Top Cyber Security Jobs in Minneapolis, MN

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.

Secures and hardens application, cloud, infrastructure, operating systems, containers, CI/CD pipelines, and networks across multi-cloud and on-premises environments. Improves patching and golden-image processes, scales AI-assisted SAST and SCA tooling, prioritizes vulnerabilities, validates fixes, tracks remediation metrics, creates reusable tooling and runbooks, mentors junior engineers, and partners with application and platform teams to deliver security improvements.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Lead AWS GovCloud security engineering and accreditation for pre-production modernization environments. Design secure cloud architectures, landing zones, IAM controls, network segmentation, infrastructure automation, containers, and CI/CD deployments. Own DoD RMF, IATT-C, and ATO packages, security controls, POA&Ms, vulnerability remediation, continuous monitoring, and cybersecurity assessments. Provide cloud and cybersecurity guidance for modernization, migration, data transition, Zero Trust, and ICAM initiatives while advising program leadership.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Defines enterprise OT cybersecurity strategy, architecture, standards, and roadmap across global manufacturing, distribution, and laboratory operations. Leads initiatives involving segmentation, monitoring, secure remote access, risk remediation, policy development, audits, and executive engagement. Partners with operational and engineering stakeholders to improve security, uptime, resilience, and organizational maturity.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Lead and enhance HKA's Azure infrastructure and Microsoft security stack. Manage cloud operations, identity and access controls, Zero Trust implementations, monitoring, incident response, threat modeling, risk remediation, and compliance alignment across a global hybrid environment.

Contract Security Analyst to design, implement, configure, and administer IAM platforms and directory services. Requires architecture and hands-on experience with Sun Identity/OpenSSO, Oracle IAM, OAM, and Sun/Oracle Directory Server. Work on cross-functional teams; experience with criminal justice systems, iterative development, and ITIL is preferred.

Design and implement Oracle IAM solutions across environments. Configure OAM/OAAM, customize login modules and admin UIs, implement federation, configure roles/policies in OIM, integrate applications via LDAP/database connectors, perform user loads/reconciliation, and provide knowledge transfer to BCA staff.

Lead PeopleSoft security for public-sector deployments: design and maintain security across instances, customize enterprise single sign-on, and lead full lifecycle PeopleSoft upgrades/implementations while ensuring accessibility compliance.

Provide ICS/OT cybersecurity consulting focused on networking, architecture, and policy development. Perform assessments and support asset, vulnerability, risk, and patch management programs. Develop policies, plans, procedures, and assessments aligned with IT/OT standards (ISO 27001/27002, ISA/IEC 62443, NERC CIP). Work independently with clients, often onsite in Minnesota, with significant travel as required.

Support information security and vendor risk management activities: perform due diligence for vendor assurance, track mitigation progress, contribute to policy and controls, report metrics, and assist security, risk, and compliance initiatives across the enterprise.

Support information security and risk management initiatives including vendor risk management, due diligence for vendor assurance, policy and standards development, tracking mitigation progress, reporting metrics, and contributing to security and compliance programs across the enterprise.

Perform automated and manual penetration tests on applications and infrastructure, assess security controls and network devices, document findings, and support remediation with development teams following industry best practices and frameworks.