Top Senior Cyber Security Jobs in Phoenix, AZ

Lead design and delivery of cybersecurity wargames and tabletop exercises: develop realistic scenarios, run briefings and debriefs, train participants, create exercise materials, advise on InfoSec policy alignment, collaborate with internal and external stakeholders, and analyze security risk exposure to improve awareness and compliance.

Design, build, and scale enterprise encryption and key management solutions. Harden OS environments, support HSMs and CipherTrust products, automate via scripting/Ansible, perform upgrades/patches, and provide technical mentorship while collaborating with engineering and operations to ensure resilient, compliant encryption architectures.

Lead design, implementation, and automation of enterprise Data Loss Prevention (DLP) solutions. Onboard and transform sensitive data feeds (HR, customer, PII) into DLP platforms, develop Python/Bash automation, perform root-cause analysis, risk assessments, proof-of-concepts, and provide technical guidance while mentoring junior engineers.

Perform manual and automated dynamic security testing (DAST) and ethical hacks of web and mobile applications to identify OWASP Top 10 and other vulnerabilities. Use Burp Suite and Agentic AI tools, validate findings, review results with stakeholders, help determine risk ratings, and improve application security techniques and processes.

Lead technical owner for enterprise cryptography, PKI, certificate lifecycle and key management. Drive governance, risk assessments, HSM architecture, automation, certificate discovery/inventory, and regulatory/audit readiness. Partner with application, infrastructure, cloud, and security teams to design secure cryptographic solutions, modernize tooling, and mentor cybersecurity staff.

Lead Security Engineering & Operations: develop and execute information security strategy, manage security infrastructure (firewalls, IDS/IPS, SIEM, endpoint protection), oversee detection engineering and incident response, manage teams and vendor relationships (MSSP/XDR), collaborate with engineering/DevOps, and maintain security metrics and compliance.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.

Lead and mentor a small IT security engineering team to deploy and operate enterprise-grade Zero Trust security across networks, endpoints, applications, and cloud. Drive Customer Zero initiatives, manage cross-functional security projects, optimize policies (SSL decryption, segmentation, access control), and serve as an internal subject-matter expert.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Design, implement, and operationally support enterprise security platforms across cloud, endpoint, identity, network, and SaaS. Lead detection, telemetry, vulnerability management, automation, and incident escalation. Partner with stakeholders to deliver secure, scalable services, improve security posture and Zero Trust objectives, and mentor engineers while maintaining documentation, KPIs, and on-call support.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead competitive intelligence for CrowdStrike's cloud security portfolio, analyzing competitors' technical capabilities and market positioning. Provide deal support, win/loss analysis, and actionable guidance to Product, Sales, and senior leadership. Develop competitive materials, readiness plans, and recommendations to influence product strategy and GTM. Work autonomously and collaborate cross-functionally globally.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Lead MSSP-focused sales to recruit, enable, and grow managed security provider partners. Drive joint services, partner-led customer adoption, revenue attainment, forecasting, and cross-team issue resolution while meeting quotas and pipeline targets.