Top Senior Cyber Security Jobs in Nashville, TN

Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.

Leads enterprise security reviews, threat modeling, architecture assessments, governance, and control development for AI, generative AI, machine learning, LLM, RAG, and AI-agent solutions. Defines security standards and guardrails, evaluates platforms and vendors, advises cross-functional stakeholders, and supports responsible AI adoption while managing cybersecurity, privacy, regulatory, and operational risks.

Own strategy and roadmap for KeeperPAM across privileged access, secrets management, secure remote access, endpoint privilege, discovery, and machine identity. Translate customer and technical needs into requirements, prioritize cross-product initiatives, partner with Engineering on integrations and architecture, conduct market analysis, define success metrics, and support go-to-market execution. The role requires strong PAM or related cybersecurity expertise, technical fluency in APIs and cloud-native DevOps environments, and effective collaboration with customers and cross-functional teams.

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

Owns vulnerability management, bug bounty, CSPM, agentic red-team, and continuous penetration-testing operations. The role triages and validates findings, prioritizes risk, coordinates remediation, verifies fixes, manages cloud and network security controls, and reports program metrics. It also evaluates and deploys emerging AI-driven security tooling, automates security workflows, supports perimeter security, and partners with engineering, infrastructure, GRC, and incident response teams.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Lead information security operations, GRC, incident readiness, and ISO 27001/42001 management systems. Own risk, controls, audits, identity, vendor and data-protection governance, while providing technical assurance across applications, cloud infrastructure, IAM, CI/CD, and AI systems. Build detection and response capabilities, lead investigations, establish AI security controls, and report material risk and remediation progress to leadership.

Leads hands-on security architecture and implementation for AWS cloud, software delivery, applications, and AI platforms. Builds secure-by-default Terraform/OpenTofu controls, identity and access patterns, CI/CD protections, vulnerability management, threat models, AI security evaluations, detection mechanisms, and incident remediation. Partners with engineering, CyberOps, Identity, GRC, and Privacy teams while mentoring engineers and translating security requirements into automated, reusable guardrails.

Staff Security Engineer responsible for securing AWS cloud, Infrastructure as Code, software delivery, applications, and AI platforms. The role defines security architecture, builds reusable Terraform/OpenTofu controls, strengthens identity and logging, secures GitHub Actions, conducts threat modeling, and develops protections for agentic AI systems. It also leads vulnerability remediation, detection and response improvements, incident root-cause analysis, security evaluations, and compliance evidence generation while mentoring engineers and influencing cross-functional teams.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Leads security solution strategy and technical engagements for global enterprise customers. Advises technical decision-makers, drives secure cloud adoption, designs architectures, leads demonstrations and proof-of-concepts, coaches technical sellers, and develops solution roadmaps. Partners with account teams, product and engineering groups, and external partners to deliver integrated Microsoft security solutions across cloud, hybrid, and on-premises environments.

Lead security across Zeely’s AWS infrastructure, products, CI/CD pipelines, and compliance programs. Responsibilities include cloud hardening, IAM, vulnerability remediation, incident response, security monitoring, architecture and code reviews, and implementing SAST, DAST, SCA, and secrets scanning. The role owns SOC 2, ISO 27001, and CASA compliance, leads the security roadmap, establishes policies, guides DevOps and Platform teams, and supports enterprise customer security reviews.

Designs vulnerable and secure application fixtures addressing OWASP LLM risks, creates deterministic tests and security manifests, develops answer keys for AI and scanner evaluation, and improves AppSec assessment pipelines. The role also evaluates traditional and agent-based security architectures, documents technical findings, and collaborates on peer reviews and actionable security recommendations.

Leads cloud and enterprise security architecture, security operations, incident response, threat hunting, detection engineering, automation, and security investigations. Designs Azure security solutions using Microsoft Sentinel, Defender, and related services; develops PowerShell and API integrations; evaluates AI-assisted security workflows; creates standards and documentation; leads technical projects; communicates risks; and mentors security team members.

Supports cloud, infrastructure, platform, and enterprise cybersecurity solutions. Responsibilities include designing and administering security technologies, troubleshooting, patching, incident response, governance, metrics, documentation, compliance, proof-of-concept evaluations, and on-call support. The role focuses heavily on IAM, UNIX permissions, privileged access, cloud IAM, user provisioning, and security controls, while advising junior engineers and supporting business teams and vendors.

Leads enterprise security engineering across tools, cloud environments, identity, vulnerability management, incident response, compliance, and security operations. Oversees SIEM, endpoint, email, privileged access, and network security technologies; coordinates investigations, assessments, remediation, and managed security providers. Leads a three-person security team, mentors staff, improves workflows through automation, and communicates technical risks to leadership and clinical stakeholders.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Leads technical security engagements involving presentations, demonstrations, workshops, architecture design, and production-ready pilots. Designs and proves Microsoft and third-party cloud security, compliance, privacy, XDR, zero trust, and data protection solutions. Collaborates with sales, consulting, and partner teams, resolves technical and competitive blockers, influences strategy, and guides customer implementations. The role requires strong technical pre-sales or consulting experience and expertise in cloud, hybrid, and on-premises infrastructure.