Top Senior Cyber Security Jobs in Provo, UT

Designs and builds security orchestration and automation workflows for SOC processes, including alert triage, incident response, case management, integrations, scripting, error handling, and secure execution. The role translates client requirements into automation build plans, integrates SIEM, EDR/XDR, ticketing, threat intelligence, and email security tools, and may apply AI, cloud security, detection engineering, and automation-as-code practices.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.

Secure Temporal’s multi-cloud platform across AWS, GCP, and Azure by embedding security into infrastructure and application architecture. Responsibilities include threat modeling, risk assessment, Kubernetes hardening, multi-tenant isolation, gRPC and mTLS security, service mesh configuration, cloud security posture management with Wiz, secrets management, encryption, compliance policy development, engineering partnership, and on-call participation. The role also contributes to responsible AI practices and security for distributed workflow systems.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Build autonomous AI-driven security testing systems and agentic workflows for analyzing mobile, desktop, IoT, and API applications. Develop reusable security automation frameworks, integrate static and dynamic analysis, reverse engineering, network analysis, vulnerability intelligence, and custom tools. Create evaluation systems and human-in-the-loop workflows, research emerging AI and offensive security techniques, and collaborate with security researchers to scale testing. The role requires production-quality coding, security expertise, autonomy, and U.S. citizenship.

Leads the enterprise Red Team program, managing offensive security professionals and directing adversary emulation, Purple Team engagements, assumed-breach exercises, and AI security testing. Partners with cybersecurity, technology, legal, risk, and detection teams to improve controls, response, and resilience. Establishes operating standards, tools, metrics, and guardrails; translates findings into risk mitigation recommendations; supports compliance activities; and communicates outcomes to technical stakeholders and executives.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Lead vulnerability and asset lifecycle management, engineer Zero Trust connectivity (Zscaler), automate secrets detection/remediation in CI/CD, build Splunk detections and SOAR/Python automation, run adversary simulations and deception, and translate risk findings for technical and executive stakeholders.

Senior Level 3 SOC engineer owning high-severity incident investigations and escalations. Lead threat hunting, detection engineering, automation (SOAR/SIEM), cloud and forensic investigations, and mentor SOC staff. Participate in on-call rotation and drive cross-functional remediation, threat modeling, and AI-enabled security capabilities (Agentic SOC, AI DLP).

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.