Top Senior Cyber Security Jobs in St. Louis, MO

Owns vulnerability management, bug bounty, CSPM, agentic red-team, and continuous penetration-testing operations. The role triages and validates findings, prioritizes risk, coordinates remediation, verifies fixes, manages cloud and network security controls, and reports program metrics. It also evaluates and deploys emerging AI-driven security tooling, automates security workflows, supports perimeter security, and partners with engineering, infrastructure, GRC, and incident response teams.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Lead information security operations, GRC, incident readiness, and ISO 27001/42001 management systems. Own risk, controls, audits, identity, vendor and data-protection governance, while providing technical assurance across applications, cloud infrastructure, IAM, CI/CD, and AI systems. Build detection and response capabilities, lead investigations, establish AI security controls, and report material risk and remediation progress to leadership.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Leads security solution strategy and technical engagements for global enterprise customers. Advises technical decision-makers, drives secure cloud adoption, designs architectures, leads demonstrations and proof-of-concepts, coaches technical sellers, and develops solution roadmaps. Partners with account teams, product and engineering groups, and external partners to deliver integrated Microsoft security solutions across cloud, hybrid, and on-premises environments.

Lead security across Zeely’s AWS infrastructure, products, CI/CD pipelines, and compliance programs. Responsibilities include cloud hardening, IAM, vulnerability remediation, incident response, security monitoring, architecture and code reviews, and implementing SAST, DAST, SCA, and secrets scanning. The role owns SOC 2, ISO 27001, and CASA compliance, leads the security roadmap, establishes policies, guides DevOps and Platform teams, and supports enterprise customer security reviews.

Designs vulnerable and secure application fixtures addressing OWASP LLM risks, creates deterministic tests and security manifests, develops answer keys for AI and scanner evaluation, and improves AppSec assessment pipelines. The role also evaluates traditional and agent-based security architectures, documents technical findings, and collaborates on peer reviews and actionable security recommendations.

Leads enterprise security engineering across tools, cloud environments, identity, vulnerability management, incident response, compliance, and security operations. Oversees SIEM, endpoint, email, privileged access, and network security technologies; coordinates investigations, assessments, remediation, and managed security providers. Leads a three-person security team, mentors staff, improves workflows through automation, and communicates technical risks to leadership and clinical stakeholders.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Leads technical security engagements involving presentations, demonstrations, workshops, architecture design, and production-ready pilots. Designs and proves Microsoft and third-party cloud security, compliance, privacy, XDR, zero trust, and data protection solutions. Collaborates with sales, consulting, and partner teams, resolves technical and competitive blockers, influences strategy, and guides customer implementations. The role requires strong technical pre-sales or consulting experience and expertise in cloud, hybrid, and on-premises infrastructure.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Automate security evidence generation and RMF control mapping to enable continuous authorization for U.S. Air Force systems. The role conducts audits and risk analyses, implements remediations, translates compliance requirements into engineering practices, documents inherited and implemented controls, and coaches government teams. It partners with security reviewers, authorizing officials, engineers, and contractors to embed security throughout the software delivery lifecycle.

Leads the information security program across healthcare platforms, managing security teams, controls, vulnerabilities, cloud and data protection, monitoring, incident response, governance, risk, and compliance. Partners with Engineering, Infrastructure, DevOps, Compliance, and business leaders to reduce risk, improve incident readiness, support HIPAA, HITRUST, and SOC 2 requirements, and secure AI tools and third-party integrations.

Lead security operations and incident response engineering across hybrid cloud environments. Conduct deep-dive investigations, digital forensics, threat modeling, detection engineering, SIEM tuning, threat intelligence review, and automated remediation. Develop incident response playbooks, maintain investigation documentation, apply MITRE ATT&CK, and support incident command and SOC process optimization.

Lead identity and access management implementations for federal and enterprise customers. Responsibilities include IAM solution design, architecture, deployment, integration, testing, troubleshooting, documentation, customer workshops, and knowledge transfer. The consultant provides technical leadership, advises stakeholders on authentication and identity governance, collaborates across project teams, and mentors junior consultants. The role requires extensive IAM consulting experience, strong security technology knowledge, active Top Secret clearance with full-scope polygraph, and customer-facing technical leadership.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads cybersecurity competitive strategy and execution, including deal coaching, competitive positioning, win/loss analysis, compete playbooks, field enablement, and cross-functional recommendations for sales, product, engineering, marketing, and partner teams. The role focuses on Google Security, Mandiant, Wiz, and Microsoft Security competitive scenarios, translating market and customer insights into scalable go-to-market motions and product strategy.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.