Top Cyber Security Jobs in Minneapolis, MN

Leads information security audit engagements from planning through reporting, evaluating risks, controls, audit evidence, and management action plans. Reviews audit work for quality and compliance with internal policies and IIA Standards, monitors schedules, coaches audit staff, and collaborates across lines of defense. The role requires strong cybersecurity knowledge across areas such as cloud architecture, APIs, DevSecOps, encryption, Zero Trust, and vulnerability management, along with experience applying technology frameworks and conducting risk-focused audits.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Own enterprise security reference architectures, secure-by-design standards, and modernization roadmaps. Lead architecture transformation, threat modeling, risk reviews, and regulatory control mapping across Azure and hybrid environments. Build AI-enabled security automation, guide distributed delivery teams, review designs, mentor engineers, and align security architecture with operations, compliance, product, and platform stakeholders.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Cybersecurity Engineering Intern will help analyze, implement, monitor, troubleshoot, and enhance the company’s security posture. Responsibilities include recommending security controls, monitoring compliance, investigating suspicious activity, triaging alerts, and implementing security technologies such as firewalls, antivirus, IDS, IPS, web content filters, and Windows security services. The intern will work alongside experienced cybersecurity engineers while gaining hands-on experience in security engineering and operations.

Leads the enterprise-wide cybersecurity strategy, governance, risk management, compliance, architecture, operations, incident response, resilience, and security awareness programs. Oversees security teams, budgets, third-party providers, audits, regulatory examinations, and remediation. Advises executives, the Board, and regulators on cyber risk, emerging threats, and digital resilience while building a mature information security program for a regulated financial institution.

Advances application security within a DevSecOps model by embedding controls into the SDLC, conducting SAST, DAST, SCA, threat modeling, and code reviews, integrating security tools into CI/CD pipelines, and managing vulnerability remediation. The role collaborates with software, cloud, and DevOps teams across AWS and Azure, supports security investigations and compliance initiatives, and enables developers through secure coding guidance and automation.

Provides Tier 2 cybersecurity support through security monitoring, incident response, vulnerability and endpoint management, identity and access management, security awareness training, compliance support, documentation, and reporting. The role investigates phishing, malware, and other incidents; administers Microsoft Defender XDR and related security tools; coordinates remediation; supports MFA and access reviews; and communicates security risks and remediation steps to internal and external stakeholders.

Designs and implements cybersecurity solutions protecting products, critical assets, and customer data. Develops AI workflows, automates Product Cyber processes, and integrates security services into software development lifecycles and products. Collaborates with development and operations teams to identify vulnerabilities and create mitigation strategies. Supports high-volume product certificate issuance and product-element signing services.

Design, implement, and maintain product cybersecurity solutions protecting products, critical assets, and customer data. Develop AI workflows, automate product security processes, and integrate security services into software development lifecycles and products. Collaborate with development and operations teams on vulnerability mitigation, DevSecOps, system integration, and product security services supporting large-scale certificate issuance and product-element signing.

Performs security testing and penetration testing across Honeywell building automation products and partner technologies. Uses application, network, firmware, and hardware security tools to identify vulnerabilities, develop repeatable testing processes, automate assessments, document findings, and recommend remediation. Collaborates with product security, tools, technology, and cross-functional engineering teams while monitoring emerging threats and supporting secure-by-design practices.

Conduct security testing and penetration assessments across Honeywell building automation products and partner technologies. Identify security defects, evaluate product security posture, recommend remediation, and help develop repeatable testing processes. Collaborate with tools and technology teams to select, implement, and automate security testing tools, while reporting findings consistently and supporting secure product development.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Manages security operations personnel, processes, customer services, metrics, incident escalations, ticket triage, and operational response. The role develops and improves security processes, analyzes service performance, leads incident-management training, mentors technical teams, collaborates across business units, and supports recruitment capacity planning. Candidates should have cybersecurity experience, knowledge of industry frameworks, and at least four years managing a SOC or customer support function.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Leads cybersecurity competitive strategy and execution, including deal coaching, competitive positioning, win/loss analysis, compete playbooks, field enablement, and cross-functional recommendations for sales, product, engineering, marketing, and partner teams. The role focuses on Google Security, Mandiant, Wiz, and Microsoft Security competitive scenarios, translating market and customer insights into scalable go-to-market motions and product strategy.