Top Senior Cyber Security Jobs in Nashville, TN

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Secure AI/ML models, data pipelines, and AI-enabled applications by conducting vulnerability assessments, threat modeling, incident response, and security reviews. Build guardrails, monitoring, detection, access controls, encryption, and data-segmentation measures. Partner with engineering and analytics teams throughout the AI development lifecycle, assess third-party AI tools, document remediation plans, and translate emerging threats such as prompt injection, data poisoning, jailbreaks, and model-supply-chain risks into practical mitigations.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Responsibilities include Kubernetes runtime isolation, identity and credential security, service mesh trust, Terraform infrastructure, fleet scaling, CI/CD, observability, auditability, human approval workflows, and governed agent integrations. The role also sets technical direction, mentors engineers, and partners across Product, Security, and Leadership to deliver secure, reliable distributed systems at scale.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Build and operate enterprise AI infrastructure for security teams, including model gateways, agent workflows, retrieval systems, evaluation, observability, and security guardrails. Drive adoption across detection, incident response, threat intelligence, vulnerability management, GRC, and security engineering. Develop production AI applications, establish governance and standards, measure impact, teach teams, and lead technical change through influence as a senior individual contributor.

Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.

Leads enterprise security reviews, threat modeling, architecture assessments, governance, and control development for AI, generative AI, machine learning, LLM, RAG, and AI-agent solutions. Defines security standards and guardrails, evaluates platforms and vendors, advises cross-functional stakeholders, and supports responsible AI adoption while managing cybersecurity, privacy, regulatory, and operational risks.

Own strategy and roadmap for KeeperPAM across privileged access, secrets management, secure remote access, endpoint privilege, discovery, and machine identity. Translate customer and technical needs into requirements, prioritize cross-product initiatives, partner with Engineering on integrations and architecture, conduct market analysis, define success metrics, and support go-to-market execution. The role requires strong PAM or related cybersecurity expertise, technical fluency in APIs and cloud-native DevOps environments, and effective collaboration with customers and cross-functional teams.

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Leads hands-on security architecture and implementation for AWS cloud, software delivery, applications, and AI platforms. Builds secure-by-default Terraform/OpenTofu controls, identity and access patterns, CI/CD protections, vulnerability management, threat models, AI security evaluations, detection mechanisms, and incident remediation. Partners with engineering, CyberOps, Identity, GRC, and Privacy teams while mentoring engineers and translating security requirements into automated, reusable guardrails.

Staff Security Engineer responsible for securing AWS cloud, Infrastructure as Code, software delivery, applications, and AI platforms. The role defines security architecture, builds reusable Terraform/OpenTofu controls, strengthens identity and logging, secures GitHub Actions, conducts threat modeling, and develops protections for agentic AI systems. It also leads vulnerability remediation, detection and response improvements, incident root-cause analysis, security evaluations, and compliance evidence generation while mentoring engineers and influencing cross-functional teams.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Lead security across Zeely’s AWS infrastructure, products, CI/CD pipelines, and compliance programs. Responsibilities include cloud hardening, IAM, vulnerability remediation, incident response, security monitoring, architecture and code reviews, and implementing SAST, DAST, SCA, and secrets scanning. The role owns SOC 2, ISO 27001, and CASA compliance, leads the security roadmap, establishes policies, guides DevOps and Platform teams, and supports enterprise customer security reviews.

Designs vulnerable and secure application fixtures addressing OWASP LLM risks, creates deterministic tests and security manifests, develops answer keys for AI and scanner evaluation, and improves AppSec assessment pipelines. The role also evaluates traditional and agent-based security architectures, documents technical findings, and collaborates on peer reviews and actionable security recommendations.

Leads cloud and enterprise security architecture, security operations, incident response, threat hunting, detection engineering, automation, and security investigations. Designs Azure security solutions using Microsoft Sentinel, Defender, and related services; develops PowerShell and API integrations; evaluates AI-assisted security workflows; creates standards and documentation; leads technical projects; communicates risks; and mentors security team members.