Top Cyber Security Jobs in Phoenix, AZ

Partner with sales teams to design and deliver technical demonstrations and evaluations for data security solutions. Gather requirements, configure custom product setups, lead hands-on evaluations, and guide customers to successful outcomes in strategic enterprise opportunities.

Leads vulnerability scanning operations for IoT and infrastructure assets, identifies security risks, assesses remediation options, and designs security solutions across networking, cloud, cryptography, authentication, applications, email, and endpoints. Builds automation, preferably using AI, to improve operational efficiency. Provides security consulting, documents and tests solutions, resolves issues, and ensures compliance with corporate security policies and standards.

Facilitates cybersecurity wargames and business-focused tabletop exercises. Responsibilities include scenario development, environment setup, participant coordination, briefings, debriefs, targeted training, stakeholder engagement, and creation of exercise materials such as rulebooks, injects, and technical playbooks. The role interprets security risks and policies, incorporates threat intelligence, supports awareness and compliance initiatives, and coordinates projects across technical and executive audiences.

Lead security baseline configuration program, drive complex security engineering initiatives from intake to adoption, partner across engineering and governance, define standards and governance, automate controls and processes, influence stakeholders, mentor engineers, and deliver measurable operational security improvements.

Lead Application Security initiatives by integrating AppSec controls into CI/CD and SDLC, designing automated, scalable AppSec processes, prioritizing risk-aligned remediation, leading cross-functional governance, managing tooling/vendor evaluations and enhancements, supporting audits/compliance, and leading a team to deliver AppSec outcomes.

Lead IAM analyst responsible for transforming and operating Identity and Access Management: define requirements, strengthen controls, improve automation and processes, manage RBAC/PAM and identity lifecycle, oversee onboarding/offboarding and access reviews, lead IAM projects, and coordinate with stakeholders, vendors, auditors, and regulators to ensure compliance and risk mitigation.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and design of security solutions across databases, cloud, networking, authentication, applications, and endpoints. Reviews security logs, identifies vulnerabilities, performs risk assessments, recommends remediation, and supports security standards and frameworks. Leads teams, collaborates with senior stakeholders, and participates in on-call support within a hybrid work environment.

Provides security consulting, engineering, documentation, testing, issue resolution, and audit support for inbound web application security. Designs and maintains complex security solutions across web, cloud, networking, authentication, and endpoint domains; reviews logs, assesses vulnerabilities and risks, recommends remediation, and supports change activities. Collaborates with professionals across the organization and may work off-hours or occasional weekends.

Leads information security incident response, digital forensics, security investigations, vulnerability assessments, risk analysis, and remediation planning. Designs, tests, documents, and maintains security solutions across databases, cloud, networking, authentication, encryption, applications, and endpoints. Reviews security logs, provides internal security consulting, supports compliance with security standards, collaborates on complex issues, and participates in on-call support.

Leads enterprise cybersecurity strategy, governance, risk, and compliance for a regulated fintech. Advises executives, the board, regulators, and partners; oversees security operations, incident response, cloud and product security, IAM, Zero Trust, DevSecOps, AI security governance, audits, and third-party risk. Builds and retains cybersecurity teams, strengthens organizational security culture, supports customer due diligence, and enables secure business and AI innovation.

Design, implement, and manage highly available HashiCorp Vault platforms for enterprise secrets, encryption, authentication, authorization, PKI, and key management. Automate provisioning and lifecycle management with Ansible and Terraform, integrate cloud and Kubernetes environments, troubleshoot complex platform issues, enforce security standards, and support audit logging, monitoring, and performance optimization. Collaborate with engineering teams and vendors, provide technical guidance, and participate in rotational on-call support.

Design, implement, and operate perimeter security (firewalls, proxies) across data centers and cloud. Perform risk and vulnerability assessments, develop incident response plans, support secure operations, and collaborate with cross-functional teams to execute cybersecurity strategy and improvements.

Lead a team of SRE engineers to ensure availability, performance, and security across Windows, Linux, and GCP environments. Own container orchestration (GKE), infrastructure-as-code (Terraform, Ansible), automation, observability (Prometheus, Grafana, GCP Operations), incident response, forensics, and integration of security into CI/CD and platform operations. Partner with developers and InfoSec to harden systems, drive remediation, and document operational runbooks.

This role involves defining and leading the security and risk strategy for Circle's products, ensuring compliance across jurisdictions while managing product security, compliance operations, and risk assessment.

Lead Security Engineering & Operations: develop and execute information security strategy, manage security infrastructure (firewalls, IDS/IPS, SIEM, endpoint protection), oversee detection engineering and incident response, manage teams and vendor relationships (MSSP/XDR), collaborate with engineering/DevOps, and maintain security metrics and compliance.

Lead detection and response efforts: build detections, manage SIEM and orchestration tooling, deploy AI in SOC workflows, investigate incidents across AWS/EKS environments, support threat modeling and vulnerability scanning, and take on-call shifts.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead GitLab’s Security Posture Management team within Product Security. Drive governed security capability rollouts across the software estate, establish secure configuration baselines, build software supply chain security, manage risk registers and posture metrics, support audit evidence, and provide customer-zero feedback to Product and Engineering. Hire, coach, and develop the team while representing GitLab’s security practices externally and driving measurable risk reduction in a remote, asynchronous environment.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Leads Forward’s application and product security program, including a team of senior engineers, penetration testing, vulnerability remediation, secure SDLC practices, and AI security. Owns testing standards, remediation workflows, exposure controls, pre-production security reviews, and security services. Partners with Engineering and executives to communicate risk and priorities while securing web applications, APIs, cloud infrastructure, and AI-built software.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.