Top Cyber Security Jobs in Minneapolis, MN

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Lead security advisory engagements focused on cybersecurity and data governance. Conduct program assessments, design and operationalize data governance programs, produce client deliverables, mentor consultants, support sales with scoping and proposals, and contribute to practice development, thought leadership, and forecasting to drive advisory services revenue.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Serve as part-vCISO and account manager: assess client security posture, design and customize security programs mapping controls to infrastructure, liaise with auditors, guide implementations, advise engineering on integrations, and communicate with stakeholders to ensure compliance and operational security.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Perform advanced security evaluations and research on embedded devices, including firmware reverse engineering, low-level code review, hardware hacking, exploit development, and vulnerability assessments. Build tools, communicate findings to technical and non-technical stakeholders, publish research, and support engagement scoping and business development.

Lead multiple product security engineering teams to design, implement, and operate security controls across Allstate's technology ecosystem. Architect secure digital products, drive DevSecOps, CI/CD, cloud-native and application security best practices, integrate IAM/SIEM/vulnerability management, influence stakeholders, manage security product roadmaps, mentor engineers, and own production security KPIs and compliance.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.