Top Cyber Security Jobs in Phoenix, AZ

Maintain and improve operational security across Linux and hybrid AWS/on‑prem environments. Manage vulnerabilities, security logs, control monitoring, remediation tracking, and audit support. Partner with infrastructure and engineering teams to implement secure configurations, access controls, monitoring, and incident readiness. Support compliance activities (FedRAMP/GovRAMP, PCI DSS) and maintain operational documentation.

Lead Triplemoon's information security and compliance program, ensuring HIPAA compliance and SOC 2 readiness. Oversee IT operations via MSP/MSSP, manage vendor risk, coordinate incident response and audits, maintain security policies and documentation, and advise leadership on cloud-first, remote workforce security.

Design and build agentic AI-driven security testing systems and automation frameworks. Integrate static/dynamic analysis, reverse engineering, network analysis, and custom tooling to enable autonomous and human-in-the-loop workflows that scale security testing across mobile, desktop, IoT, and APIs. Prototype, evaluate, and productionize agent orchestration, evaluation, and MLOps infrastructure.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead and build the company's end-to-end security program for a genomics and AI platform: governance, compliance (HIPAA, HITECH, SOC 2, ISO 27001), AI governance, offensive security, incident response, third-party and SaaS security, and cross-functional security embedding. Manage senior offensive personnel and external partners, present to executives, and deliver SOC 2 readiness and a prioritized HIPAA remediation roadmap quickly.

Lead and deliver end-to-end Salesforce security and compliance engagements. Advise enterprise customers on security controls, governance frameworks, and compliance posture. Drive pre-sales, shape solutions, and present to executives. Develop practice methodologies and reusable assets, mentor team members, and collaborate with Product, Engineering, and Trust on the Salesforce security roadmap.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Lead end-to-end incident investigations, perform threat hunting across cloud and on-prem environments, translate threat intelligence into defenses, improve SIEM/EDR detections, automate response, and develop IR and hunting playbooks while collaborating with engineering and DevSecOps teams.

Design, implement, and maintain cloud security controls across Microsoft Azure and Microsoft 365. Configure and operate Defender suite, Sentinel, and logging; assess AKS and container workloads; perform vulnerability management and incident response; collaborate with cloud and compliance teams; support audits and customer security requests; develop documentation, automation, and monitoring to improve security posture.

Analyze large-scale SaaS security data to identify attack vectors and vulnerabilities, investigate incidents, reduce false positives, and develop detection strategies. Collaborate with security researchers, data scientists, and customers; ingest and correlate SaaS logs via APIs; produce thought leadership and improve platform detection capabilities.

Build, test, and maintain SQL-based behavioral detections and anomaly scoring on petabyte-scale network/security telemetry. Own dataset and demo environment creation, probe/data-collection strategy, SIEM/EDR integration, and hands-on delivery during customer pilots. Document detection logic, runbooks, and playbooks for reuse across industries.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Lead and deliver forward-deployed security programs: convert ambiguous risks into scoped initiatives, align governance, partner with engineering and product teams, apply AI/automation responsibly, build operating mechanisms for reviews, telemetry, remediation, and measure adoption and risk reduction across divisions.

Define and drive Security Operations strategy at the intersection of Identity and AI. Analyze IAM and AI roadmaps, perform threat modeling, build security frameworks for AI-enabled systems and agentic workloads, identify capability gaps, incubate new security approaches, and partner with engineering and security teams to influence long-term direction and operational readiness.

Lead strategy to define, measure, and evolve Solution Engineer and Cloud Solution Architect excellence for Microsoft Security. Use data, AI-powered analytics, and customer insights to identify performance drivers, design capability strategies, advise senior leaders, and drive field transformation. Build governance, risk remediation, and scalable enablement programs while partnering across engineering, product, sales, and enablement to measure impact and continuously improve outcomes.

Lead Microsoft's global Security partner strategy to accelerate customer adoption, consumption, and value realization via partner-led motions. Drive strategy, analytics, governance, partner readiness, and cross-functional alignment; generate insights from partner and product data; manage strategic programs and stakeholder communications; mentor team members and continuously optimize partner ecosystem performance.

Lead strategy to define and scale technical skilling for Microsoft's global Security Solutions Specialist community. Use sales and field data, market intelligence, and AI-enabled analytics to identify capability gaps, design skilling frameworks, drive adoption, measure impact, and advise senior leaders to accelerate security and AI-driven customer outcomes.

Lead global technical skilling strategy for Microsoft Security Solution Engineers: define capability frameworks, analyze field and performance data to identify gaps, design scalable AI-enabled learning and assessment, advise senior leaders, partner across product/engineering/enablement, drive adoption and measure impact, and build high-performing risk and capability practices.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Provide technical and operational support for MDR customers: investigate and validate alerts, perform log and endpoint analysis, assist containment and recovery, administer Sophos MDR platform, support compliance and cyber hygiene reviews, and coordinate with TAMs, DFIR and Sophos teams to improve service and security posture.

Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.

Lead cloud security for GCP and Azure by operationalizing CNAPP tooling, embedding security-as-code with Terraform/CI-CD, driving vulnerability management, improving detection and response with Chronicle, hardening data and endpoint security, and mentoring engineers while serving as senior escalation during incidents.