Top Cyber Security Jobs in Portland, OR

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Leads technical pre-sales engagements for Microsoft security and compliance solutions. Designs architectures, delivers presentations, demonstrations, workshops, pilots, and proof-of-concept solutions focused on XDR, zero trust, cloud security, Purview, data protection, governance, privacy, and compliance. Partners with sales, consulting, and internal and external technical teams to resolve blockers, influence competitive strategy, and help customers implement Microsoft and third-party cloud security technologies.

Reviews client evidence and controls for SOC 2, ISO 27001, PCI, HIPAA, and GDPR audit readiness. Supports security program managers with client consultations, control implementation, policies, procedures, integrations, auditor coordination, and stakeholder communication. Identifies evidence gaps, documents actionable findings, tracks readiness metrics, contributes to QA standards, and provides product feedback. The role combines internal audit quality assurance with client-facing security compliance support.

Support backend, database, API, authentication, authorization, and security improvements for a live HR platform. Responsibilities include identifying vulnerabilities, improving tenant isolation and access controls, maintaining database integrity and performance, monitoring production issues, writing automated tests, reviewing dependencies, documenting changes, and assisting with backups, migrations, and deployment testing.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

Designs and builds secure AWS infrastructure for a regulated SaaS platform. Responsibilities include cloud security architecture, IAM, networking, containers, encryption, logging, monitoring, automated guardrails, risk remediation, reference architectures, and engineering mentorship. The role partners with application security and infrastructure teams to secure AWS environments across design and production, supporting compliance for financial services customers.

Design and lead the application security program centered on Wiz. Automate security throughout the SDLC, including code, dependency, secrets, container, infrastructure-as-code, and release scanning. Establish threat modeling, secure design reviews, and guardrails for AI-assisted development. Improve developer adoption by delivering accurate findings within existing tools, while mentoring the AppSec team and partnering with cloud and AI security architects.

Lead enterprise security architecture across software procurement, on-premises data centers, networks, infrastructure, identity, encryption, privileged access, and zero-trust design. Establish security standards, conduct practical third-party software and SaaS reviews, support cloud and application security architects, identify cross-domain gaps, and advise executives and engineering teams. The role requires broad cybersecurity expertise, regulated-industry experience, and strong risk-based decision-making.

Secure and maintain ServiceNow platforms across federal environments by implementing NIST, RMF, FedRAMP, and security hardening controls. Manage ATO packages, SSPs, POA&Ms, vulnerability remediation, monitoring, SIEM integrations, access governance, incident response, audits, configuration baselines, and secure ServiceNow development. Collaborate with platform teams, assessors, auditors, and system owners while reporting security posture metrics and leading security capability rollouts.

Design, administer, optimize, and support enterprise endpoint security platforms across a global environment. The role develops security baselines, hardening standards, automation workflows, and detection capabilities; investigates security events; supports incident response; evaluates security technologies; and partners with Cyber Operations, Infrastructure, Desktop Engineering, Identity, and DevOps/SecOps teams. Responsibilities include managing EDR, PAM, firewall, device control, API integrations, and security projects while improving overall endpoint security posture.

Supports Account Executives and senior engineers in qualifying, positioning, and solutioning Application Security and AI security opportunities. The role involves customer discovery, explaining security risks and architectural tradeoffs, demonstrating solutions, developing proposals and Statements of Work, researching emerging technologies, and participating in sales events. It focuses on DevSecOps, secure SDLC, AppSec, AI security, AI governance, and related technologies, with up to 25% travel.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Lead product and application security strategy for the Endor Labs platform. Build scalable security tooling and automation, validate and remediate vulnerabilities, prevent insecure code merges, and apply LLMs and AI agents to security workflows. Conduct threat modeling and secure design reviews, secure CI/CD and build systems, influence product roadmaps, and collaborate with engineering, product, customers, and security stakeholders.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.

Owns and strengthens the security posture of cloud-based SaaS and Microsoft 365 environments. Responsibilities include vulnerability management, incident response, cloud and endpoint hardening, identity and data protection, secure configuration, monitoring, compliance evidence, customer security reviews, and risk management aligned with HITRUST, HIPAA, NIST, and related frameworks.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Monitors and responds to security alerts and incidents across SIEM, endpoint, cloud, email, and network security tools. Collaborates with IT teams and service providers, improves security policies and procedures, supports ISO 27001 and SOC compliance, assists with audits and security assessments, and provides regional IT security support, including occasional out-of-hours incident response.

Leads cybersecurity solution sales for enterprise and small-to-medium business customers. Builds security transformation strategies, identifies and qualifies opportunities, develops pipelines, conducts consultative conversations, and drives complex cloud solution deals through closure. Partners with internal teams and channel partners on proposals, account planning, forecasting, competitive strategy, events, and customer outcomes. Serves as a cybersecurity subject matter expert, mentors colleagues, and supports customer adoption of AI, cloud, and security solutions.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Owns NIKE’s SAP security strategy, multi-year roadmaps, governance, and compliance framework. Leads SAP security planning, service partner delivery, risk control matrices, GRC risks, segregation-of-duties rules, security patch governance, and regulatory compliance. Partners with SAP, corporate security, finance governance, internal controls, and risk teams to implement secure technology solutions and influence SAP product roadmaps. Requires extensive SAP Security and SAP GRC Access Control experience, strategic leadership, and strong communication skills.