture, operations, incident response, resilience, and security awareness programs. Oversees security teams, budgets, third-party providers, audits, regulatory examinations, and remediation. Advises executives, the Board, and regulators on cyber risk, emerging threats, and digital resilience while building a mature information security program for a regulated financial institution.

Advances application security within a DevSecOps model by embedding controls into the SDLC, conducting SAST, DAST, SCA, threat modeling, and code reviews, integrating security tools into CI/CD pipelines, and managing vulnerability remediation. The role collaborates with software, cloud, and DevOps teams across AWS and Azure, supports security investigations and compliance initiatives, and enables developers through secure coding guidance and automation.

Provides Tier 2 cybersecurity support through security monitoring, incident response, vulnerability and endpoint management, identity and access management, security awareness training, compliance support, documentation, and reporting. The role investigates phishing, malware, and other incidents; administers Microsoft Defender XDR and related security tools; coordinates remediation; supports MFA and access reviews; and communicates security risks and remediation steps to internal and external stakeholders.

Designs and implements cybersecurity solutions protecting products, critical assets, and customer data. Develops AI workflows, automates Product Cyber processes, and integrates security services into software development lifecycles and products. Collaborates with development and operations teams to identify vulnerabilities and create mitigation strategies. Supports high-volume product certificate issuance and product-element signing services.

Design, implement, and maintain product cybersecurity solutions protecting products, critical assets, and customer data. Develop AI workflows, automate product security processes, and integrate security services into software development lifecycles and products. Collaborate with development and operations teams on vulnerability mitigation, DevSecOps, system integration, and product security services supporting large-scale certificate issuance and product-element signing.

Performs security testing and penetration testing across Honeywell building automation products and partner technologies. Uses application, network, firmware, and hardware security tools to identify vulnerabilities, develop repeatable testing processes, automate assessments, document findings, and recommend remediation. Collaborates with product security, tools, technology, and cross-functional engineering teams while monitoring emerging threats and supporting secure-by-design practices.

Conduct security testing and penetration assessments across Honeywell building automation products and partner technologies. Identify security defects, evaluate product security posture, recommend remediation, and help develop repeatable testing processes. Collaborate with tools and technology teams to select, implement, and automate security testing tools, while reporting findings consistently and supporting secure product development.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.