Top Cyber Security Jobs in Minneapolis, MN

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Leads Insurity’s enterprise cybersecurity, information security, privacy, HIPAA, AI governance, risk, compliance, and incident response programs. The CISO sets security strategy, advises executives and the Board, oversees cloud, application, product, and infrastructure security, manages audits and regulatory obligations, directs crisis response, builds the security organization, and partners with customers, regulators, vendors, and cross-functional leadership to protect company and customer data.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Conduct continuous manual penetration testing across network, web application, cloud, and social engineering attack surfaces. Pursue findings through post-exploitation, lateral movement, privilege escalation, and business-impact validation. Communicate results to technical and non-technical clients, lead debriefs, improve team tooling, direct AI and automation, mentor junior testers, and collaborate with R&D to operationalize repeatable techniques.

Leads enterprise AI security and MLSecOps programs, designing secure AI architectures, threat models, controls, and operating models. Advises executives on AI risk, compliance, and transformation roadmaps; leads complex client engagements and multiple security projects. Embeds security into MLOps, DevSecOps, and CI/CD workflows, drives adversarial testing and continuous assurance, develops consulting offerings and proposals, mentors teams, and establishes enterprise standards and guardrails for AI and generative AI systems.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Lead security across Zeely’s AWS infrastructure, products, CI/CD pipelines, and compliance programs. Responsibilities include cloud hardening, IAM, vulnerability remediation, incident response, security monitoring, architecture and code reviews, and implementing SAST, DAST, SCA, and secrets scanning. The role owns SOC 2, ISO 27001, and CASA compliance, leads the security roadmap, establishes policies, guides DevOps and Platform teams, and supports enterprise customer security reviews.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Designs vulnerable and secure application fixtures addressing OWASP LLM risks, creates deterministic tests and security manifests, develops answer keys for AI and scanner evaluation, and improves AppSec assessment pipelines. The role also evaluates traditional and agent-based security architectures, documents technical findings, and collaborates on peer reviews and actionable security recommendations.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Monitors and investigates cybersecurity alerts, events, and incidents across enterprise systems, networks, cloud environments, and messaging platforms. The analyst triages alerts using SIEM, IDS, EDR, and related tools; communicates findings; supports incident response; improves detection coverage; prepares reports and briefings; maintains SOC procedures and documentation; and records activities in case management and ticketing systems.

Manages information security risk and compliance activities, including GovRAMP, NIST RMF, ATO support, SSPs, POA&Ms, control assessments, continuous monitoring, and SOC 2, ISO, customer, and third-party audits. Develops security policies, strengthens risk management, supports business continuity and disaster recovery, tracks compliance metrics, and drives remediation initiatives across the organization.

Leads enterprise security engineering across tools, cloud environments, identity, vulnerability management, incident response, compliance, and security operations. Oversees SIEM, endpoint, email, privileged access, and network security technologies; coordinates investigations, assessments, remediation, and managed security providers. Leads a three-person security team, mentors staff, improves workflows through automation, and communicates technical risks to leadership and clinical stakeholders.

Leads technical security engagements involving presentations, demonstrations, workshops, architecture design, and production-ready pilots. Designs and proves Microsoft and third-party cloud security, compliance, privacy, XDR, zero trust, and data protection solutions. Collaborates with sales, consulting, and partner teams, resolves technical and competitive blockers, influences strategy, and guides customer implementations. The role requires strong technical pre-sales or consulting experience and expertise in cloud, hybrid, and on-premises infrastructure.

Develop and manage enterprise data governance, classification, privacy, retention, and protection frameworks, with a focus on unstructured data. Own and optimize the firm’s DLP platform, policies, detection rules, and remediation processes. Lead data protection initiatives, evaluate governance technologies, track program metrics, and collaborate with legal, compliance, security, engineering, and business stakeholders to reduce information risk and meet regulatory requirements.

Automate security evidence generation and RMF control mapping to enable continuous authorization for U.S. Air Force systems. The role conducts audits and risk analyses, implements remediations, translates compliance requirements into engineering practices, documents inherited and implemented controls, and coaches government teams. It partners with security reviewers, authorizing officials, engineers, and contractors to embed security throughout the software delivery lifecycle.

Provides consultative pre-sales cybersecurity engineering for email security solutions. Leads customer discovery, assesses security architectures, designs solution proposals, delivers demonstrations and technical presentations, supports proofs of concept, collaborates with vendors, enables sales teams, and transitions closed opportunities to delivery teams. Focus areas include secure email gateways, phishing and BEC protection, API-based security, DLP, advanced threat protection, and hybrid cloud environments.

Leads the information security program across healthcare platforms, managing security teams, controls, vulnerabilities, cloud and data protection, monitoring, incident response, governance, risk, and compliance. Partners with Engineering, Infrastructure, DevOps, Compliance, and business leaders to reduce risk, improve incident readiness, support HIPAA, HITRUST, and SOC 2 requirements, and secure AI tools and third-party integrations.