Open St. Louis Cybersecurity jobs

Summary

Information security work at the Federal Reserve Bank of St. Louis, centered on documenting security controls and preparing system security plans, configuration management plans, contingency plans and business risk assessments against NIST 800-53. The analyst consults with stakeholders on security requirements, manages project plans for information system security reviews, reviews compliance reports, and runs security awareness training for the Eighth District. US citizenship is required and travel is about 5 percent.

Summary

Senior information-security engineering role protecting the confidentiality, integrity, and availability of Segra's fiber network and IT systems, spanning identity/authentication technologies, SIEM administration, and cloud security controls across AWS, Azure, and Office 365. Also covers incident response, PKI/TLS, and compliance with NIST and ISO frameworks, requiring 10+ years of experience. Hybrid, three days per week onsite.

Summary

Senior threat hunting and incident response inside a bank's security program — leading technical analysis of emerging threats, building and testing detection rules with engineering teams, mapping findings to MITRE ATT&CK, and automating hunts, with Jupyter notebooks and AI tooling featuring prominently. Also covers forensic and eDiscovery investigation support and training security operations staff.

Summary

Management role over the end-user security and access function in a university IT organization: supervising the access management technicians, standing up the security tooling used in end-user support, and running audits and compliance activities in coordination with the CISO, HR, Compliance, General Counsel and the HIPAA office. Day-to-day is ITIL-flavored service management, with KPI monitoring, known-error and CMDB audits, escalation handling and process documentation. Posted as a hybrid position in a normal office environment.

Summary

Lead engineer and primary technical owner of a Saviynt-based identity governance and administration platform, responsible for platform architecture, configuration and production readiness, joiner-mover-leaver lifecycle processes, access requests, certifications, provisioning logic and SaaS connectors and integrations. The role designs and enforces security controls including Conditional Access, Zero Trust principles and periodic access reviews, drives root-cause analysis and post-go-live stabilization, mentors junior engineers and shapes the long-term IGA roadmap. Seven or more years of IT experience with identity governance depth is required; candidates must be a US citizen or green card holder intending to naturalize, and must work full time on site within 50 miles of the employing Reserve Bank.

Summary

First dedicated application security hire, responsible for standing up and leading the application security function: owning the strategy, reference architectures and secure design patterns for web, mobile, API, microservices, serverless and AI-enabled applications, and driving the move to a mature secure SDLC with DevSecOps controls. The role automates SAST, DAST, SCA, container image scanning and secrets detection, sets vulnerability remediation SLAs, and acts as the security partner to the AI engineering team on LLM guardrails, RAG pipelines, agent tool permissions and vector database security aligned to the OWASP Top 10 for LLM applications. It is a hybrid position expecting around eight years of experience, with travel as required by the business and on-call availability.

Summary

First dedicated product security hire, owning the enterprise product security strategy, reference architectures and secure-by-design standards across web, mobile, API, microservices, serverless and AI-enabled applications. Hands-on work includes leading the transition to a secure SDLC with embedded DevSecOps gates, operationalizing SAST, DAST, SCA, container scanning and secrets detection, and hardening AI model configurations, system prompts, tool and function calling permissions, content filters and vector database access for the AI engineering team. The position is hybrid, expects roughly eight years of experience, and includes travel as required plus on-call availability.

Summary

The cybersecurity variant of BJC HealthCare's enterprise architect family, owning security architecture direction and cross-domain alignment across the health system. As in the sibling postings, the role explicitly guides and governs rather than designing project-specific solutions or doing implementation work, so the day-to-day is principles, reference architectures, portfolio analysis and lifecycle decisions. Remote with a Missouri or Illinois residency expectation.

Summary

An application security lead on a cleared federal program, owning SAST operations in Fortify and continuous analysis in SonarQube, running DAST and runtime vulnerability assessment, and planning and delivering penetration testing engagements across varied application stacks. The role also covers secure code review, coaching developers through remediation, setting AppSec assessment and pentest reporting standards, and mentoring junior engineers. It requires an active Secret clearance and a DoD 8140.03M DCWF intermediate-tier certification such as Security+, PenTest+, GCIH or CEH.

Summary

A principal-level incident response role executing a health insurer's enterprise incident response plan, coordinating remediation across business units and presenting to the senior leadership team. Day to day includes running security service audit schedules and access control testing, maintaining automated scripts and contingency responses that fire when an attack is detected, and wiring third-party attack monitoring and threat reporting services into the internal cyber incident response team communications. Desired background covers threat actor tactics and techniques, indicators of compromise, endpoint detection and response platforms such as CrowdStrike or Carbon Black, and network and infrastructure technologies.

Summary

A product-security and DevSecOps role embedding security into CI/CD pipelines — designing automated security solutions and integrating SAST, DAST, SCA, and MAST tooling — plus threat modeling, secure-architecture input, and vulnerability analysis for a healthcare company. Requires 5+ years in cybersecurity with an application or product-security focus and hands-on AppSec tooling; scripting in Python/Java/Shell and certs like CISSP or CISM are preferred. Anticipated salary 103,100 to 171,900 USD, remote-capable.

Summary

A lead identity and access management engineer who designs, builds, and maintains enterprise IAM systems and identity-governance solutions, working with Active Directory, Okta, Ping, and IDaaS technologies and leading cross-functional implementations. The role sets IAM technical strategy, standards, and lifecycle-management practices while troubleshooting access issues. It requires earning the Certified Identity and Access Manager (CIAM) credential within 120 days; the posted range is roughly 102,900 to 190,500 dollars.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

SIEM platform engineering and operations for a cybersecurity operations center — designing, building, sustaining, and patching the enterprise audit/SIEM capability, log aggregation, and cyber threat intelligence tooling to a 99.99% availability threshold, with audit-event routing governed by Intelligence Community standards. The requisition is labeled Evergreen.

Summary

An agile-coach and scrum-master position for DevSecOps teams rather than an engineering job: defining agile processes, removing blockers, coaching teams, building Jira automation, and holding teams accountable for deliverables. Requires an active U.S. Secret clearance, 5+ years leading agile teams, at least some scripting or development background, 100% onsite work, and completion of a CodeVue technical assessment during selection.

Summary

Defensive cyber operations analytics — analyzing trends on NGA networks to find and predict incidents, developing and tuning detection rules and signatures, improving SIEM alert efficiency, and supporting purple team exercises and incident response. Requires US citizenship with an active TS/SCI, 8+ years of cyber analytics experience, and certifications compliant with DoD 8140/8570 IAT Level III and CSSP Analyst.

Summary

Zero Trust strategy and architecture consulting: build roadmaps and lead product selection (identity and access management, micro-segmentation, analytics, secure DevOps) aligned to NIST 800-207, the CISA Maturity Model, and the DoD Zero Trust Strategy, while advising CISO, CIO, and CTO-level executives and directing delivery teams. Also carries network design documentation duties like site surveys; requires a Secret clearance.

Summary

Zero-trust data security work with a Virtru vendor focus: implement data tagging, classification, and data-centric security models across networks of different classification levels, plus security automation for cloud infrastructure and CI/CD pipelines using Infrastructure as Code. Requires a Secret clearance.

Summary

Data-centric security engineering built around Virtru: deploy and sustain zero-trust data protection across networks at multiple classification levels, automate compliance validation with Terraform or Ansible, and secure CI/CD pipelines and Kubernetes/Docker workloads. Requires 3+ years with data security solutions and a Secret clearance.

Summary

Senior RMF-style compliance work: manage ACAS and HBSS, own security controls, POA&Ms, and evidence in eMASS, support authorization processes across multiple environments and impact levels, and report security incidents per policy. Requires a Secret clearance.

Summary

Security compliance and risk documentation: administer ACAS and HBSS, address security controls and POA&Ms in eMASS, upload STIG checklists and scan artifacts, and write residual-risk statements across multiple platforms and impact levels. Requires a Secret clearance.

Summary

Data-centric security architecture: design enterprise data protection using classification, encryption, tokenization, and key management with vendor platforms like Virtru, PKWare, and Thales plus DSPM tools such as Varonis or BigID, and run threat modeling and architecture reviews. Requires 5+ years as a data architect and a Secret clearance.

Summary

Senior data-security engineering across DoD, IC, and civilian federal clients: architect and configure data protection solutions (Virtru, PKWare, Thales) and DSPM platforms like Varonis and BigID, build custom data-control policies for hybrid cloud, and document technical architectures. Requires a Secret clearance.

Summary

Deploy and administer data-security tooling for DoD, intelligence community, and civilian federal clients: encryption products like Virtru, PKWare, or Thales plus DSPM platforms such as Varonis and BigID, applying Zero Trust practices and IC data-header guidelines across hybrid cloud environments. Requires a Secret clearance.

Summary

This is security compliance and accreditation work more than engineering — writing security policy drafts, coordinating certification and accreditation under ICD 503 and the customer's RMF process, audit log review, incident response, and acting as the ISSM's representative for an intelligence customer. Requires TS/SCI clearance, an IAM Level II certification (DoD 8570) to start, and work in Springfield, VA or Arnold, MO.

Summary

SOAR platform engineering for naval cyber defense: build detection and automation capabilities, author playbooks on Tines, XSOAR, Splunk Phantom, or Swimlane, and create custom API integrations in Python within containerized environments. Requires 2+ years of security automation experience and a Secret clearance.

Summary

Security automation engineering supporting naval platforms: develop SOAR playbooks in platforms like Tines, Palo Alto XSOAR, Splunk Phantom, or Swimlane, write Python integrations against APIs, and work with Docker, Kubernetes, or Podman. Requires 2+ years building security automation from analyst requirements and a Secret clearance.

Summary

A defense-contractor crypto analyst seat supporting the Air Force Headquarters Cyber Capability Center at Scott AFB, Illinois — the office charged with finding cryptographic capability gaps across space, air, cyber, and ground domains and advancing Air Force cryptographic modernization. Full-time at the base, and the title calls for a TS/SCI clearance.

Summary

A cryptography-focused cybersecurity analyst supporting the Air Force Headquarters Cyber Capability Center at Scott AFB, IL, identifying cryptographic capability gaps across space, air, cyber, and ground domains and advancing Cryptographic Modernization initiatives. This is full-time on-site defense work requiring a TS clearance with SCI eligibility, oriented toward crypto policy and algorithm transition rather than software development.

Summary

A defense cryptographic modernization planning role supporting the Air Force Cyber Capability Center at Scott AFB, IL, identifying cryptographic capability gaps across space, air, cyber, and ground domains and advancing crypto modernization mission directives. This is a strategy and planning role within the cyber/crypto domain rather than hands-on device engineering. Full-time, on-site, requiring a TS clearance with SCI/SAP eligibility.

Summary

A security engineer (level II) role on Stifel Financial's Cybersecurity Incident Response team, a front-line position protecting corporate technology assets by analyzing, detecting, and troubleshooting security situations and building and maintaining security solutions and tooling. It is a compressed-schedule position working four ten-hour days. A fit for a hands-on security engineer interested in incident response and automation in financial services.

Summary

Endpoint security engineering on the Transport and Cybersecurity Services contract supporting the National Geospatial-Intelligence Agency GEOINT mission, centered on engineering and sustaining Carbon Black Endpoint Detection and Response and configuring security products on Linux. Requires an active TS/SCI clearance to be hired, with a government polygraph as a post-hire requirement.

Summary

A lead security engineer role at Nerdy (St. Louis), driving enterprise security and infrastructure strategy across a mixed AWS, Netlify, and Supabase environment. It combines strategic leadership with hands-on operational oversight — protecting company assets, ensuring compliance, and supporting fast growth. Suited to a security engineer ready to own both strategy and execution.

Summary

An application-security engineer with explicit AI-security scope — embeds security into the SDLC and into AI-enabled systems, working alongside an AI-Application Security Architect. The JD names emerging AI risks specifically: prompt injection, model abuse, insecure integrations, and data leakage, alongside traditional appsec testing and vulnerability management. For a senior appsec engineer who wants to grow into LLM / AI-system security inside a regulated financial firm.

Summary

A senior red team operator role at Centene (a large managed care organization), operating 100% remotely, focused on adversarial emulation — developing obfuscation techniques, building custom malware and C2 infrastructure, leading red team engagements, and mentoring junior operators. Requires 3+ years of hands-on red team experience and proficiency with frameworks like Cobalt Strike, Brute Ratel, or Mythic; Microsoft enterprise environment exploitation expertise is specifically called out.

Summary

Despite the cyber security title, this is a Linux systems engineering role on a network defense team — automating system maintenance with shell scripts, managing system logging and log analysis, and configuring firewalls, SELinux policies, storage, and core networking services. Requires an active TS/SCI clearance; AWS, Terraform, and Ansible familiarity are called out as advantageous rather than required.

Summary

An entry point into red team work despite the level IV title: the engineer researches how adversaries carry out specific techniques, reproduces them in a controlled test environment, and runs Threat Detection Assessments to determine whether the organization's defenses catch them. Day-to-day work is reading technical threat research, writing the tools and scripts each test needs, executing alongside partner detection and response teams, and documenting what the defenses did, with all output reviewed by senior engineers before use. The posting states plainly that no prior red team or offensive security experience is required and that the role is structured around mentorship and increasing independence.