Cybersecurity Jobs in Santa Ana, CA

Lead IT operations across multiple manufacturing sites, standardize processes and policies, ensure NIST 800-171/CMMC compliance, manage network, virtualization, cloud, and cybersecurity tools, mentor site IT Managers, oversee budgets, KPIs, projects, and vendor relationships to align IT with corporate objectives.

The VP of Engineering leads the engineering organization to scale robotics platforms, ensuring reliable and operational systems through collaboration and technical guidance while mentoring leaders and enhancing engineering practices.

Lead IT advisory engagements for middle-market clients, conducting IT assessments, providing fractional IT leadership, driving cloud and infrastructure transformation, executing strategy via OKRs, and leading generative AI briefings and adoption programs (Copilot, AI risk assessments, custom AI apps). Advocate change management and collaborate with internal teams to convert briefings into managed services revenue.

Drive Managed IT and Cybersecurity sales across an assigned territory by leading technical discovery, designing tailored infrastructure and security solutions, supporting the full sales cycle, enabling outside sales teams, and expanding account opportunities. Collaborate cross-functionally and manage proposals, SOWs, and post-sale transitions. Requires regular regional travel.

The Program Manager oversees multiple interdependent projects, manages program execution, assesses risks, and coordinates with various teams to ensure alignment and effective program delivery.

Execute end-to-end third-party risk management including intake, risk tiering, questionnaire administration, evidence review, scoring, and risk decisioning. Review cybersecurity contract provisions and coordinate redlines. Assess supply-chain, geopolitical, and AI vendor risks. Serve as liaison to OpCo coordinators to ensure consistent vendor risk handling. Operate and maintain enterprise risk register, ensure data quality, aggregate cross-OpCo risk, and produce executive-grade reporting.

Lead end-to-end third-party risk management across vendor lifecycle, review vendor security evidence and contracts, assess supply-chain and AI vendor risks, ensure consistent scoring and escalation, and support enterprise risk register operations and executive reporting.

Manage end-to-end third-party risk lifecycle: vendor intake, questionnaires, evidence review and scoring, and risk decisioning. Review cybersecurity contract language with Legal/Privacy/Procurement, assess supply-chain and AI vendor risks, coordinate consistency across operating companies, and maintain enterprise risk register and executive reporting.

Support security operations by monitoring email threats and endpoint detections, triaging incidents with EDR/SIEM tools, documenting SOPs, assisting investigations and improving detection and response workflows while collaborating with IT and Security teams.

Design and implement security controls across cloud and on-premises environments, automate security processes, and monitor security postures. Collaborate with teams to enforce security policies and frameworks, handle incidents, and conduct assessments.

Paid fall internship in Tevora's Threat practice providing hands-on training in internal/external network and web application penetration testing, shadowing consultants, remediation validation, reporting, and client communication. Interns learn networking and systems administration fundamentals, security frameworks (PCI-DSS, HIPAA, ISO 27001), assist on client engagements, document findings, and may receive a full-time offer upon successful completion.

Paid, immersive cybersecurity internship to learn and support ISO compliance engagements. Duties include data collection, template/procedure creation, report writing, security posture assessments against ISO standards, assisting ISMS and BCMS development, observing security testing, and supporting client engagements while developing technical and professional skills.

Paid, immersive cybersecurity internship to develop technical and professional skills. Responsibilities include learning compliance frameworks, observing enterprise security implementations and penetration testing, gathering and executing technical plans, documenting procedures, and assisting consultants on client engagements to prepare for an entry-level Information Security Associate role.

Paid immersive cybersecurity internship focused on federal compliance and security consulting. Learn and assist with assessments, governance, enterprise security solutions, penetration testing, social engineering, requirements gathering, execution planning, and client engagements. Successful completion may lead to a full-time entry-level Information Security Associate role.

Paid, immersive fall internship in Payments cybersecurity. Learn and assist with PCI DSS and PA-DSS assessments, penetration testing, secure implementations, documentation, and client engagements to prepare for an entry-level Information Security Associate role.

Paid, immersive fall internship to train participants in SOC assessments, compliance frameworks, enterprise security implementations, and penetration testing. Interns support remediation, document technical procedures, gather requirements, and assist consultants with client engagements, with potential full-time placement on successful completion.

Paid, immersive fall internship (Oct–Dec) in Enterprise Risk Management. Interns support enterprise and vendor risk assessments, governance frameworks, compliance (PCI-DSS, HIPAA, ISO 27001), observe security implementations and testing, draft execution plans and documentation, and assist consultants with client engagements to develop technical and professional skills toward an entry-level Information Security role.