Top Cyber Security Jobs in Salt Lake City, UT

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Lead Fireworks AI’s security operations function, including CrowdStrike deployment, detection engineering, incident response, SOAR workflows, threat intelligence, playbooks, metrics, and cross-functional incident coordination. Build and tune detections, operationalize response processes, run post-incident reviews, and improve coverage against MITRE ATT&CK. The role begins as a hands-on individual contributor and may grow into team leadership, including hiring and expanding 24/7 coverage and capabilities such as cloud detection engineering and red/purple team operations.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.

Leads global security strategy across manufacturing plant OT/ICS, connected medical products, and application security. Oversees FDA medical device cybersecurity compliance, OT/ICS frameworks, DevSecOps, CI/CD security, and application security tooling. Builds and develops global security teams, partners with executives and operating companies, maintains enterprise risk frameworks, reports security posture to leadership and committees, and travels internationally to manufacturing, R&D, and plant locations.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

The fellowship provides military spouses and separating service members with cybersecurity training and hands-on experience through projects and vendor training, aimed at enhancing their security skills.

Customer-facing role to drive security transformation on Azure and Microsoft 365. Architect, design, and implement cloud security, identity, threat protection, and information protection solutions; run design sessions, perform hands-on evaluations (Defender, Sentinel, AAD, Intune), troubleshoot implementations, and influence product and engineering teams to improve customer security posture and adoption.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Leads DLP security operations across endpoint, network, SaaS, and cloud environments. Responsibilities include deploying and tuning DLP controls, investigating data exfiltration incidents, developing data classification policies, automating alert response playbooks, threat hunting for anomalous data movement, managing incident remediation, and tracking DLP effectiveness metrics. The role also supports incident response and vulnerability management and partners with stakeholders to balance security, usability, and regulatory requirements.

Design, develop, and maintain secure Linux endpoint privilege-management capabilities across Rust, C, and .NET. Build kernel-facing agents, PAM modules, privileged services, authentication and authorization workflows, systemd services, and Linux packages. Troubleshoot low-level security and execution issues involving permissions, SELinux, AppArmor, and race conditions. Collaborate with engineering and QA teams on architecture, testing, production support, and cross-platform functionality while using AI-assisted development tools.