Top Senior Cyber Security Jobs in Salt Lake City, UT

Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads and develops Security Consultants while overseeing security submission triage, validation, escalations, and resolution. Provides application security expertise across web, network, cloud, or mobile domains; improves operations through metrics, automation, and process optimization; manages workloads; and partners with customers, leadership, and cross-functional teams. The role requires incident response and vulnerability management experience, technical mentorship, strong communication, and periodic travel for customer-facing and onsite events.

Lead application and infrastructure security for LiteLLM, focusing on Python code reviews, vulnerability remediation, threat modeling, secure development tooling, CI/CD and supply-chain security, cloud and IT controls, incident response, and LLM-specific attack testing. Partner closely with engineers to strengthen authentication, authorization, tenant isolation, secrets management, deployment security, monitoring, vulnerability management, and disclosure processes.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Analyzes exposure risks across databases and data platforms, including permissions, access models, configurations, storage, encryption, and service-to-service access. Investigates attack paths, validates risks using queries and logs, prioritizes issues by exploitability and business impact, and partners with database, cloud, platform, engineering, and cybersecurity teams on remediation and preventative controls.

Leads day-to-day information security across applications, infrastructure, cloud, networks, endpoints, and data platforms. Responsibilities include incident response, threat and vulnerability assessment, application and API protection, AWS and container security, IAM, endpoint controls, compliance support, vendor reviews, and executive communication. The role partners with engineering teams to remediate risks, improve security controls, protect high-traffic consumer sites from abuse, and maintain incident procedures and security documentation.

Oversee internal IT infrastructure, cybersecurity operations, incident response, cloud systems, identity and access management, employee IT support, and technology vendors. Administer Microsoft 365, Azure, networking, firewalls, endpoints, backups, and SSO. Lead security assessments, vendor selection and negotiations, insurance compliance, documentation, infrastructure initiatives, and risk communication to leadership.

Lead Irth’s cybersecurity program across vulnerability management, incident response, cloud and identity security, compliance, and customer trust. Prioritize and drive remediation of security findings, manage AWS and Azure security controls, oversee IAM and access reviews, maintain NIST- and ISO-aligned policies, and support SOC 2 audits. Lead incident communications, tabletop exercises, penetration testing, customer security reviews, and regulatory responses while partnering with engineering, infrastructure, IT, GRC, executives, and customers.

The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance.

Hands-on senior security engineer responsible for building secure libraries, templates, guardrails, and developer tooling. Reviews architecture and code for authentication, authorization, and data exposure risks; conducts threat modeling; strengthens secrets, logging, and auditability; integrates security checks into CI/CD; supports vulnerability remediation, secure development practices, and incident reviews.

Leads cloud, application, data, and enterprise security architecture across a predominantly AWS-based healthcare environment. Designs security controls, IAM policies, network segmentation, infrastructure-as-code modules, automated detection and remediation, and CI/CD integrations. Provides technical leadership for incident response, vulnerability management, compliance validation, and secure Snowflake and generative AI workloads. Partners across engineering, cloud operations, reliability, data, architecture, and GRC teams while mentoring technical staff.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Conduct OT and ICS inventories at DoD facilities, assess network architecture and cybersecurity compliance, create topology and dataflow diagrams, oversee field teams, coordinate site visits, and recommend remediation aligned with RMF, DoD standards, and UFC requirements. The role requires extensive domestic and international travel, customer collaboration, project reporting, and technical assessment of critical building systems.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

The Information Systems Security Engineer will secure a USPS information system modernization project by implementing federal security controls, conducting vulnerability assessments and penetration testing, integrating security into CI/CD pipelines, maintaining SSP, RMP, and POA&M documentation, monitoring cloud security tools, supporting incident response, and delivering security training. The role requires collaboration with development, operations, and federal security stakeholders while ensuring compliance with FISMA, NIST RMF, and FedRAMP standards.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Evaluate on-premises, cloud, hybrid, network, endpoint, application, identity, and infrastructure security. Identify risks and gaps, create reports, present recommendations, and support incident response and post-incident improvements. Collaborate with engagement managers and technical teams while communicating with English- and Spanish-speaking stakeholders. Travel approximately 20% for client engagements.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.