Top Cyber Security Jobs in Minneapolis, MN

Lead enterprise security architecture across cloud, application, infrastructure, identity, data, and third-party environments. Develop security principles, standards, patterns, and controls; review designs; conduct threat modeling and risk assessments; guide secure-by-design implementations; and advise technical and business stakeholders. The role also supports regulatory compliance, evaluates security technologies, and strengthens organizational security practices.

Manages cybersecurity compliance and authorization for Air Force NIPR systems. Responsibilities include developing and maintaining system security plans, supporting RMF accreditation, conducting audits and inspections, managing POA&Ms, STIGs, IAVM compliance, continuous monitoring, FISMA requirements, security testing, and ATO activities. The role also provides tactical security guidance, assesses technology risks, and coordinates cybersecurity activities across multi-contractor teams and cloud and on-premises environments.

The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Assesses enterprise information security risks, performs vulnerability and security posture assessments, and coordinates remediation across networks, systems, applications, and vendors. Develops security policies and standards aligned with SOX, PCI, HIPAA, and NIST guidance; supports audits, incident response, training, access monitoring, and security projects. Communicates technical risks and corrective actions to technical and nontechnical stakeholders while mentoring teams and managing competing priorities.

Supports cybersecurity governance, risk, and compliance consulting engagements. Responsibilities include conducting discovery, gathering evidence, maintaining risk registers, mapping controls to frameworks, performing gap and maturity assessments, reviewing policies, evaluating third-party risk, drafting client deliverables, and supporting workshops and client communications. The role contributes to proposals, reusable consulting assets, and practice development while building foundational GRC expertise under senior consultant guidance.

The ISSO plans, implements, and maintains the Risk Management Framework for assigned systems; develops security documentation including SSPs, SARs, and POA&Ms; supports the ISSM; collaborates with system owners and security professionals; provides training and briefings; and ensures compliance with DoD and DoN cybersecurity policies.

Lead technical discovery, customized demonstrations, and proofs of value for enterprise CTEM customers. Map vulnerability, asset, ticketing, and remediation workflows; integrate customer tools; prove exposure-management outcomes using customer data; and communicate findings to engineers, CISOs, and executives. Maintain presales deal information, provide product feedback, create reusable demo and POV assets, and expand expertise into third-party risk management and cyber risk quantification.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Manage enterprise and federal cybersecurity compliance programs, audit readiness, continuous monitoring, POA&M remediation, third-party risk, policy governance, documentation, and security training. Coordinate cross-functional stakeholders across Security, Engineering, DevOps, IT, GRC, Procurement, and Legal. Maintain compliance plans, evidence, risk registers, control documentation, and audit-ready materials while supporting FedRAMP High, DoD IL5, SOC 2, ISO 27001, and related requirements.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Supports enterprise cybersecurity and GRC programs through third-party risk assessments, security testing coordination, corrective action tracking, policy development, compliance support, incident response planning, disaster recovery exercises, and enforcement of technical and administrative controls. Partners with engineering, operations, managed security providers, and internal stakeholders to strengthen security posture across cloud and hybrid environments.

Owns company-wide security operations, cloud and infrastructure security, incident response, zero-trust architecture, blockchain treasury controls, compliance, privacy, production reliability, Terraform, CI/CD, observability, disaster recovery, and on-call operations. This hands-on leadership role reports to the CTO, represents the company to auditors and customers, and builds security automation across GCP, Cloudflare, GitHub, Google Workspace, and Ethereum infrastructure.

Lead product security for embedded transportation and HVAC control platforms. Responsibilities include risk management, threat modeling, security DFMEA, penetration testing, vulnerability management, regulatory type approval, secure OTA updates, cryptographic assurance, privacy compliance, and security-tool oversight. The role guides cross-functional engineering teams, maintains cybersecurity and software-update management evidence, and ensures compliance with automotive and industrial security standards.

Performs cybersecurity gap and risk assessments across applications, cloud environments, infrastructure, and business processes. Analyzes security findings and evidence, documents requirements and remediation actions, prioritizes risks with stakeholders, tracks remediation, validates completion, and escalates material issues. Supports security metrics, reporting, standards, procedures, and continuous improvement while providing practical guidance to technical and non-technical teams.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Lead Pomelo Care’s enterprise security governance, risk, and compliance program. Own SOC 2 Type II and HITRUST certification lifecycles, security policies, access governance, HIPAA risk assessments, awareness training, control monitoring, incident response, and third-party risk assessments. Partner with engineering leadership to align technical roadmaps with security strategy, represent the company during audits and partner due diligence, and report security posture and program maturity to executives.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.