Top Remote Cyber Security Jobs in Minneapolis, MN

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead product strategy and execution for security, compliance, and public-sector capabilities in MongoDB Atlas for Government. Translate FedRAMP/DoD/NIST requirements into roadmaps, drive multi-team programs, align senior stakeholders, enable audit readiness, and support market expansion and GTM for regulated industries.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

This intern role in Federal Security Operations focuses on cybersecurity, project tracking, and maintaining relationships with customer stakeholders in a mission-driven environment.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Lead AWS GovCloud security engineering and accreditation for pre-production modernization environments. Design secure cloud architectures, landing zones, IAM controls, network segmentation, infrastructure automation, containers, and CI/CD deployments. Own DoD RMF, IATT-C, and ATO packages, security controls, POA&Ms, vulnerability remediation, continuous monitoring, and cybersecurity assessments. Provide cloud and cybersecurity guidance for modernization, migration, data transition, Zero Trust, and ICAM initiatives while advising program leadership.

Supports information security governance programs covering data retention and protection, eDiscovery, legal holds, insider risk, investigations, and regulatory compliance. Develops policies and governance processes, assesses risks and control gaps, administers retention and destruction activities, supports litigation and audit requests, investigates insider risk events, manages related technologies and vendors, and delivers reports and executive communications. Partners with Legal, Compliance, HR, Corporate Security, Technology, and business stakeholders.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Leads federal cybersecurity program management and ISSO activities for FHWA systems. Manages plans, schedules, risks, deliverables, staffing, reporting, audits, contingency testing, authorization documentation, vulnerability remediation, security assessments, cloud controls, DevSecOps, incident support, and compliance with FISMA, NIST, FIPS, and FedRAMP requirements. Advises system owners, developers, infrastructure teams, and government stakeholders on cybersecurity risk and information assurance.

Secure Temporal’s multi-cloud platform across AWS, GCP, and Azure by embedding security into infrastructure and application architecture. Responsibilities include threat modeling, risk assessment, Kubernetes hardening, multi-tenant isolation, gRPC and mTLS security, service mesh configuration, cloud security posture management with Wiz, secrets management, encryption, compliance policy development, engineering partnership, and on-call participation. The role also contributes to responsible AI practices and security for distributed workflow systems.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Lead presales engagements and practice development for security operations solutions. Design SOC architectures involving SIEM, SOAR, EDR/XDR, threat intelligence, detection, incident response, and automation. Conduct discovery sessions, demonstrations, POCs, presentations, vendor evaluations, and internal enablement. Develop technical collateral, support partner solutions, identify revenue opportunities, and advise clients on SecOps maturity and target-state architectures.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

Engineer and operate enterprise EDR/XDR protections across hundreds of thousands of Windows, macOS, Linux, server, container, and multi-cloud workloads. Responsibilities include behavioral defense, allowlisting, phased deployments, threat investigation, host forensics, live remediation, SOC escalation support, attack simulation, and continuous measurement of endpoint coverage and control efficacy. The role also partners with application owners and IT operations to minimize business disruption while automating security policies and fleet-wide remediation.