Top Senior Cyber Security Jobs in Nashville, TN

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads cloud, application, data, and enterprise security architecture across a predominantly AWS-based healthcare environment. Designs security controls, IAM policies, network segmentation, infrastructure-as-code modules, automated detection and remediation, and CI/CD integrations. Provides technical leadership for incident response, vulnerability management, compliance validation, and secure Snowflake and generative AI workloads. Partners across engineering, cloud operations, reliability, data, architecture, and GRC teams while mentoring technical staff.

Conduct offensive security research focused on software supply chain threats, zero-day vulnerabilities, malicious code, third-party libraries, and CI/CD systems. Develop exploit techniques, collaborate on detection and mitigation capabilities, publish research through blogs and security conferences, and contribute open-source tools and methodologies. The role requires deep expertise in vulnerability research, reverse engineering, application security, exploit development, and software supply chain security.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads investigations of critical vulnerabilities, zero-days, KEVs, and security exposures. Correlates technical data, determines scope and impact, coordinates remediation, commands incidents, escalates potential compromises, and maintains operational continuity across coverage periods. The role also mentors analysts and collaborates with SOC, incident response, technology, and security teams to reduce enterprise risk.

Leads security compliance assessments and audit readiness across cloud infrastructure and delivery services. Translates regulatory standards into technical guidance, evaluates architectures and controls, conducts risk assessments, directs remediation, and develops compliance playbooks and automated monitoring workflows. The role also mentors team members, coordinates audit evidence collection, and represents the organization during external certification assessments and audits.

Embeds security across the software development lifecycle by leading threat modeling, security design reviews, application security assessments, red-team exercises, and secure architecture guidance. The role drives adoption of SAST, DAST, and SCA tooling, strengthens CI/CD and cloud security, supports fintech regulatory compliance, and advises engineering and product leadership on prioritized security risks.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Secure AI/ML models, data pipelines, and AI-enabled applications by conducting vulnerability assessments, threat modeling, incident response, and security reviews. Build guardrails, monitoring, detection, access controls, encryption, and data-segmentation measures. Partner with engineering and analytics teams throughout the AI development lifecycle, assess third-party AI tools, document remediation plans, and translate emerging threats such as prompt injection, data poisoning, jailbreaks, and model-supply-chain risks into practical mitigations.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Responsibilities include Kubernetes runtime isolation, identity and credential security, service mesh trust, Terraform infrastructure, fleet scaling, CI/CD, observability, auditability, human approval workflows, and governed agent integrations. The role also sets technical direction, mentors engineers, and partners across Product, Security, and Leadership to deliver secure, reliable distributed systems at scale.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Build and operate enterprise AI infrastructure for security teams, including model gateways, agent workflows, retrieval systems, evaluation, observability, and security guardrails. Drive adoption across detection, incident response, threat intelligence, vulnerability management, GRC, and security engineering. Develop production AI applications, establish governance and standards, measure impact, teach teams, and lead technical change through influence as a senior individual contributor.

Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.

Leads enterprise security reviews, threat modeling, architecture assessments, governance, and control development for AI, generative AI, machine learning, LLM, RAG, and AI-agent solutions. Defines security standards and guardrails, evaluates platforms and vendors, advises cross-functional stakeholders, and supports responsible AI adoption while managing cybersecurity, privacy, regulatory, and operational risks.

Own strategy and roadmap for KeeperPAM across privileged access, secrets management, secure remote access, endpoint privilege, discovery, and machine identity. Translate customer and technical needs into requirements, prioritize cross-product initiatives, partner with Engineering on integrations and architecture, conduct market analysis, define success metrics, and support go-to-market execution. The role requires strong PAM or related cybersecurity expertise, technical fluency in APIs and cloud-native DevOps environments, and effective collaboration with customers and cross-functional teams.

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.