Top Senior Cyber Security Jobs in Phoenix, AZ

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Partners with Sales to guide enterprise cybersecurity evaluations through technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation. Advises security, identity, infrastructure, risk, and executive stakeholders on asset visibility, exposure management, access, and risk solutions. Develops technical documentation, leads training, supports events, and collaborates cross-functionally to improve sales execution and customer outcomes. Travel is typically 25–50%.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Leads the enterprise cybersecurity program, including strategy, risk management, security operations, architecture, vulnerability management, incident response, identity security, data protection, third-party risk, and security awareness. Oversees cybersecurity controls, metrics, remediation, and executive reporting while partnering with infrastructure, DevSecOps, applications, and technology teams. Requires cybersecurity leadership, CISSP certification, risk communication, and expertise across cloud, endpoint, identity, and information security.

Leads information security frameworks, controls, policies, security operations, and incident escalation across a healthcare system. Manages security personnel, assignments, performance, service queues, metrics, and standard work. Provides expertise across vulnerability management, identity and access, data protection, governance, compliance, architecture, awareness, and incident response. Partners with operational departments to align security requirements with business needs, track security events, resolve incidents, and strengthen the organization’s overall security posture.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Leads the information security strategy, security engineering, and daily security operations. Manages teams, budgets, security infrastructure, cloud security, application security, detection engineering, incident response, monitoring, and relationships with MSSP and XDR providers. Partners with Platform, DevOps, and Engineering teams to assess risks, implement secure architectures, maintain policies, and improve security metrics. Requires more than five years of security engineering and operations management experience, strong knowledge of security frameworks, and proven leadership skills.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Provides cybersecurity GRC control design guidance, independent control assessments, risk management, regulatory compliance oversight, and control testing across cloud and on-premises environments. Advises business units on cybersecurity requirements, monitors control performance through risk indicators, develops remediation plans, prepares program reporting, and drives maturity of the information security control framework. Requires substantial experience in information security, IT risk, cloud security, audit, banking regulations, and control assessment methodologies.

Design and scale automation and AI-driven solutions for security governance, risk, and compliance. Build pipelines to collect and validate evidence, integrate GRC platforms with security and IT systems, automate control monitoring and audit preparation, and deploy LLM-based workflows for testing, policy mapping, and risk reporting. Establish AI guardrails and quality controls while collaborating with security, engineering, data, and business teams to improve compliance and security posture.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Leads enterprise security strategy and operations across Microsoft MCAPS-Core. Oversees security programs, governance, risk management, threat intelligence, incident response, compliance, security reviews, performance metrics, budgets, and cross-organizational partnerships. Directs teams and suppliers, develops AI-enabled security capabilities, assesses geopolitical and operational threats, communicates executive-level risk insights, and ensures security controls are adopted without disrupting business or customers.

Designs, develops, deploys, and supports enterprise security automations, custom tools, integrations, and workflows. Responsibilities include Python-based application and API development, vulnerability enrichment, incident response automation, IAM administration, Linux and Docker platform support, and administration of SIEM, SOAR, endpoint, cloud, network, and other security technologies. The role also troubleshoots integrations, monitors operational health, supports security teams, and maintains resilient, secure configurations across enterprise systems.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Leads enterprise security architecture by assessing threats, performing application security assessments and threat modeling, reviewing designs, and integrating controls into SDLC and DevSecOps environments. Advises business and engineering stakeholders on secure solutions, remediates vulnerabilities, protects APIs, web applications, and cloud workloads, and improves security processes through automation and standardization.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Implement and validate Oracle Cloud Infrastructure security controls for a federal health customer. Responsibilities include securing IAM, networks, encryption, monitoring, Cloud Guard, Security Zones, Security Advisor, threat intelligence, key management, SIEM integrations, and Infrastructure as Code automation. The engineer will collaborate with cloud operations, migration, application, and systems teams while establishing technical security standards for cloud and on-premises environments.

Performs cybersecurity control assessments, STIG/SRG validation, continuous monitoring, vulnerability and security data analysis, POA&M development, incident reporting, and compliance verification across network enclaves. Develops security policies, validates access controls, produces security posture reports, and recommends corrective actions. This remote role requires active Secret clearance, U.S. citizenship, 5+ years of experience, and 25%–50% travel while residing within 50 miles of a major airport.