Top Cyber Security Jobs in Phoenix, AZ

Leads the design, automation, operation, and support of enterprise PKI and certificate lifecycle management services. Develops certificate issuance, renewal, discovery, compliance, and integration solutions using APIs and modern engineering practices. Supports cryptographic modernization, crypto-agility, post-quantum readiness, and machine identity technologies. Identifies security risks, collaborates with application and infrastructure teams, provides technical leadership, and mentors professionals across certificate management initiatives.

Supports IAM operations by analyzing access processes, controls, workflows, data, and trends to identify risks and improvement opportunities. Executes access management, identity lifecycle activities, access reviews, remediation, control evidence gathering, and audit walkthroughs. Develops documentation and reporting, gathers requirements, coordinates IAM projects, and supports automation and process improvements. Partners with business, technology, risk, and product teams while escalating operational issues, risks, blockers, and recommended actions.

Leads web application and network penetration testing, develops proof-of-concept exploits, identifies and rates vulnerabilities, supports remediation, and conducts security risk assessments. Develops custom testing tools and techniques, uses AI-enhanced scanners, validates AI-assisted findings, and mentors cybersecurity engineers. Collaborates on incident investigations, compliance, and security technology implementation while ensuring ethical, privacy, and regulatory standards.

Conduct manual and automated penetration testing of web, mobile, and API applications. Configure DAST tools, validate findings, triage false positives, document vulnerabilities, and support remediation. Collaborate with development and security teams, perform peer reviews, improve testing methodologies, and apply AI-assisted security scanning while accounting for model limitations, compliance, privacy, and ethical considerations.

Lead IAM operational teams, optimize identity and access management processes, investigate incidents, manage risk, and support RBAC, PAM, lifecycle management, onboarding, offboarding, and access reviews. Develop strategies, metrics, training, and reporting while partnering with IT, cybersecurity, HR, business stakeholders, vendors, auditors, and regulators. Drive IAM projects, automation, compliance, operational resilience, and continuous process improvements.

Designs, secures, and modernizes enterprise identity infrastructure across Active Directory, Microsoft Entra ID, virtual directories, and Linux platforms. Responsibilities include identity governance, authentication, privileged access, Zero Trust, monitoring, threat detection, incident response, hardening, audit support, and regulatory compliance. The role partners with cybersecurity, infrastructure, cloud, application, operations, audit, and risk teams to implement resilient identity controls and remediate security findings.

Leads enterprise application security architecture and strategy across cloud-native platforms, APIs, DevSecOps pipelines, software supply chains, and AI-enabled systems. Defines security standards, reference architectures, threat models, and governance frameworks; evaluates designs and technologies; drives secure software development and modernization initiatives; and advises senior technology and cybersecurity leaders. The role also mentors architects and engineers and promotes responsible use of AI-assisted development tools.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Lead Toast’s product and platform security organization, overseeing security platform engineering, application and cloud security, secure development practices, offensive security, vulnerability management, hardware security, and developer enablement. Partner with product and engineering leaders to establish secure defaults and scalable guardrails while reducing developer friction. Manage and grow a multi-team security engineering organization, expand security champions and tooling adoption, and align security posture with business and product priorities.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Manages a product and application security team, develops secure coding programs, integrates security scanning into CI/CD pipelines, analyzes vulnerabilities, supports incident response, conducts threat modeling and security assessments, and mentors engineering teams on secure software development and cloud security practices.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads Enterprise Security services, setting and enforcing security standards across identity, endpoints, business applications, cloud infrastructure, networking, IoT, and automation. Partners with IT, SOC, vulnerability management, governance, and threat operations teams to secure applications, monitor environments, manage EDR policies, remediate vulnerabilities, assess risks, and maintain compliance. Also drives AI security initiatives and uses AI tools to improve enterprise security capabilities and team efficiency.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Leads security assurance and compliance transformation for a regulated payments and lending platform. Owns continuous controls monitoring, automated evidence collection, enterprise security and third-party risk, business continuity governance, assurance evidence, and second-line independent reviews. Manages and develops the security compliance team while partnering with engineering and customer trust functions to scale automated compliance across PCI, SOC, SOX, and ISO frameworks.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.