Top Senior Cyber Security Jobs in Tulsa, OK

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Designs, implements, and operates AWS cloud security controls for FedRAMP-compliant environments. Responsibilities include AWS security architecture, IAM and network security, Infrastructure as Code guardrails, continuous monitoring, vulnerability remediation, logging and SIEM integration, encryption, incident response, DevSecOps collaboration, SSP and ATO support, and audit evidence documentation. The role also supports RMF, NIST control mapping, boundary definition, and continuous authorization activities.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Leads security compliance for a FedRAMP-authorized cloud environment. Maintains the ATO, coordinates continuous monitoring, assessments, audits, penetration testing, risk reviews, POA&M remediation, security documentation, and NIST control implementation. Partners with engineering, DevOps, cloud operations, compliance, and government stakeholders to support incident response, secure system changes, cloud deployments, and audit readiness.

Assess cloud, network, infrastructure, and application designs against security and compliance requirements. Translate requirements into technical specifications, security blueprints, and engineering guardrails. Support compliance programs, control assessments, and audits, investigate security risks, define remediation, and improve security-control adoption through AI and automation.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Own end-to-end security architecture and risk posture for a strategic, AWS-heavy program protecting trade secrets and sensitive intellectual property. Lead cloud and application security reviews, threat modeling, risk assessments, control design, and risk acceptance. Develop secure reference architectures, design patterns, standards, and guidance across cloud platforms, data flows, identity, and integrations. Provide technical leadership, mentorship, and security direction while communicating risks effectively to technical, business, audit, and executive stakeholders.

Leads enterprise security architecture by assessing threats, performing application security assessments and threat modeling, reviewing designs, and integrating controls into SDLC and DevSecOps environments. Advises business and engineering stakeholders on secure solutions, remediates vulnerabilities, protects APIs, web applications, and cloud workloads, and improves security processes through automation and standardization.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Manage the day-to-day cybersecurity program, including audits, risk registers, third-party risk assessments, security policies, awareness training, vulnerability remediation, MDM security, incident response exercises, and compliance with HIPAA, HITECH, NIST, and HITRUST frameworks. The role prepares security metrics for leadership, coordinates cross-functional remediation, and supports continuous improvement of healthcare information security controls. It is primarily remote with limited travel.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Performs cloud security engineering across AWS and GCP, including system hardening, vulnerability remediation, compliance scanning, cloud operations, security tooling, incident response, and troubleshooting across infrastructure and identity layers. Supports FedRAMP, FISMA, and NIST 800-53 environments, participates in a 24×7 on-call rotation, maintains technical documentation, communicates with customers, and mentors junior engineers.

Builds and operates cloud security controls across AWS, Azure, GovCloud, and other platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform automation, security remediation, audit evidence, and compliance support for HIPAA, HITRUST, SOC 2, and FedRAMP.

Lead and manage the information security and risk management function, overseeing staff, policies, projects, budgets, and security technology. Drive compliance with corporate and regulatory standards, deliver training and awareness, coordinate audits, and collaborate with stakeholders to implement security strategies and continuous process improvements.

Designs, implements, tests, and maintains enterprise IAM/SSO solutions. Troubleshoots authentication/authorization issues, integrates federation protocols (SAML/OAuth/SCIM), applies patches, trains stakeholders, and advises on IAM best practices and compliance.

Leads the enterprise data protection program and multidisciplinary security team. Owns strategy, architecture, roadmap, operations, and continuous improvement across DLP, data classification, monitoring, encryption, key management, digital rights management, and insider risk. Manages staff, budgets, policies, compliance, projects, and organizational change while communicating security risks and priorities to executive and cross-functional stakeholders.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.