Top Senior Cyber Security Jobs in Phoenix, AZ

Leads the strategic direction, operating model, governance, and service delivery of enterprise Identity and Access Management operations. Oversees complex security, operational, risk, regulatory, and incident-resolution issues; drives modernization, automation, resiliency, remediation, and control effectiveness initiatives. Partners with executives, engineering, audit, risk, and compliance teams, while managing and developing security professionals and improving operational performance in a highly regulated environment.

Leads design, implementation, configuration, refresh, and operational support for corporate firewall infrastructure. Troubleshoots critical network security issues, manages audit and health activities, coordinates vendors and partner teams, and supports after-hours changes and on-call rotations. Develops technical documentation, manages large-scale projects, distributes team workloads, mentors staff, and maintains expertise in firewalls, routing, networking, IPv4, and IPv6.

Leads complex information security incident response, technical investigations, digital forensics, security consulting, and design of enterprise security solutions. Responsibilities include reviewing security logs, identifying vulnerabilities, performing risk assessments, recommending remediation, and supporting security across databases, cloud, authentication, networking, applications, and endpoints. The role also leads teams, collaborates with senior stakeholders, and participates in on-call support within a hybrid work environment.

Analyze cybersecurity data, trends, threats, and control gaps across application security, IAM, and AI security. Assess technologies and platforms for risks, create executive-ready presentations, reports, and dashboards, and present data-driven mitigation recommendations to senior stakeholders. Partner with cybersecurity and technology teams to reduce risk, strengthen security posture, and drive continuous cyber risk improvement.

Leads IAM operational teams and develops cross-trained staff to deliver secure, compliant access management services. Manages IAM operations, incidents, risk treatment, onboarding and offboarding, access reviews, RBAC, PAM, identity lifecycle management, reporting, training, vendors, audits, and regulatory alignment. Drives IAM projects, automation, process improvements, operational resilience, and collaboration among cybersecurity, IT, HR, business stakeholders, and technical teams.

Lead IAM operational teams, optimize identity and access management processes, investigate incidents, manage risk, and support RBAC, PAM, lifecycle management, onboarding, offboarding, and access reviews. Develop strategies, metrics, training, and reporting while partnering with IT, cybersecurity, HR, business stakeholders, vendors, auditors, and regulators. Drive IAM projects, automation, compliance, operational resilience, and continuous process improvements.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Partners with Sales to guide enterprise cybersecurity evaluations through technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation. Advises security, identity, infrastructure, risk, and executive stakeholders on asset visibility, exposure management, access, and risk solutions. Develops technical documentation, leads training, supports events, and collaborates cross-functionally to improve sales execution and customer outcomes. Travel is typically 25–50%.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Designs, documents, tests, and maintains IT general and security controls across corporate, engineering, SaaS, and cloud-native systems. The role maps controls across SOX, SOC 2, ISO, NIST, PCI-DSS, privacy, and contractual requirements; manages audits, access reviews, change-management testing, remediation, policy work, and evidence automation. It also establishes governance standards for enterprise AI use and partners with IT, Security, Engineering, Finance, Legal, Privacy, and auditors.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads cybersecurity consulting across the customer lifecycle, supporting presales demonstrations, proof-of-concepts, executive reviews, cyber skills programs, crisis simulations, and platform adoption. Advises strategic customers on cyber resilience, risk measurement, security initiatives, and program roadmaps. Partners with sales, product, content, and engineering teams while serving as a trusted embedded advisor and escalation point.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Lead Security Engineering & Operations: develop and execute information security strategy, manage security infrastructure (firewalls, IDS/IPS, SIEM, endpoint protection), oversee detection engineering and incident response, manage teams and vendor relationships (MSSP/XDR), collaborate with engineering/DevOps, and maintain security metrics and compliance.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.