Top Remote Cyber Security Jobs in Des Moines, IA

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Leads cybersecurity governance, enterprise risk assessments, security maturity evaluations, third-party risk reviews, audits, and remediation planning. Owns phishing simulations and security awareness programs, analyzes human-risk metrics, and develops targeted training. Maintains risk registers, dashboards, scorecards, KRIs, and executive reporting while improving GRC efficiency through automation. Advises business and technology leaders by translating technical risks into actionable recommendations and collaborates cross-functionally with Procurement, Legal, HR, Communications, Internal Audit, and Information Security.

Own federal security and compliance workstreams for a FedRAMP High program, including control implementation, evidence collection, continuous monitoring, vulnerability remediation, risk tracking, audit readiness, authorization artifacts, and customer assurance. Partner with technical and business teams to close remediation items and support compliance-as-code using machine-readable artifacts, automation, validation, and document generation.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Investigate and respond to security incidents, conduct digital forensics and threat hunting, build automated detection and response capabilities, and develop scalable detection models. The role identifies visibility gaps, improves logging, performs root cause analysis, collaborates with engineering, Legal, and Privacy teams, and mentors other security engineers while advancing threat detection and incident response strategy.

Build and scale an insider threat detection and response program. Responsibilities include developing detection logic, hunting threats, investigating incidents, automating response workflows, analyzing anomalous activity, improving logging coverage, designing countermeasures, and collaborating with engineering, HR, and Legal. The role participates in 24/7 on-call coverage and supports security awareness initiatives.

Leads long-term strategy, vision, roadmaps, and measurable business outcomes for information security products. Develops product strategies based on user needs, prioritizes releases across products, manages capacity and investment decisions, tracks KPIs, and collaborates with stakeholders and product teams. Mentors Product Owners, facilitates cross-functional alignment, engages customers, researches industry trends, and supports continuous improvement within a highly regulated enterprise environment.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Build and lead Cape’s security technical program across detection and response, corporate security, and product security. Define strategy, priorities, metrics, roadmaps, and execution processes; manage security tooling procurement and implementation; maintain backlogs; coordinate dependencies; and translate security risks and requirements between security engineers and the broader engineering organization.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.