Top Cyber Security Jobs in St. Louis, MO

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Leads enterprise infrastructure, end-user computing, cybersecurity, IT risk management, data security, compliance, disaster recovery, and service management. Develops technology and security strategies, oversees networks, cloud and storage environments, manages security incidents and risk remediation, ensures regulatory compliance, directs technology teams, manages vendors and budgets, and advises senior business leaders.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational security environments. Develop offensive tooling, implants, and AI-driven autonomous agents for reconnaissance, exploitation, and post-exploitation. Serve as a technical lead for customer engagements, brief security executives, collaborate with blue teams and threat intelligence organizations, establish operational standards, and mentor senior operators.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develop offensive tooling, implants, and tradecraft; direct AI-driven autonomous agents; discover and exploit vulnerabilities; brief executive customers; provide defensive guidance; collaborate with threat intelligence and blue teams; establish operational standards; and mentor security operators.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Owns company-wide security operations, cloud and infrastructure security, incident response, zero-trust architecture, blockchain treasury controls, compliance, privacy, production reliability, Terraform, CI/CD, observability, disaster recovery, and on-call operations. This hands-on leadership role reports to the CTO, represents the company to auditors and customers, and builds security automation across GCP, Cloudflare, GitHub, Google Workspace, and Ethereum infrastructure.

Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Designs and leads enterprise cybersecurity architecture across network, cloud, endpoint, identity, and data environments. Develops security strategies, governance frameworks, and controls; conducts risk assessments, vulnerability management, penetration testing, and incident response. Oversees security tool integration, regulatory compliance, third-party risk, and secure development practices. Provides technical leadership, mentoring, and cross-functional guidance to protect business-critical systems and minimize cyber risk.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Designs, implements, and operates AWS security controls for FedRAMP-compliant cloud infrastructure. Responsibilities include cloud hardening, IAM and network security, Infrastructure as Code security, continuous monitoring, vulnerability remediation, logging and SIEM integration, encryption, incident response, DevSecOps collaboration, and support for SSP, RMF, ATO, and audit activities.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform automation, security remediation, audit evidence, and compliance support for HIPAA, HITRUST, SOC 2, and FedRAMP.

Supports security operations by onboarding and troubleshooting network monitoring infrastructure, triaging security-device issues, resolving escalated customer problems, coordinating vendor maintenance, and managing hardware sensors. The role collaborates with SOC analysts, assists with testing and quality assurance, provides customer support, and participates in on-call incident response. Requires network and security administration experience, TCP/IP knowledge, command-line expertise, and troubleshooting across Linux, Windows, and macOS.

Designs, leads, and supports enterprise network security and infrastructure solutions. Responsibilities include network engineering, NAC, IAM, ZTNA, VPN, certificate and PKI management, secure connectivity, identity-driven access controls, segmentation, highly available distributed environments, platform upgrades, lifecycle management, and capacity planning. The role also evaluates technology solutions and leads cross-functional initiatives focused on performance, reliability, scalability, and capacity.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.