Top Senior Cyber Security Jobs in Raleigh, NC

Principal Security Engineer partnering with Product and Engineering teams to embed security into SaaS and cloud product development. Advises senior stakeholders, coordinates Information Security engagement, supports privacy considerations, develops customer trust materials, mentors junior engineers, and evaluates AI-related product and security risks. The role requires strong security knowledge across data protection, identity, and application security, along with autonomy, influence, and experience translating security expectations into technical requirements.

Designs, implements, and operates security controls across Oracle Cloud Infrastructure and hybrid Oracle environments. Responsibilities include IAM, key management, workload hardening, Cloud Guard, logging, data security, vulnerability management, regulatory compliance, threat modeling, incident response, security automation, documentation, and mentoring. The role requires deep OCI security expertise, Python, Bash, Terraform, SIEM integration, and familiarity with cloud security frameworks and compliance standards.

Lead design and implementation of an automated GRC foundation across cloud environments. Implement and administer GRC platforms, configure controls and evidence integrations, map controls across frameworks (SOC 2, ISO 27001), establish ownership and system inventories, and enable continuous compliance and audit readiness through automation and standardized processes. Partner with compliance, security, and engineering teams to reduce manual evidence collection and streamline audits.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Own and direct cybersecurity design for multiple medical devices. Develop security architectures, requirements, threat models, risk analyses, and system specifications for embedded and hosted systems. Perform vulnerability scanning, secure code analysis, penetration testing, fuzz testing, and CWE/CVE analysis. Lead cross-functional cybersecurity improvements, resolve technical constraints, support regulatory interactions, and ensure compliance with quality systems and design controls.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead Etix’s company-wide security program, strategy, roadmap, and risk management. Strengthen application, API, cloud, infrastructure, IAM, monitoring, and secure SDLC practices; establish data governance and privacy controls; maintain PCI-DSS compliance; prepare for SOC 2; and lead incident response. Partner with engineering, product, IT, legal, and executives across globally distributed teams while communicating security risks and priorities to leadership, customers, auditors, and partners.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Leads cybersecurity, network security, and site reliability engineering across manufacturing and engineering environments. Designs secure infrastructure, manages Fortinet firewalls, Arista networks, VMware platforms, servers, SAN storage, backups, and disaster recovery. Oversees vulnerability management, incident response, compliance, infrastructure hardening, monitoring, troubleshooting, documentation, automation, and production incident escalation. Provides technical leadership, mentoring, and security architecture guidance while supporting global manufacturing operations.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Lead technical sales and partner enablement for strategic channel partners in cybersecurity. Own the enablement, POC model, and partner relationships, producing technical collateral and driving partner-sourced revenue.

Own day-to-day cybersecurity, identity and access hygiene, compliance readiness, and infrastructure security across a multi-site healthcare environment. Administer Microsoft security tools, MFA, Conditional Access, SIEM, email protection, patching, backups, firewalls, and network controls. Lead SOC 2 evidence collection, security reporting, remediation tracking, third-party access reviews, and audit preparation. Direct and verify outsourced IT and offshore resources, enforce SLAs, supervise network work, and communicate risks to nontechnical leaders.

Provides multi-discipline security support for Special Access Programs, SCI, and collateral activities. Responsibilities include enforcing NISPOM and SAP policies, identifying vulnerabilities and risks, supporting operations security, conducting facility compliance reviews, tracking corrective actions, delivering security briefings, and investigating classified-information losses or compromises. The role also develops procedures, performs damage assessments, and coordinates security education and awareness programs.