Top Senior Cyber Security Jobs in Phoenix, AZ

Partner with sales teams to design and deliver technical demonstrations and evaluations for data security solutions. Gather requirements, configure custom product setups, lead hands-on evaluations, and guide customers to successful outcomes in strategic enterprise opportunities.

Lead security baseline configuration program, drive complex security engineering initiatives from intake to adoption, partner across engineering and governance, define standards and governance, automate controls and processes, influence stakeholders, mentor engineers, and deliver measurable operational security improvements.

Lead and participate in incident response, technical investigations, and digital forensics. Design, test, and maintain security solutions across network, endpoint, cloud, and authentication domains. Develop SIEM content and security use cases, review and correlate logs, perform risk assessments, and communicate findings. Leverage AI-assisted tools responsibly to accelerate development and analysis.

Lead a team of SRE engineers to ensure availability, performance, and security across Windows, Linux, and GCP environments. Own container orchestration (GKE), infrastructure-as-code (Terraform, Ansible), automation, observability (Prometheus, Grafana, GCP Operations), incident response, forensics, and integration of security into CI/CD and platform operations. Partner with developers and InfoSec to harden systems, drive remediation, and document operational runbooks.

Lead Security Engineering & Operations: develop and execute information security strategy, manage security infrastructure (firewalls, IDS/IPS, SIEM, endpoint protection), oversee detection engineering and incident response, manage teams and vendor relationships (MSSP/XDR), collaborate with engineering/DevOps, and maintain security metrics and compliance.

Lead IAM analyst responsible for transforming and operating Identity and Access Management: define requirements, strengthen controls, improve automation and processes, manage RBAC/PAM and identity lifecycle, oversee onboarding/offboarding and access reviews, lead IAM projects, and coordinate with stakeholders, vendors, auditors, and regulators to ensure compliance and risk mitigation.

Lead IAM governance efforts by advising leadership, driving remediation and control implementations across IAM products, coordinating matrixed teams, reporting portfolio status, defining escalation metrics, and ensuring timely closure of IAM issues and controls.

Lead Application Security initiatives by integrating AppSec controls into CI/CD and SDLC, designing automated, scalable AppSec processes, prioritizing risk-aligned remediation, leading cross-functional governance, managing tooling/vendor evaluations and enhancements, supporting audits/compliance, and leading a team to deliver AppSec outcomes.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Own developer-facing outreach for Trail of Bits: grow community relationships, support and onboard maintainers, convert research into usable tools and docs, publish deep technical content, run workshops and conference presence, and attract upstream contributions while routing practitioner feedback into product and research priorities.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Lead technical security strategy and implementation for Managed Services platforms. Design and improve security controls, IAM, PAM, vulnerability management, incident response, and compliance. Embed secure-by-design and DevSecOps practices, mentor engineers, and partner with architecture, engineering, and operations to reduce risk and enable scalable growth.

Partner with sales to design and present data security solutions for SLED customers. Lead technical evaluations, gather requirements, build test plans, configure proof-of-concepts, and guide customers to successful outcomes while collaborating across GTM teams.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead and grow a product research team focused on defensive cybersecurity research. Own technical and managerial leadership, collaborate with Product, SOC, and Engineering, scale automated threat-detection workflows using AI, and mentor researchers to deliver prioritized platform capabilities.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.