Top Senior Cyber Security Jobs in Raleigh, NC

Lead the design, automation, testing, certification, and maintenance of next-generation firewall infrastructure across enterprise data centers, cloud providers, and external networks. Develop firewall provisioning and policy automation using Python, Ansible, and REST APIs; conduct performance, security, upgrade, and interoperability testing; ensure regulatory compliance; lead Agile projects; analyze operational performance; document solutions; collaborate with network and cybersecurity teams; and mentor junior engineers.

Leads enterprise security architecture reviews and serves as the escalation authority for complex security decisions. Performs threat modeling, risk assessments, control evaluations, and secure architecture design across applications, cloud, infrastructure, identity, networks, data, and AI. Develops reference architectures, standards, guardrails, maturity models, and transformation roadmaps. Mentors security architects, represents the function in governance forums, and partners with technology, risk, privacy, legal, and engineering stakeholders.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Leads Apollo’s detection and response strategy, detection architecture, security observability, incident response, and AI-assisted security workflows. Builds MITRE ATT&CK-aligned detections, response automations, investigation tools, and detection-as-code pipelines using Panther and Python. Leads high-severity incidents across cloud, SaaS, and corporate systems; improves IR readiness, metrics, playbooks, and forensic processes. Partners with Engineering, Infrastructure, IT, Legal, Fraud, and leadership while mentoring engineers and driving multi-quarter security initiatives.

Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Leads the Network Security Engineering and Operations team, overseeing enterprise network security infrastructure, availability, lifecycle management, monitoring, incident response, compliance, risk mitigation, and 24/7 escalation support. Manages engineers, vendors, budgets, strategic projects, and cross-functional initiatives while communicating cybersecurity risks to technical and executive audiences. Drives automation, resilience, continuous improvement, and preventative security practices across sites, datacenters, and cloud environments.

Manage a global 24/7 Security Operations Center, including analyst leadership, shift coverage, operational processes, quality assurance, training, and career development. Improve workflows, playbooks, and service-level performance while collaborating with Product, Support, Tactical Response, Threat Hunting, and Detection Engineering teams. Lead initiatives, track security operations objectives, operationalize new services, and communicate technical concepts to internal stakeholders and external audiences.

Designs, implements, and governs secure AWS, Azure, and GCP cloud architectures across IaaS, PaaS, and SaaS environments. Defines security standards, IAM strategies, network controls, and guardrails; leads cloud security reviews, threat modeling, and risk assessments; integrates security into DevOps and CI/CD workflows; evaluates security tooling; supports compliance; and mentors engineering teams. The role also drives cloud security posture improvements, documentation, remediation, and long-term security architecture maturity.

The Security Operations Engineer will build and manage cloud and enterprise security detections, lead incident response and threat hunting, automate security operations with SOAR playbooks, and maintain security telemetry pipelines. The role also involves vulnerability remediation, cloud architecture security reviews, cross-functional collaboration, on-call participation, and continuous improvement of runbooks and alert quality. Candidates need strong AWS security, SIEM, incident response, detection engineering, scripting, attacker tradecraft, and compliance framework experience.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

The Application Security Architect leads secure design and architecture reviews, threat modeling, source-code reviews, and security initiatives across application, cloud, infrastructure, and identity layers. The role develops security architectures and documentation, mentors security and engineering teams, supports AI-assisted product security workflows, and advances security awareness through the Security Champions program. Responsibilities include communicating risks to technical and executive audiences and embedding secure practices throughout software development and deployment.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Lead the architecture and implementation of hardware Root of Trust solutions for NVIDIA SoCs and GPUs. Collaborate across hardware, software, research, marketing, customers, and partners to define security roadmaps, review architecture and verification specifications, address threats, and ensure platform security requirements. Responsibilities include secure boot, cryptography, CPU security, physical attack mitigations, remote attestation, DRM, threat modeling, penetration testing, and certification compliance.

Designs and implements enterprise DevSecOps, application security, vulnerability management, and cloud security capabilities. Integrates automated security controls into CI/CD pipelines, tunes SAST, DAST, SCA, and container scanning tools, manages CNAPP platforms, and reduces vulnerability backlog. Establishes secure SDLC practices, risk methodologies, AI code security guardrails, incident response strategies, and security KPIs. Advises engineering and management teams on complex security architecture, integration, and information security challenges.

Leads Clinisys’ global cybersecurity operations and team, overseeing incident response, monitoring, vulnerability management, cloud and application security, governance, risk, compliance, audits, third-party risk, and customer assurance. Translates cybersecurity strategy and regulatory obligations into accountable delivery plans, manages remediation and security programs, reports risk to executives, and drives continuous improvement across corporate, SaaS, product, and customer-facing environments.

Lead and operate the enterprise security risk and compliance program: manage risk identification, scoring, register, exceptions, and remediation. Manage a team of security engineers, drive audit readiness, produce executive risk and compliance reporting, and advise stakeholders on control design and compliance obligations (SOC 2, NIST, ISO, FedRAMP).

Leads complex cyber incident response, forensic investigation, threat detection, containment, remediation, and security automation. Develops MITRE ATT&CK-aligned SIEM content, cloud threat analytics, SOAR workflows, continuous compliance checks, and security capabilities across AWS, CI/CD, infrastructure-as-code, data security, and encryption environments. Serves as a technical escalation point and mentor while partnering with security, infrastructure, engineering, and business teams.