Top Cyber Security Jobs in Nashville, TN

Designs, documents, tests, and maintains IT general and security controls across corporate, engineering, SaaS, and cloud-native systems. The role maps controls across SOX, SOC 2, ISO, NIST, PCI-DSS, privacy, and contractual requirements; manages audits, access reviews, change-management testing, remediation, policy work, and evidence automation. It also establishes governance standards for enterprise AI use and partners with IT, Security, Engineering, Finance, Legal, Privacy, and auditors.

Build and operate scalable security tooling, applications, APIs, and automation for CrowdStrike’s global multi-cloud Product Security environment. Responsibilities include software supply chain security, AI-powered vulnerability discovery, platform visibility, risk assessments, CI/CD, SRE operations, datastore management, monitoring, and incident response support. The role partners across Product Security to define tooling strategy and maintain mission-critical security services.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Lead infrastructure security for GitLab’s FedRAMP and federal cloud environments. Set technical direction, architecture, security automation, and compliance patterns; own security posture; lead threat modeling, security reviews, continuous monitoring, and authorization-impacting initiatives. Partner with SRE, engineering, compliance, and leadership to drive remediation and roadmap decisions. Apply AI to constrained security workflows, mentor engineers, and influence security practices across GitLab offerings.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Performs IT audits and cybersecurity control validation for complex systems, applications, enclaves, and classified or unclassified networks. Assesses vulnerabilities, risks, security requirements, and mitigation effectiveness against Federal and DoD standards. Provides technical evaluations and recommends security improvements while balancing business needs with security concerns. Requires experience with RMF, DODI 8500.2 or NIST SP 800-53, eMASS, network implementation, and an active DoD Secret clearance.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads cybersecurity consulting across the customer lifecycle, supporting presales demonstrations, proof-of-concepts, executive reviews, cyber skills programs, crisis simulations, and platform adoption. Advises strategic customers on cyber resilience, risk measurement, security initiatives, and program roadmaps. Partners with sales, product, content, and engineering teams while serving as a trusted embedded advisor and escalation point.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Lead product cybersecurity for connected heart-recovery medical devices across development and post-market lifecycles. Responsibilities include security architecture, threat modeling, risk assessments, cryptographic controls, secure boot, firmware protection, PKI, vulnerability management, penetration testing, SBOM analysis, secure OTA updates, regulatory submissions, and remediation planning. The role partners with R&D and cross-functional teams to implement secure development practices, embedded protections, cloud and device security, and compliance with medical-device cybersecurity standards.

Analyzes and responds to cyber threats, documents security risks and incidents, supports threat hunting and incident response, assesses security posture, and participates in security architecture, red team, purple team, and tabletop assessments. The role also mentors junior analysts, supports compliance and GRC activities, investigates security tool findings, and contributes to process improvements. It requires rotational on-call availability and onsite work three or more days weekly.

Analyzes and responds to cyber threats, documents security risks and incidents, supports threat hunting and incident response, conducts security assessments, evaluates software for cybersecurity standard violations, and collaborates across security teams. The role also mentors junior analysts, supports GRC and compliance activities, performs root-cause and IOC analysis, and contributes to process improvements, tabletop exercises, and remediation efforts.

Analyzes and responds to cyber threats, documents security risks and incidents, supports threat hunting and incident response, participates in security assessments, reviews software compliance, and helps improve cybersecurity processes. The role collaborates across cybersecurity and technology teams, maintains detailed investigation records, monitors threat trends, and mentors junior analysts. Work is onsite or hybrid at designated Alabama, Georgia, Tennessee, or North Carolina locations, with rotational on-call responsibilities.

Supports Humana’s Product Security program by triaging and adjudicating vulnerability findings, assessing application security risks, and providing remediation guidance. Partners with engineering, architecture, and cybersecurity teams on secure SDLC practices, SAST, SCA, secrets detection, risk acceptance, and security exception workflows. The role also develops operational documentation, runbooks, and escalation processes while improving enterprise application security posture.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Build, validate, tune, and operate security detections across SIEM, XDR, cloud, identity, endpoint, network, email, and application platforms. Investigate incidents, perform root-cause analysis, improve controls, validate telemetry, automate response workflows, maintain detection lifecycle processes, and support hybrid and multi-cloud security environments. The role includes on-call participation, documentation, threat hunting, attack simulation, purple teaming, and collaboration with security, infrastructure, cloud, networking, and application teams.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.