Top Cyber Security Jobs in Salt Lake City, UT

Hands-on senior security engineer responsible for designing and automating security controls across cloud and application stacks. Lead implementation of PAM/JIT, vulnerability management, SAST/DAST/SCA integration, security automation (Python/Go/Terraform/Tines), endpoint and DLP protections, cloud network hardening, key management, SIEM correlation, and developer-focused security tooling and reviews to protect PHI and advance security posture.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Own and operate the organisation's accounts, access, and cloud subscriptions; set practical security standards; identify and remediate risks hands-on; manage onboarding/offboarding access across core platforms; partner with engineers and researchers to ensure secure, usable controls.

Manage and perform red and purple team engagements, external/internal penetration tests, wireless/web/mobile/embedded assessments, ransomware readiness and social engineering. Develop tools, incorporate threat intelligence, present findings to technical and executive audiences, and mentor and expand offensive security capabilities. Occasional travel (~10%).

Lead and build vdBA's Managed Detection and Response service line for life sciences: own roadmap, tooling, SLAs, incident response, compliance (SOC 2/HITRUST/ISO), client engagements, and scale the security operations team while integrating security into delivery and sales.

Design, build, and harden security-critical systems: manage KMS and key management, protect PHI/PII, secure storage and tenant isolation, embed security in SDLC and CI/CD, lead threat modeling, and improve security scanning and compliance.

Design, build, and maintain automated API and security test frameworks. Validate authentication, authorization, rate limiting, and error handling. Conduct fuzzing, token validation, access control testing, and integrate tests into CI/CD. Analyze failures, test integrations, ensure API contract adherence, and mentor automation engineers to improve coverage and reliability.

Lead technical discovery and solution design for enterprise identity and privileged access management opportunities. Build reference architectures, guide PoC/PoV engagements, present to executive and technical stakeholders, collaborate with Sales Engineering, Product and Sales leadership, and represent Keeper at customer and market events while staying current on identity security landscape.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Operate and improve security operations and enterprise controls: incident response, playbooks, endpoint/SaaS/cloud tooling, remediation coordination, access governance, compliance evidence, and automation to reduce risk.

Serve as the ISSO for assigned systems, maintain system security documentation (SSPs, control narratives, POA&Ms), support FedRAMP/GovRAMP/DoD authorization and continuous monitoring, coordinate remediation and assessments with engineering and auditors, support incident response and audit readiness, and track security metrics and evidence.

Lead and grow a team of Security Solution Engineers supporting an email security managed service. Oversee platform configuration, backend engineering, service delivery, SLA monitoring, incident escalation, and automation. Drive technical strategy, risk assessment, telemetry-driven improvements, and platform hardening to ensure reliable, scalable, and secure email protection for customers.

Lead implementations of Proofpoint Information Protection to meet information protection and compliance objectives. Engage enterprise customers, configure Email/Cloud/Endpoint DLP, conduct DLP and data exfiltration investigations, build playbooks, mentor team members, and document best practices while coordinating cross-functional teams to ensure successful project outcomes.

Act as a technical and strategic adviser to assigned customers to maximize value from Proofpoint products and services. Own customer relationships, develop 12-month program roadmaps, lead recurring meetings, track deliverables and risks, coordinate complex production changes, manage escalations, monitor cases and SLAs, and help customers mature security posture and demonstrate measurable program value.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead security assessments and integrations for mergers & acquisitions, develop risk-based mitigations, deploy security tools, support vulnerability remediation and pen testing, advise executives and stakeholders, and produce documentation and metrics across identity, cloud, endpoint, and monitoring domains.

Lead and scale the enterprise application security program, embed secure SDLC and DevSecOps practices, integrate SAST/DAST/SCA into CI/CD, run assessments and remediation, advise engineering on architecture and high-risk issues, build governance/metrics, represent AppSec for audits, and mentor application security engineers.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Lead and execute OT/IoT security assessments, design and implement OT security architectures, perform technical testing, produce remediation recommendations and documentation, and guide organizational change for energy/water/manufacturing clients.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.