Top Senior Cyber Security Jobs in Salt Lake City, UT

Lead enterprise security strategy for AI and cloud: design secure AI/ML architectures, enable secure cloud migrations (on‑prem to AWS/Azure), implement zero‑trust and IAM, secure data pipelines/APIs, establish governance and compliance (HIPAA/NIST), mentor teams, and drive audit‑ready security controls across AI and hybrid environments.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Manage and execute RCA's cybersecurity program: lead audits and vendor risk assessments, run security awareness/phishing programs, oversee vulnerability remediation and MDM, ensure HIPAA/HITECH/NIST compliance, build security reporting, and coordinate incident response and tabletop exercises.

Lead enterprise cybersecurity and IT operations for a HIPAA-regulated healthcare company: build and mature security programs, manage IAM/endpoint/cloud security, drive vulnerability management and incident response, ensure compliance (HIPAA/HITECH), oversee IT operations and vendor risk, and mentor a technical team while partnering with cross-functional leadership.

Lead and improve a 24x7 SOC by partnering with frontline analysts, owning operational metrics (MTTD/MTTR, SLAs), driving data-driven improvements, coaching analysts into career paths, optimizing tooling and automation (SIEM/SOAR), and supporting global handoffs across US, Ireland, and India.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Support ATO documentation and assessment for a cloud-based federal courts modernization program. Coordinate with security, engineering, and PM teams; create Visio diagrams; monitor, test, and troubleshoot IA issues; analyze CND/SIEM logs; assess configurations; implement enterprise security policies and procedures; manage vulnerability tracking and incident documentation; provide AWS cloud security expertise and ensure compliance with NIST, FedRAMP, CIS, and ISO 27001.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Design, implement, and test security controls for endpoints, identity, network and infrastructure. Lead vulnerability/patch management, coordinate penetration tests, manage third-party risk, triage incidents, and assess AI/LLM risks while partnering with IT and engineering to enforce Zero Trust and secure system deployments.

Lead application security across the SDLC: perform threat modeling, code reviews, vulnerability assessments (including scanner-less testing), define security maturity initiatives, integrate and automate SAST/DAST in CI/CD, advise stakeholders on mitigations, and act as subject-matter expert between application/hardware teams and InfoSec.

Harden low-level platform layers across firmware, bootloader, Linux kernel, and hardware roots of trust. Design secure/measured boot and attestation, review kernel modules/drivers for memory safety and privilege issues, build kernel telemetry (eBPF), and drive fleet-wide vulnerability response and remediation.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Own cloud and network security, identity and PKI systems, and compliance for cloud and hybrid environments. Design secure cloud networking, manage NGFW/IDS/IPS, implement IAM/PAM/MFA, operate PKI and cryptography, maintain SIEM/EDR, and implement controls for CMMC L2, FedRAMP, and NIST 800-171. Support audits, documentation, risk assessments, and automation for compliance evidence and hardening standards.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.

Own and execute end-to-end collaboration platform integrations for acquisitions: scope, migrate users, Slack channels, Drive, mailboxes, and configurations. Maintain Google Workspace, Slack, and Zoom at enterprise scale; manage email and domain security, DNS consolidation, phishing response, DLP, and platform incident response. Lead compliance/eDiscovery, archiving architecture, vendor selection, and automation to standardize governance across brands. Coordinate cross-functional stakeholders during M&A and build repeatable playbooks and tooling.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead and manage SOC 1/SOC 2 exams and SOX/ICFR activities, assess and remediate ITGCs/ITACs, translate audit requirements into scalable controls, partner with engineering and finance, drive audit readiness, documentation, and automation to improve control effectiveness and audit outcomes in a cloud-native environment.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Serve as a fractional CISO advising alternative asset firms and family offices on building, maintaining, and operating full cybersecurity programs. Provide hands-on leadership, risk assessment, policy and controls development, and program execution on project-based engagements.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.