Top Cyber Security Jobs in Minneapolis, MN

Sets the technical vision for enterprise security across cloud, identity, application, data, endpoint, and network environments. Leads security architecture, threat modeling, DevSecOps, incident response, compliance evidence, security roadmap planning, and AI security initiatives. Advises executives and cross-functional stakeholders, handles high-severity escalations, mentors security engineers, and strengthens healthcare security controls for AWS, Azure, FHIR, Medplum, Snowflake, HITRUST, HIPAA, and NIST requirements.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Secure an integrated supply chain e-commerce platform across application, infrastructure, authentication, compliance, and AI agent layers. Responsibilities include threat modeling, vulnerability assessments, code reviews, PCI-DSS and GDPR controls, OAuth/SAML authentication, tenant isolation, secrets management, encryption, WAF and rate limiting, incident response, security training, and AI prompt-injection prevention. The intern will work remotely for three months under technical leadership and collaborate with development and DevOps teams.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Secure AI/ML models, data pipelines, and AI-enabled applications by conducting vulnerability assessments, threat modeling, incident response, and security reviews. Build guardrails, monitoring, detection, access controls, encryption, and data-segmentation measures. Partner with engineering and analytics teams throughout the AI development lifecycle, assess third-party AI tools, document remediation plans, and translate emerging threats such as prompt injection, data poisoning, jailbreaks, and model-supply-chain risks into practical mitigations.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Responsibilities include Kubernetes runtime isolation, identity and credential security, service mesh trust, Terraform infrastructure, fleet scaling, CI/CD, observability, auditability, human approval workflows, and governed agent integrations. The role also sets technical direction, mentors engineers, and partners across Product, Security, and Leadership to deliver secure, reliable distributed systems at scale.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Provides vulnerability management and continuous monitoring support for regulated cloud environments. Responsibilities include investigating vulnerabilities, managing scans and false positives, creating POA&Ms, communicating alerts and remediation strategies, configuring scanning tools, automating repeatable tasks, documenting findings, coordinating escalations, and supporting compliance frameworks such as FedRAMP. The role also liaises with clients, SRE teams, auditors, and internal security operations personnel.

Build and operate enterprise AI infrastructure for security teams, including model gateways, agent workflows, retrieval systems, evaluation, observability, and security guardrails. Drive adoption across detection, incident response, threat intelligence, vulnerability management, GRC, and security engineering. Develop production AI applications, establish governance and standards, measure impact, teach teams, and lead technical change through influence as a senior individual contributor.

Design and implement security across infrastructure, applications, data, and AI systems. Own authentication, authorization, tenant isolation, secure log ingestion and querying, and AI security risk mitigation. Lead security incident response and postmortems, establish practical security practices, and partner with engineering to integrate security into development. The role requires application or infrastructure security experience, knowledge of OWASP vulnerabilities, and experience securing distributed systems and APIs.

Leads enterprise security reviews, threat modeling, architecture assessments, governance, and control development for AI, generative AI, machine learning, LLM, RAG, and AI-agent solutions. Defines security standards and guardrails, evaluates platforms and vendors, advises cross-functional stakeholders, and supports responsible AI adoption while managing cybersecurity, privacy, regulatory, and operational risks.

Own strategy and roadmap for KeeperPAM across privileged access, secrets management, secure remote access, endpoint privilege, discovery, and machine identity. Translate customer and technical needs into requirements, prioritize cross-product initiatives, partner with Engineering on integrations and architecture, conduct market analysis, define success metrics, and support go-to-market execution. The role requires strong PAM or related cybersecurity expertise, technical fluency in APIs and cloud-native DevOps environments, and effective collaboration with customers and cross-functional teams.

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Leads Insurity’s enterprise cybersecurity, information security, privacy, HIPAA, AI governance, risk, compliance, and incident response programs. The CISO sets security strategy, advises executives and the Board, oversees cloud, application, product, and infrastructure security, manages audits and regulatory obligations, directs crisis response, builds the security organization, and partners with customers, regulators, vendors, and cross-functional leadership to protect company and customer data.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Conduct continuous manual penetration testing across network, web application, cloud, and social engineering attack surfaces. Pursue findings through post-exploitation, lateral movement, privilege escalation, and business-impact validation. Communicate results to technical and non-technical clients, lead debriefs, improve team tooling, direct AI and automation, mentor junior testers, and collaborate with R&D to operationalize repeatable techniques.

Leads enterprise AI security and MLSecOps programs, designing secure AI architectures, threat models, controls, and operating models. Advises executives on AI risk, compliance, and transformation roadmaps; leads complex client engagements and multiple security projects. Embeds security into MLOps, DevSecOps, and CI/CD workflows, drives adversarial testing and continuous assurance, develops consulting offerings and proposals, mentors teams, and establishes enterprise standards and guardrails for AI and generative AI systems.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.