Top Senior Cyber Security Jobs in St. Louis, MO

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

Design and execute integration and security-focused test plans for PAM and Keeper Secrets Manager. Validate integrations across cloud providers, IAM, CI/CD, and OS/databases; perform reliability and security testing; analyze logs and defects; contribute to automation and collaborate with engineering, product, and security teams to ensure reliability and compliance.

Lead design and implementation of secure CI/CD pipelines, IaC automation, cloud security and compliance. Perform vulnerability assessments, monitor environments, manage Kubernetes/Docker, support incident response and disaster recovery, and provide technical leadership and DevSecOps frameworks for enterprise global projects.

Design, implement, and maintain SAP S/4HANA Public Cloud security and role-based access controls. Perform SoD assessments, integrate identity services (IAS/IPS/SSO), support Fit-to-Standard workshops, audit/compliance requests, quarterly releases, troubleshooting, role optimization, and post-go-live support for SAP GROW implementations.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Lead Togal's security program: own SOC 2 compliance, manage audits and Vanta, respond to customer security reviews, design and lead incident response, evaluate monitoring/MDR/SIEM, tighten cloud security posture, and coordinate breach communications with Legal and executive leadership.

Assess customers' information security and privacy posture against standards (NIST, PCI, GDPR, HIPAA, etc.), perform gap analyses, conduct onsite/remote assessments, produce findings and remediation recommendations, support sales as SME, and travel to customer sites as needed (25–50%).

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Lead application and operational implementation of GRC/compliance frameworks (SOC 1/2, ISO 27001, CSA STAR, NIST CSF). Develop policies, run internal audits, support risk management and remediation, coordinate with SecOps to ensure controls meet audit standards, and support access reviews and annual audits.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Design and manage cloud and product security for AWS, perform security assessments and pen-test remediation, integrate security into DevOps/IaC, mentor engineers, and advise on compliance and threat mitigation across mobile core, applications, and cloud environments.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Lead assessment and remediation of IT security risks across network, systems, and applications. Perform vulnerability assessments, manage IDS/IPS, coordinate remediation with IT and vendors, develop policies and training, support audits (SOX/PCI/HIPAA), and report findings to stakeholders while mentoring teams and guiding security projects.

Senior UI developer responsible for designing and building responsive React-based UIs and dashboards for cybersecurity analytics. Develop backend services and APIs in Python, integrate security data sources, optimize SQL Server/PostgreSQL reporting, collaborate with stakeholders, influence architecture, and mentor junior developers.

Lead Pinnacle's enterprise cybersecurity and network strategy, governance, and operations. Oversee security technologies (SIEM, EPP, DLP, firewalls, PKI, NAC), incident response, risk and compliance, and secure LAN/WAN/wireless architecture. Drive Microsoft cloud security (Azure, Microsoft 365, Conditional Access, MFA, RBAC, Intune), mentor engineering teams, manage vendors, and partner with executive leadership to modernize security across a multi-site healthcare environment.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead Triplemoon's information security and compliance program, ensuring HIPAA compliance and SOC 2 readiness. Oversee IT operations via MSP/MSSP, manage vendor risk, coordinate incident response and audits, maintain security policies and documentation, and advise leadership on cloud-first, remote workforce security.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.