Open Louisville Cybersecurity jobs

Summary

Runs the enterprise security and compliance program for a fully remote, Microsoft-centric pharmacy benefit manager, covering identity and access management in Entra ID and Active Directory, SSO integrations, access reviews, SIEM monitoring and tuning in Microsoft Sentinel, and incident response. A substantial part of the role is compliance work: sustaining SOC 2 and URAC through evidence collection and auditor coordination, and leading the path to HITRUST CSF certification. It also covers Microsoft Purview data loss prevention, classification and eDiscovery, application and data security oversight, and vendor security assessments, with protected health information and HIPAA in scope.

Summary

Offensive security leadership role at a health insurer, driving development of AI-driven offensive tooling and autonomous agents that extend penetration testing and red team operations. The posting pairs conventional red team and threat simulation work with AI security testing, listing prompt injection and jailbreak testing, adversarial testing of LLM applications, MITRE ATLAS, PyRIT and Garak, plus EDR and XDR evasion testing and malware development. It expects production-grade software engineering in Python, cloud fluency across AWS, GCP and Azure, and mentoring plus stakeholder management responsibilities.

Summary

Backend engineering role modernizing a health insurer's internal enterprise security platform, building scalable services and improving deployment automation rather than performing security analysis. The listed stack is .NET and C# on Azure with Terraform, GitHub Actions and Azure DevOps, PostgreSQL and MongoDB, JFrog Artifactory, HashiCorp Vault and Splunk, plus application security testing tools including Checkmarx, AppScan and Cycode. It is framed as a combined senior backend developer and DevSecOps position.

Summary

Leads enterprise security architecture, strategy, and governance for BrightSpring's AI Health Cloud platform, securing cloud-native applications, AI/ML systems, healthcare data, and enterprise integrations. The work spans zero-trust frameworks, IAM, API and data protection, DevSecOps (SAST/DAST/SCA), threat modeling, and safeguards against prompt injection and model abuse, with compliance to HIPAA, HITRUST, and NIST. Requires 12+ years in enterprise security architecture; Azure security experience and CISSP or CCSP certifications are preferred.

Summary

A senior security-operations role at health insurer Elevance Health, leading a SOC analyst shift: serving as the escalation point during security-event investigations and incident response, mentoring junior analysts, and maintaining SOC playbooks and on-call coverage. The work also spans implementing and configuring network-security systems and coordinating security vendors. Hybrid with 1-2 in-office days per week and a stated preference for the Indianapolis office.

Summary

A hands-on cloud and application security engineer who owns the company's security posture across AWS and Azure, maintains the SOC 2 Type II program, and runs vulnerability management, IAM, incident response, and SIEM/EDR. It is a largely solo individual-contributor security role reporting to the VP of Cloud Operations and Security, also supporting customer security reviews and audits.

Summary

Titled IT Systems Administrator III, this is really an Identity and Access Management (IAM) application administrator role, owning the Fischer Identity Governance and Administration (IGA) platform. The work is identity lifecycle (joiner/mover/leaver), provisioning/deprovisioning, access certifications, and integrations with HR, SIS, directory, and ERP systems; experience with SailPoint, Saviynt, Okta, or Entra ID is preferred, and it may require U.S.-person status for export-controlled access.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

A senior DevSecOps engineering role centered on securing cloud and development environments, spanning Azure security, application and container/Kubernetes security, IAM, threat modeling, and pipeline security controls (SAST/DAST/IAST). The posting is essentially a security-and-tooling keyword list (Terraform/Bicep, GitHub Actions, WAF, SIEM, CSPM), reflecting a role at the intersection of DevOps and cybersecurity.

Summary

A governance, risk, and compliance role rather than hands-on security operations — developing IT governance frameworks and policies, supporting risk assessments of internal and third-party IT risks, tracking compliance with standards like PCI, NIST, GDPR, and COBIT, and coordinating with internal audit, legal, and compliance teams at the spirits maker.

Summary

An IT Security Specialist at Mirazon (Louisville) combining pre-incident consulting with incident-response leadership - conducting security risk and maturity assessments (NIST/CIS), designing firewall, endpoint, and identity-security strategies, and serving as Incident Response Lead during events (directing containment, eradication, recovery, and ransomware response) while advising client executives. It wants 5+ years in security with 3+ leading incidents (CISSP/GIAC-type certs preferred). It is a senior, client-facing cybersecurity role (a cybersecurity-category posting). A fit for an experienced security consultant/IR lead.

Summary

A Security Analyst role at managed-services provider Louisville Geek, positioned to become the firm's trusted authority on security matters and to lead security projects and implementations with precision and depth. The posting emphasizes deep expertise and independent, detail-oriented work over breadth; a hands-on security seat at an IT-services company.