Top Cyber Security Jobs in Ogden, UT

Provides multidisciplinary security support for Special Access Programs, SCI, and classified activities. Ensures compliance with NISPOM, DoD, ICD, and SAP requirements; develops security policies and training; assesses vulnerabilities and risks; oversees facility compliance reviews and corrective actions; briefs personnel; supports investigations into classified information compromises; and coordinates security education and awareness programs.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and on-site work with occasional travel.

Leads Lilly’s enterprise security posture and exposure management organization. Owns vulnerability management strategy, scanning architecture, application security integration, offensive security oversight, risk-based prioritization, remediation SLAs, exposure reporting, tooling, automation, vendors, budget, and executive accountability. The role requires deep hands-on cybersecurity expertise and experience leading leaders across enterprise-scale vulnerability management or security operations.

Designs and builds secure AWS infrastructure for a regulated SaaS platform. Responsibilities include cloud security architecture, IAM, networking, containers, encryption, logging, monitoring, automated guardrails, risk remediation, reference architectures, and engineering mentorship. The role partners with application security and infrastructure teams to secure AWS environments across design and production, supporting compliance for financial services customers.

Design and lead the application security program centered on Wiz. Automate security throughout the SDLC, including code, dependency, secrets, container, infrastructure-as-code, and release scanning. Establish threat modeling, secure design reviews, and guardrails for AI-assisted development. Improve developer adoption by delivering accurate findings within existing tools, while mentoring the AppSec team and partnering with cloud and AI security architects.

Lead enterprise security architecture across software procurement, on-premises data centers, networks, infrastructure, identity, encryption, privileged access, and zero-trust design. Establish security standards, conduct practical third-party software and SaaS reviews, support cloud and application security architects, identify cross-domain gaps, and advise executives and engineering teams. The role requires broad cybersecurity expertise, regulated-industry experience, and strong risk-based decision-making.

Secure and maintain ServiceNow platforms across federal environments by implementing NIST, RMF, FedRAMP, and security hardening controls. Manage ATO packages, SSPs, POA&Ms, vulnerability remediation, monitoring, SIEM integrations, access governance, incident response, audits, configuration baselines, and secure ServiceNow development. Collaborate with platform teams, assessors, auditors, and system owners while reporting security posture metrics and leading security capability rollouts.

Design, administer, optimize, and support enterprise endpoint security platforms across a global environment. The role develops security baselines, hardening standards, automation workflows, and detection capabilities; investigates security events; supports incident response; evaluates security technologies; and partners with Cyber Operations, Infrastructure, Desktop Engineering, Identity, and DevOps/SecOps teams. Responsibilities include managing EDR, PAM, firewall, device control, API integrations, and security projects while improving overall endpoint security posture.

Supports Account Executives and senior engineers in qualifying, positioning, and solutioning Application Security and AI security opportunities. The role involves customer discovery, explaining security risks and architectural tradeoffs, demonstrating solutions, developing proposals and Statements of Work, researching emerging technologies, and participating in sales events. It focuses on DevSecOps, secure SDLC, AppSec, AI security, AI governance, and related technologies, with up to 25% travel.

Conduct application security consulting and red team engagements for enterprise clients. Assess web, API, mobile, and AI-enabled applications; perform threat analysis, reconnaissance, penetration testing, and vulnerability validation; document findings, analyze risk and root causes, and recommend practical remediation. The role also supports network, Active Directory, wireless, social engineering, and security control bypass testing while maintaining client-focused communication and producing high-quality reports.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Serves as the primary ISSO for classified, air-gapped federal cloud environments. Manages ATO/RMF documentation, NIST 800-53 controls, DISA STIG compliance, Tenable.sc and Nessus vulnerability scanning, offline content updates, remediation tracking, audit readiness, incident response, and continuous monitoring. Partners with cloud and infrastructure teams to improve secure configurations and automate vulnerability and compliance workflows.

Leads technical pre-sales engagements for Microsoft security and compliance solutions. Designs architectures, delivers presentations, demonstrations, workshops, pilots, and proof-of-concept solutions focused on XDR, zero trust, cloud security, Purview, data protection, governance, privacy, and compliance. Partners with sales, consulting, and internal and external technical teams to resolve blockers, influence competitive strategy, and help customers implement Microsoft and third-party cloud security technologies.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Build and lead Motive’s globally distributed SOC, owning detection engineering, 24/7 incident response, threat hunting, intelligence, security analytics, endpoint protection, cloud and workload monitoring, and AI-driven automation. Establish operating models, coverage strategies, runbooks, telemetry platforms, incident command processes, and measurable detection and response capabilities across corporate and production environments.

Lead product and application security strategy for the Endor Labs platform. Build scalable security tooling and automation, validate and remediate vulnerabilities, prevent insecure code merges, and apply LLMs and AI agents to security workflows. Conduct threat modeling and secure design reviews, secure CI/CD and build systems, influence product roadmaps, and collaborate with engineering, product, customers, and security stakeholders.

Implements and operates data security controls across cloud analytics platforms, databases, data lakes, storage, and pipelines. Responsibilities include encryption, key and secrets management, least-privilege access, data classification, masking, tokenization, database hardening, secure integrations, entitlement reviews, automation, telemetry, compliance evidence, threat modeling, documentation, and technical support. The role collaborates with security, data, governance, engineering, and IT teams while working remotely.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.