Top Cyber Security Jobs in St. Louis, MO

Supports product cybersecurity integration for military aerospace programs, including F-15, F/A-18, T-7A, and MQ-25. Responsibilities include evaluating secure architectures and system designs, coordinating with engineering stakeholders, customers, suppliers, and subject matter experts, developing and verifying products, analyzing data, creating test procedures, executing tests, resolving problems, and preparing technical documentation. The role is fully onsite, may require occasional domestic travel, and involves obtaining a U.S. Secret clearance.

Lead product cybersecurity engineering for Boeing avionics across the full lifecycle: derive security requirements, design secure architectures, perform risk/threat analysis and testing, produce PSE artifacts, coordinate with systems/software/hardware teams, and drive risk reduction and technology maturation to meet program and certification needs.

Experienced Product Security Engineer supporting anti-tamper and product security for Boeing defense platforms. Responsibilities include developing requirements, documentation, test plans, and procedures; participating in verification; defining secure hardware and software architectures; and leading integration engineers across multiple programs. The role is fully onsite in Berkeley/St. Louis, Missouri, requires U.S. citizenship and the ability to obtain a Secret clearance, and involves collaboration with platform architects, chief engineers, customers, and suppliers.

Facilitates cybersecurity wargames and business-focused tabletop exercises, coordinating scenarios, environments, schedules, briefings, debriefs, training, and stakeholder communications. Develops realistic scenarios based on threat intelligence and organizational risks, creates exercise materials and technical playbooks, interprets security policies and risk exposure, and consults with cybersecurity teams and business stakeholders to improve resilience, awareness, and compliance.

Design and implement product security/anti-tamper software solutions for defense platforms. Define architectures, requirements, interfaces and algorithms, integrate and test security features across hardware and software, and collaborate with platform engineers and architects to field secure tactical capabilities.

The role involves designing and integrating product security solutions for advanced defense systems, working closely with clients on system requirements and verifying implementations.

Design, integrate, and verify anti-tamper/product security solutions for embedded computing assets across defense platforms. Develop requirements, test plans, documentation, and collaborate with platform engineers and customers to field hardware/software protections, including cryptography, secure communications, reverse engineering, and FPGA-based mitigations. Must support development through verification and fielding.

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Lead and mentor a small IT security engineering team to deploy and operate enterprise-grade Zero Trust security across networks, endpoints, applications, and cloud. Drive Customer Zero initiatives, manage cross-functional security projects, optimize policies (SSL decryption, segmentation, access control), and serve as an internal subject-matter expert.

Support day-to-day GRC operations: assess third-party vendors, maintain vendor risk register, track remediation and control evidence, assist with internal control testing and audits (SOC 2, ISO 27001, PCI-DSS), maintain policies, prepare reporting, and contribute to process improvements.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

The Network Security Architect will assess network security, guide teams, enhance security policies, design network solutions, and mentor engineers while aligning with a Zero Trust Strategy.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Design and implement product security and resiliency for embedded avionics across hardware lifecycle. Define secure architectures, apply MBSE, manage suppliers, enforce standards per JSIG/DoD RMF/NISPOM, perform threat and risk analysis, coordinate with stakeholders, and support certification and sustainment. Travel up to 25% and must obtain U.S. Secret clearance.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.