Security Engineer Jobs in Utah
Security Engineer jobs in Utah are concentrated in Salt Lake City, Provo, and Lehi, where employers like Domo, Adobe, and the State of Utah actively recruit across network security, cloud security, and application security disciplines. The region's growing tech corridor along the Wasatch Front has made Utah one of the more active markets for security engineers at every level, from associate analysts stepping into their first dedicated security role to senior architects leading enterprise programs. Find a role that fits below and apply directly.
Find Security Engineer JobsOverview
Showing 5 of 18+ Security Engineer jobs
*** Please note that this is a HYBRID role, requiring this person to work at our Cottonwood Heights office in SLC two days a week. We are not able to provide work sponsorship (i.e. OPT, STEM-OPT or H-1B visa) for this role ***
As a Sr. Application Security Engineer at Extra Space, you'll be a trusted security partner embedded in how our engineering teams design, build, and ship software. You'll work across our Product Engineering org alongside principal and staff engineers, the cybersecurity team, and a security champion on every engineering team, building security in from the start. Our applications run on AWS and Vercel. They're built mostly with C# .NET, TypeScript, and React/Next.js, backed by SQL Server and other relational and non-relational databases.
Duties & Responsibilities
- Conduct security architecture and design reviews for new and evolving features, surfacing risk early and recommending practical mitigations.
- Perform threat modeling and manual and automated code reviews, and partner with developers to prioritize and remediate what you find.
- Drive a risk-based approach to application security, helping teams understand vulnerabilities in terms of business impact.
- Mature our Secure SDLC, including secure coding standards, security requirements, and automated checks (SAST, DAST, SCA, secrets scanning) in our CI/CD pipelines.
- Build and maintain security tooling and automation that scales across teams, with a focus on reducing risk rather than adding tools.
- Lead and grow the security champions program, training champions so each team has security expertise close at hand.
- Serve as the application security subject matter expert for engineering, product, and leadership, and mentor engineers on secure development practices.
- Make sure AI tools and AI-powered features are adopted within acceptable risk limits.
- Align our applications with SOC 1, SOX, CIS v8, and PCI DSS (SAQ-A, SAQ-P2PE), and support audits with evidence and remediation plans.
Requirements
- 6+ years of combined experience in software engineering, application security, product security, or a closely related field.
- Proficiency in most of our primary languages (C# .NET, TypeScript, JavaScript, SQL).
- Experience securing web applications built on modern frameworks and cloud-native architectures, particularly AWS.
- Hands-on white-box testing and secure code review experience.
- Strong understanding of SSDLC principles and experience implementing or maturing secure development programs.
- Solid understanding of common vulnerabilities and attack techniques (OWASP Top 10, API security, authentication and authorization flaws).
- Experience integrating security tooling into delivery pipelines (GitHub, TeamCity, or similar).
- Familiarity with AI security risks and emerging attack surfaces, including agentic systems, MCP, and LLM-powered workflows.
- A risk-focused mindset: you can explain security risk in business terms, weigh it against the business's needs and risk tolerance, and help teams make pragmatic decisions without security theater.
- A proven ability to build trusted relationships with engineering teams and guide behavior without direct authority.
- Strong written and verbal communication, equally comfortable in a design review with engineers and a risk conversation with leadership.
Preferred Qualifications
- Development experience with Next.js, Vercel, or serverless architectures.
- Practical knowledge of security frameworks and standards such as OWASP ASVS, NIST 800-53, CIS v8, PCI DSS, or SOX.
- Hands-on security certifications such as OSCP, BSCP, GWEB, PNPT, or similar.
- Experience running or triaging a bug bounty program.
- Bachelor's degree in Computer Science, Information Security, or a related field.
Work Environment & Physical Requirements
Performs sedentary work in an office environment with limited lifting (less than 10 pounds) or walking required. Close visual acuity required to perform work at computer terminal. No exposure to adverse environmental conditions. Requires repetitive typing motion, talking, hearing, grasping and feeling.
Disclaimer
The job description outlines the general nature and scope of work employees perform in this role. It's not intended to be an exhaustive list of all duties, responsibilities, or qualifications required for the position. The company reserves the right to modify, revise, or update the job description to meet business needs.
If you are a current Extra Space employee, please apply through Jobs Hub in Workday.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Applications Deadline: Applications will be accepted until the position is filled.
*** Please note that this is a HYBRID role, requiring this person to work at our Cottonwood Heights office in SLC two days a week. We are not able to provide work sponsorship (i.e. OPT, STEM-OPT or H-1B visa) for this role ***
As a Sr. Application Security Engineer at Extra Space, you'll be a trusted security partner embedded in how our engineering teams design, build, and ship software. You'll work across our Product Engineering org alongside principal and staff engineers, the cybersecurity team, and a security champion on every engineering team, building security in from the start. Our applications run on AWS and Vercel. They're built mostly with C# .NET, TypeScript, and React/Next.js, backed by SQL Server and other relational and non-relational databases.
Duties & Responsibilities
- Conduct security architecture and design reviews for new and evolving features, surfacing risk early and recommending practical mitigations.
- Perform threat modeling and manual and automated code reviews, and partner with developers to prioritize and remediate what you find.
- Drive a risk-based approach to application security, helping teams understand vulnerabilities in terms of business impact.
- Mature our Secure SDLC, including secure coding standards, security requirements, and automated checks (SAST, DAST, SCA, secrets scanning) in our CI/CD pipelines.
- Build and maintain security tooling and automation that scales across teams, with a focus on reducing risk rather than adding tools.
- Lead and grow the security champions program, training champions so each team has security expertise close at hand.
- Serve as the application security subject matter expert for engineering, product, and leadership, and mentor engineers on secure development practices.
- Make sure AI tools and AI-powered features are adopted within acceptable risk limits.
- Align our applications with SOC 1, SOX, CIS v8, and PCI DSS (SAQ-A, SAQ-P2PE), and support audits with evidence and remediation plans.
Requirements
- 6+ years of combined experience in software engineering, application security, product security, or a closely related field.
- Proficiency in most of our primary languages (C# .NET, TypeScript, JavaScript, SQL).
- Experience securing web applications built on modern frameworks and cloud-native architectures, particularly AWS.
- Hands-on white-box testing and secure code review experience.
- Strong understanding of SSDLC principles and experience implementing or maturing secure development programs.
- Solid understanding of common vulnerabilities and attack techniques (OWASP Top 10, API security, authentication and authorization flaws).
- Experience integrating security tooling into delivery pipelines (GitHub, TeamCity, or similar).
- Familiarity with AI security risks and emerging attack surfaces, including agentic systems, MCP, and LLM-powered workflows.
- A risk-focused mindset: you can explain security risk in business terms, weigh it against the business's needs and risk tolerance, and help teams make pragmatic decisions without security theater.
- A proven ability to build trusted relationships with engineering teams and guide behavior without direct authority.
- Strong written and verbal communication, equally comfortable in a design review with engineers and a risk conversation with leadership.
Preferred Qualifications
- Development experience with Next.js, Vercel, or serverless architectures.
- Practical knowledge of security frameworks and standards such as OWASP ASVS, NIST 800-53, CIS v8, PCI DSS, or SOX.
- Hands-on security certifications such as OSCP, BSCP, GWEB, PNPT, or similar.
- Experience running or triaging a bug bounty program.
- Bachelor's degree in Computer Science, Information Security, or a related field.
Work Environment & Physical Requirements
Performs sedentary work in an office environment with limited lifting (less than 10 pounds) or walking required. Close visual acuity required to perform work at computer terminal. No exposure to adverse environmental conditions. Requires repetitive typing motion, talking, hearing, grasping and feeling.
Disclaimer
The job description outlines the general nature and scope of work employees perform in this role. It's not intended to be an exhaustive list of all duties, responsibilities, or qualifications required for the position. The company reserves the right to modify, revise, or update the job description to meet business needs.
If you are a current Extra Space employee, please apply through Jobs Hub in Workday.
We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Applications Deadline: Applications will be accepted until the position is filled.
See All 18 Security Engineer Jobs in Utah
Find roles in Utah that match your experience and apply in just a few clicks.
Find Security Engineer JobsSecurity Engineer Jobs by City in Utah
Where Utah roles are concentrated, by current openings.
Security Engineer Job Market in Utah
A snapshot from current Utah openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Staffing & Recruiting
What Utah Employers Look For
The qualifications that appear most often in security engineer jobs across Utah.
- Industry certifications such as CISSP, CEH, or Security+ required or strongly preferred
- Bachelor's degree in computer science, information security, or a related technical field
- Hands-on experience with SIEM platforms, intrusion detection, and endpoint protection tools
- Familiarity with NIST, ISO 27001, or CIS security frameworks and compliance requirements
- Proficiency in scripting or automation using Python, PowerShell, or Bash for security tasks
- Experience conducting vulnerability assessments, penetration testing, or threat modeling exercises
Security Engineer Jobs in Utah: Frequently Asked Questions
How do you become a security engineer in Utah?
Start with a bachelor's degree in computer science, cybersecurity, or information technology, then build toward certifications like CISSP, CompTIA Security+, or Certified Ethical Hacker, which Utah employers consistently require. Utah has no state-issued security engineer license, so credentials and demonstrated technical skills carry the most weight. Many candidates build experience through IT support or network administration roles before moving into dedicated security engineering positions.
How much do security engineers make in Utah?
Security engineers in Utah earn a median of about $97,470 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $49,990 for the lowest 10% to over $158,350 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire security engineers in Utah?
Utah security engineer roles are posted by Northrop Grumman, Dark Wolf Solutions, and Extra Space Storage and others right now, based on current listings on Migrate Mate as of November 2026. Utah's Wasatch Front tech corridor draws a wide range of employers, from enterprise software companies headquartered in the Silicon Slopes area to state government agencies and financial services firms that maintain large security teams.
Which Utah cities have the most security engineer jobs?
Salt Lake City, Ogden, and Roy account for the largest share of security engineer openings in Utah. Salt Lake City drives the bulk of postings through its concentration of financial institutions, healthcare organizations, and state government agencies, while Lehi and Provo reflect the dense cluster of technology companies that have made the Silicon Slopes corridor one of the fastest-growing tech employment zones in the Mountain West.
Are there remote security engineer jobs in Utah?
Yes, and more than most fields. Security engineering is largely desk-based work involving monitoring, analysis, and configuration that translates well to remote and hybrid arrangements. About 71% of security engineer openings tied to Utah are remote or hybrid as of November 2026, reflecting strong employer flexibility across the sector. Cloud security, threat intelligence, and SOC analyst-adjacent roles tend to be the most consistently remote-eligible positions.
How can I get hired as a security engineer in Utah with little or no experience?
The most realistic entry path is landing a junior IT or systems administrator role at a Utah employer, then transitioning internally once you have CompTIA Security+ or a similar foundational credential. Large Utah employers like the State of Utah and major healthcare systems such as Intermountain Health regularly hire IT generalists into security-adjacent roles. Building a home lab, earning CompTIA CySA+ or Network+, and contributing to open-source security projects gives candidates a concrete portfolio that stands out against other applicants without formal security experience.
Where can I find and apply to security engineer jobs in Utah?
You can find and apply to security engineer jobs in Utah on Migrate Mate, which lists current openings tied to Utah employers. Search the listings, find roles that match your experience and specialization, and apply directly to the ones that fit.
See All 18 Security Engineer Jobs in Utah
Find roles in Utah that match your experience and apply in just a few clicks.
Find Security Engineer Jobs