Top Cyber Security Jobs in Salt Lake City, UT

Monitor and investigate cybersecurity alerts, analyze endpoint telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity, then coordinate threat remediation. The analyst also supports escalations, contributes to detection engineering and tuning, and collaborates across the SOC. The role requires knowledge of operating systems, enterprise administration, networking, web security, attacker techniques, and malware analysis while working a remote weekend 4x10 shift after training.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Leads enterprise identity and data security strategy, governance, risk, compliance, and remediation. Oversees identity lifecycle management, IGA, SSO, MFA, privileged and non-human identities, customer authentication, data discovery, classification, DLP, retention, and secure disposal. Partners with Legal, Privacy, Audit, Engineering, IT, HR, and executives to assess risks, strengthen controls, meet regulatory obligations, and execute multi-year security roadmaps. This is a hands-on individual contributor security leadership role.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Build and operate scalable security tooling, applications, APIs, and automation for CrowdStrike’s global multi-cloud Product Security environment. Responsibilities include software supply chain security, AI-powered vulnerability discovery, platform visibility, risk assessments, CI/CD, SRE operations, datastore management, monitoring, and incident response support. The role partners across Product Security to define tooling strategy and maintain mission-critical security services.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Lead infrastructure security for GitLab’s FedRAMP and federal cloud environments. Set technical direction, architecture, security automation, and compliance patterns; own security posture; lead threat modeling, security reviews, continuous monitoring, and authorization-impacting initiatives. Partner with SRE, engineering, compliance, and leadership to drive remediation and roadmap decisions. Apply AI to constrained security workflows, mentor engineers, and influence security practices across GitLab offerings.

Lead ARUP's Information Security GRC program: manage risk assessments, policy and compliance (NIST, HIPAA, SOC2, FISMA), audits, SSPs/POA&Ms/SARs, vulnerability management, governance reporting, and train/mentor GRC analysts while partnering across IT and business teams.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Leads the enterprise data protection program and multidisciplinary security team. Owns strategy, architecture, roadmap, operations, and continuous improvement across DLP, data classification, monitoring, encryption, key management, digital rights management, and insider risk. Manages staff, budgets, policies, compliance, projects, and organizational change while communicating security risks and priorities to executive and cross-functional stakeholders.

Designs and engineers secure data solutions across cloud, hybrid, and on-premises environments. The role conducts security architecture assessments, vulnerability analyses, risk assessments, and gap analyses; develops mitigation strategies; and advises teams on data governance, encryption, identity and access management, application security, cloud security, and secure data exchange. Responsibilities also include evaluating security technologies, implementing protective controls, supporting compliance, and mentoring team members.