Top Cyber Security Jobs in Pensacola, FL

Perform manual application and API penetration testing, validate SAST, SCA, and DAST findings, assess cloud security across AWS, Azure, and GCP, and identify vulnerabilities and misconfigurations. Integrate security into CI/CD pipelines, develop scripting and command-line tooling, support remediation and secure coding, participate in architecture reviews, and report security metrics. The role also uses CSPM capabilities and AI-enabled development and security assistants.

Configures and optimizes DAST and API security scanning across applications, APIs, and CI/CD pipelines. Performs manual application penetration testing, validates SAST/SCA/DAST findings, assesses cloud security across AWS, Azure, and GCP, and develops scripting and CLI tooling. Partners with development, DevOps, and cloud teams to remediate vulnerabilities, improve secure coding, conduct architecture reviews, and track security metrics.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Assesses enterprise information security risks, performs vulnerability and security posture assessments, and coordinates remediation across networks, systems, applications, and vendors. Develops security policies and standards aligned with SOX, PCI, HIPAA, and NIST guidance; supports audits, incident response, training, access monitoring, and security projects. Communicates technical risks and corrective actions to technical and nontechnical stakeholders while mentoring teams and managing competing priorities.

Supports cybersecurity governance, risk, and compliance consulting engagements. Responsibilities include conducting discovery, gathering evidence, maintaining risk registers, mapping controls to frameworks, performing gap and maturity assessments, reviewing policies, evaluating third-party risk, drafting client deliverables, and supporting workshops and client communications. The role contributes to proposals, reusable consulting assets, and practice development while building foundational GRC expertise under senior consultant guidance.

The ISSO plans, implements, and maintains the Risk Management Framework for assigned systems; develops security documentation including SSPs, SARs, and POA&Ms; supports the ISSM; collaborates with system owners and security professionals; provides training and briefings; and ensures compliance with DoD and DoN cybersecurity policies.

Lead technical discovery, customized demonstrations, and proofs of value for enterprise CTEM customers. Map vulnerability, asset, ticketing, and remediation workflows; integrate customer tools; prove exposure-management outcomes using customer data; and communicate findings to engineers, CISOs, and executives. Maintain presales deal information, provide product feedback, create reusable demo and POV assets, and expand expertise into third-party risk management and cyber risk quantification.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Manage enterprise and federal cybersecurity compliance programs, audit readiness, continuous monitoring, POA&M remediation, third-party risk, policy governance, documentation, and security training. Coordinate cross-functional stakeholders across Security, Engineering, DevOps, IT, GRC, Procurement, and Legal. Maintain compliance plans, evidence, risk registers, control documentation, and audit-ready materials while supporting FedRAMP High, DoD IL5, SOC 2, ISO 27001, and related requirements.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Own application security across cloud services, APIs, data pipelines, and edge-deployed applications. Lead threat modeling, secure design reviews, code reviews, vulnerability assessments, and remediation. Build CI/CD security tooling, automation, and secure-by-default developer frameworks while maturing the SDLC, supply-chain security, vulnerability disclosure, and bug bounty processes. Partner with engineering and security operations, provide incident expertise, and deliver developer security training.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Implement and validate Oracle Cloud Infrastructure security controls for a federal health customer. Responsibilities include securing IAM, networks, encryption, monitoring, Cloud Guard, Security Zones, Security Advisor, threat intelligence, key management, SIEM integrations, and Infrastructure as Code automation. The engineer will collaborate with cloud operations, migration, application, and systems teams while establishing technical security standards for cloud and on-premises environments.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Lead the technical presales process for Proofpoint’s data security and insider risk solutions. Partner with sales teams, conduct technical discovery, design security architectures, and manage proof-of-concept and production evaluations. Present solutions to customers, support deployments and training, collaborate with Professional Services, Engineering, Product Management, and Support, and provide customer insights to improve products. The role also develops internal documentation, training, and repeatable sales engineering processes.

Supports enterprise cybersecurity and GRC programs through third-party risk assessments, security testing coordination, corrective action tracking, policy development, compliance support, incident response planning, disaster recovery exercises, and enforcement of technical and administrative controls. Partners with engineering, operations, managed security providers, and internal stakeholders to strengthen security posture across cloud and hybrid environments.

Owns company-wide security operations, cloud and infrastructure security, incident response, zero-trust architecture, blockchain treasury controls, compliance, privacy, production reliability, Terraform, CI/CD, observability, disaster recovery, and on-call operations. This hands-on leadership role reports to the CTO, represents the company to auditors and customers, and builds security automation across GCP, Cloudflare, GitHub, Google Workspace, and Ethereum infrastructure.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Lead Pomelo Care’s enterprise security governance, risk, and compliance program. Own SOC 2 Type II and HITRUST certification lifecycles, security policies, access governance, HIPAA risk assessments, awareness training, control monitoring, incident response, and third-party risk assessments. Partner with engineering leadership to align technical roadmaps with security strategy, represent the company during audits and partner due diligence, and report security posture and program maturity to executives.