Open Nashville Cybersecurity jobs

Summary

This role supports a health insurer's data-at-rest encryption program and cloud database security, onboarding databases, applications and cloud resources into enterprise data-protection and monitoring platforms and performing security event validation, log analysis and operational troubleshooting for those technologies. A substantial automation component runs alongside the security work: Terraform, Ansible, scripting and CI/CD pipelines used to build automated workflows, operational playbooks and infrastructure-as-code, plus entry-level data science concepts applied to security operations visibility. The analyst works across AWS, Azure and GCP with infrastructure, database administration, cloud engineering, DevOps and cybersecurity teams, supports proof-of-concept evaluations of new cloud database technologies, and is required onsite one to two days per week.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

A bank cybersecurity analyst role centered on analyzing, identifying and documenting cybersecurity information and risk, working in support of several other internal security teams rather than owning a single system. The posting points toward vulnerability assessment, governance-risk-and-compliance and audit process work with security operations center exposure, and names Security+ as its certification signal.

Summary

Sits inside the Regions cyber security organization, covering security for cloud applications, infrastructure and platform technologies at the bank. The posted description is brief, but the listed skills point to hands-on vulnerability assessment and penetration testing work with Nessus, nmap and Burp Suite, plus scripting and OWASP practices, with CompTIA Security+ named among the qualifications.

Summary

First dedicated application security hire, responsible for standing up and leading the application security function: owning the strategy, reference architectures and secure design patterns for web, mobile, API, microservices, serverless and AI-enabled applications, and driving the move to a mature secure SDLC with DevSecOps controls. The role automates SAST, DAST, SCA, container image scanning and secrets detection, sets vulnerability remediation SLAs, and acts as the security partner to the AI engineering team on LLM guardrails, RAG pipelines, agent tool permissions and vector database security aligned to the OWASP Top 10 for LLM applications. It is a hybrid position expecting around eight years of experience, with travel as required by the business and on-call availability.

Summary

First dedicated product security hire, owning the enterprise product security strategy, reference architectures and secure-by-design standards across web, mobile, API, microservices, serverless and AI-enabled applications. Hands-on work includes leading the transition to a secure SDLC with embedded DevSecOps gates, operationalizing SAST, DAST, SCA, container scanning and secrets detection, and hardening AI model configurations, system prompts, tool and function calling permissions, content filters and vector database access for the AI engineering team. The position is hybrid, expects roughly eight years of experience, and includes travel as required plus on-call availability.

Summary

Offensive security leadership role at a health insurer, driving development of AI-driven offensive tooling and autonomous agents that extend penetration testing and red team operations. The posting pairs conventional red team and threat simulation work with AI security testing, listing prompt injection and jailbreak testing, adversarial testing of LLM applications, MITRE ATLAS, PyRIT and Garak, plus EDR and XDR evasion testing and malware development. It expects production-grade software engineering in Python, cloud fluency across AWS, GCP and Azure, and mentoring plus stakeholder management responsibilities.

Summary

A people-leadership role over a security engineering team, responsible for getting security testing tools built and integrated into engineering workflows so weaknesses are found and addressed efficiently. It owns escalation protocols for security violations including communication with senior leadership and stakeholders, and runs and coaches others through compliance assessments and data protection practices such as encryption, hashing, masking and access management. Qualifications are framed around IT security experience across cloud, endpoint and logging, vulnerability and risk assessment, identity and access management and compliance, plus incident response and threat modeling depth.

Summary

Backend engineering role modernizing a health insurer's internal enterprise security platform, building scalable services and improving deployment automation rather than performing security analysis. The listed stack is .NET and C# on Azure with Terraform, GitHub Actions and Azure DevOps, PostgreSQL and MongoDB, JFrog Artifactory, HashiCorp Vault and Splunk, plus application security testing tools including Checkmarx, AppScan and Cycode. It is framed as a combined senior backend developer and DevSecOps position.

Summary

Software engineering role on the Oracle Cloud Infrastructure PKI team, building and operating cloud-scale public key infrastructure services that manage certificates, cryptographic keys and trust infrastructure across OCI. The engineer designs, develops, tests and delivers highly available distributed services, works with security teams and partner service teams on new capabilities, and contributes to the evolution of OCI's security platform. An interest in applied cryptography and cloud security is expected alongside distributed systems fundamentals.

Summary

A security operations center role within a managed security services (MSS) team, serving as a primary responder for client security systems through health checks, ticket triage, SIEM and endpoint product support, and escalation handling. The work centers on security tooling such as SentinelOne, CrowdStrike, Splunk, and Microsoft Sentinel. This is a third-shift overnight position (Wednesday through Saturday), with Security+/Network+ preferred.

Summary

Security engineering focused on building advanced testing tools and methodologies that proactively surface security weaknesses, along with recognizing and escalating complex security violations for prompt resolution. The role contributes to compliance assessments that evaluate the effectiveness of security controls and applies data protection techniques such as encryption, hashing, masking and access management. It is posted at the IC4 senior individual contributor level.

Summary

Security engineering role building testing tools that help engineering teams identify security weaknesses, with responsibilities across security monitoring and security tool design and development. The engineer recognizes and escalates complex security violations, contributes to compliance assessments against internal and external obligations, and advises on data protection practice using techniques such as encryption, hashing, masking and access management.

Summary

Backend software engineering role building the cloud-scale services behind Oracle Cloud Infrastructure's Web Application Firewall platform, including policy management, rule evaluation, traffic inspection, bot mitigation, API protection, and security analytics. The work spans distributed systems that process high volumes of HTTP and HTTPS traffic at low latency, in close partnership with Security Engineering on next-generation application security capabilities.

Summary

Software engineering role on Oracle Cloud Infrastructure's Identity and Access Management team, building and operating the cloud services that power global authentication and authorization. Involves designing secure, scalable distributed systems and contributing to the technical direction of key projects across multiple teams.

Summary

A management role over identity and access management at a regional bank, leading a mixed team of engineers, analysts, and administrators who implement IAM practices across the enterprise and keep operations running. The stated toolset leans toward privileged access and secrets management with CyberArk and HashiCorp Vault, alongside DevSecOps work such as CI/CD pipelines and infrastructure as code.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

A security architect opening on the business enablement side at Regions in Nashville. The posting as captured carries no substantive role description beyond the title, so scope, stack, and requirements are unspecified — candidates would need the original listing for specifics.

Summary

A director-level leadership role guiding the evolution of a global identity and access management program, spanning identity governance (SailPoint), privileged access management (CyberArk), federation, and identity lifecycle management. The mandate is strategic and transformational — governance frameworks like NIST CSF, risk management, metrics reporting, and change management — in what the posting describes as a modern, AI-enabled context. For a security leader who wants to run an enterprise IAM program rather than engineer it hands-on.

Summary

A senior, director-level advisory role serving as the primary security advisor for assigned lines of business. The scope covers cyber risk advisory across application security, cloud security, secure SDLC, API security, and third-party risk management, with executive communication and risk reporting front and center. Suits a security leader who translates technical risk into business terms rather than operating tooling day to day.

Summary

A cybersecurity leadership role directing security operations and a CMMC-focused managed services practice for one of Arctiq's clients, overseeing EDR, SIEM, vulnerability management, email security, and security awareness training. A core mandate is building the compliance program around CMMC Level 2 and NIST SP 800-171, including audit readiness, control ownership, and coordination with external assessors. This is an on-site, full-time position in Knoxville, TN.

Summary

A Director of Cyber Risk leading the enterprise cyber and technology risk-management program — a governance, risk, and compliance (GRC) leadership role rather than hands-on engineering. Centers on frameworks like NIST CSF 2.0 and ISO 27001/27005, risk assessment and quantification, GRC platforms (ServiceNow IRM, Archer, OneTrust), policy governance, and executive communication.

Summary

A Senior Director, Cyber Risk and Trust, leading the enterprise function for cybersecurity risk governance, compliance, and customer trust — a senior GRC leadership role above the Director, Cyber Risk position. Spans risk management, third-party risk, control-framework alignment (NIST CSF, ISO 27001, CIS Controls), security awareness, executive reporting, and team and change leadership.

Summary

An Identity and Access Management engineer at Regions Bank, designing, developing and integrating IAM systems and solutions with tools like HashiCorp Vault, CyberArk and Kubernetes. It blends software engineering with security, sitting at the IAM intersection rather than general app development.

Summary

A cybersecurity controls-assurance management role, partnering across technology and operations to ensure security controls are designed, implemented, and monitored to strengthen risk management and compliance. The brief excerpt emphasizes control testing, control frameworks, and continuous or automated testing. Multiple Southeast U.S. locations.

Summary

IAM analyst role within UL Solutions' Global Cybersecurity team, supporting implementation and ongoing management of identity and access management solutions — provisioning, governance, and compliance with SOX/HIPAA/GDPR frameworks. Requires 3-5 years of IAM experience with tools like Azure AD, Saviynt, SailPoint, or Okta. Hybrid (3 days onsite) if near a UL office, otherwise fully remote.

Summary

An AI security-architect role at EnableComp, a specialty revenue-cycle-management company whose E360 platform processes millions of healthcare claims with intelligent automation, responsible for securing the company's AI-driven systems. A remote security-architecture role in healthcare revenue-cycle management (Franklin, TN).

Summary

A management role at Regions leading the development and implementation of enterprise and cyber-security architecture plans grounded in business requirements and technology strategy, drawing on broad experience across technical, security, and solution architecture. A security-architecture leadership role at a US bank (Hoover, AL).

Summary

Management-level architecture role at a regional bank spanning enterprise architecture and cyber security architecture. The stated bar is eight years of experience across two or more technology disciplines in a heterogeneous environment, such as technical architecture, security architecture, solution architecture or network management. Named focus areas include DevSecOps, virtualization and IT security architecture.

Summary

This role supports LBMC's internal Information Security function, monitoring security logs and alerts, assisting vulnerability management and penetration-test follow-up, running phishing-campaign monitoring and security-awareness training, and helping respond to and investigate security incidents. It's an early-career analyst position (1-3 years of IT risk/cybersecurity experience, bachelor's degree preferred) based in Nashville with mentorship from senior security staff.

Summary

Internal security analyst for a professional services firm's enterprise technology group — reviewing and remediating security alerts, vulnerability management, phishing-campaign monitoring, threat hunting across datasets, and building detection and alerting strategies. A hands-on defender seat that also supports incident response, investigations, and security awareness training.

Summary

A cybersecurity GRC role delivering security and compliance assessments and consulting for healthcare clients, grounded in HIPAA, HITECH, HITRUST, and the NIST Cybersecurity Framework. Day to day includes on-site information-security assessments, developing corrective and risk-management plans, and interpreting output from tools like anti-malware, encryption, and vulnerability scans. It is a mid-level role (3+ years) performed under supervision.

Summary

A senior threat defense analyst role at Fortified Health Security's 24x7 managed-security operations center for healthcare customers: monitoring, detecting, analyzing and reporting on security alerts across SIEM, EDR, DLP, IoMT and phishing services, creating and fine-tuning detection rules, performing advanced incident investigation, proactively threat hunting, and mentoring level I and II analysts. It wants 4+ years of hands-on security-tools and InfoSec experience; Nashville.

Summary

A Network Security Engineer at Fortified Health Security designing, implementing, and monitoring a health system's network security infrastructure — firewalls, NAC, VPN/secure remote access, network segmentation, and Zero Trust (ZTNA) — across corporate, clinical, cloud, and connected medical device (IoMT) environments. The work includes firewall policy management, network threat monitoring, and incident response, partnering with network engineering and clinical teams. A mid-level healthcare network-security role in Nashville.

Summary

An Identity and Access Management (IAM) Engineer at Fortified Health Security, implementing and administering a health system's identity security — identity lifecycle (JML provisioning/deprovisioning), RBAC, SSO/MFA and federation, privileged access management (PAM), and identity governance. It works across Microsoft Entra ID, Active Directory, and LDAP to enforce least-privilege access under HIPAA, partnering with HR and application owners. A mid-level healthcare IAM/cybersecurity engineering role in Nashville.

Summary

A Security Engineer at Fortified Health Security implementing, maintaining, and improving a health system's cybersecurity tools and controls. The work spans tool administration (MFA, EDR, email security), SOAR automation, encryption/certificate management, DLP, SIEM integration and incident response, and vulnerability remediation across cloud (Azure, AWS, M365) and on-prem. A hands-on healthcare cybersecurity-operations engineering role (mid-level, Nashville), not software development.

Summary

A Level 2 Threat Defense Analyst in Fortified Health Security's 24x7 Threat Defense Center, monitoring, detecting, analyzing, and reporting on security alerts across healthcare customer environments (managed SIEM, EDR, phishing, IoMT, DLP). The work includes incident investigation, threat hunting through logs, and detection-rule tuning, with scripting (Python/Bash/PowerShell) and compliance knowledge (NIST, HIPAA, HITRUST). A SOC analyst role on a Sunday-Wednesday swing shift; cybersecurity operations, not software development.

Summary

An Incident Response Analyst at Fortified Health Security delivering the company's Incident Response Retainer and Maturity Program to healthcare clients. The work supports the IR lifecycle — assessments, evidence collection under chain-of-custody, tabletop exercises, and containment/eradication/recovery support — with a supervised 90-day onboarding before client-facing work. It requires foundational incident-response knowledge and willingness to work extended hours during emergencies; an entry-level cybersecurity IR role in Nashville.

Summary

An application security analyst role at HealthStream (Nashville), securing the healthcare workforce applications it delivers on its platform. The work covers identifying and helping remediate security risks across its learning, credentialing, and scheduling products. A fit for an AppSec practitioner who wants product-security work in a healthcare-software setting.