Top Cyber Security Jobs in Phoenix, AZ

Lead design and delivery of Agentic AI IAM and secrets management across hybrid environments. Build secure authentication/authorization, centralized secrets vaulting, automated rotation, governance, monitoring, and operational metrics. Partner with infrastructure, cloud, DevOps, application, and risk teams to implement Zero Trust, machine identity security, and AI agent safeguards while driving enterprise program execution and compliance.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

As a Manager for CyberOps, you will lead third-party security assessments, conduct technical inspections, develop assessment tools, and manage collaborative projects to enhance information security and risk management processes.

Lead cloud-focused GRC activities across multicloud and hybrid environments: assess cloud architectures, audit cloud controls, quantify cyber risk, produce executive reports, support regulatory compliance and remediation, and influence cloud security strategy and metrics.

Perform GRC duties including risk assessments, audit reviews, POA&M development, incident investigation, and compliance research. Prepare audit documentation and coordinate with business units to improve security posture.

Lead security architecture for products and platforms: develop standards, reference architectures, and design patterns; translate requirements into secure architecture blueprints; evaluate threats and emerging tools; provide governance and review guidance; integrate secure design and DevSecOps practices to meet regulatory and business needs.

Lead and enhance HKA's Azure infrastructure and Microsoft security stack. Manage cloud operations, identity and access controls, Zero Trust implementations, monitoring, incident response, threat modeling, risk remediation, and compliance alignment across a global hybrid environment.

Lead design and improvement of cloud-native security platforms, focusing on Kubernetes, AWS/Azure, CI/CD automation, observability, and security guardrails. Build tooling and infrastructure-as-code, drive incident response and remediation, mentor engineers, and partner with platform and development teams to embed scalable security practices across the organization.

Lead assessments, design secure infrastructure and controls, implement scalable security solutions, operate and administer enterprise security tools, drive vulnerability management, incident response, and risk analysis, and report security posture to stakeholders and senior leadership.

Provide security oversight for network and mainframe systems, evaluate security architecture, recommend/security hardware and software, perform security audits and penetration testing, support disaster recovery, and assist in creating and reviewing information security policies and standards.

Lead triage and resolution of hardware, firmware, and software vulnerabilities across semiconductor products; perform technical assessments (CVSS), coordinate remediations and disclosures, author advisories, run SBOM/VEX analysis, and support regulatory and standards readiness (CRA, IEC 62443, ISO/SAE 21434) across engineering and compliance teams.

Provide security oversight for network and mainframe systems to ensure confidentiality, integrity, and availability. Evaluate security architecture, recommend hardware/software, perform risk assessments and penetration testing, support security projects and disaster recovery, and assist in policy and standards creation.

Provide onsite IT security support including troubleshooting firewalls, IDS/IPS, web filters, SIEM and endpoint security. Conduct risk assessments, intrusion detection, network analysis, implement vulnerability monitoring, and help create/enforce security policies. Support web access duties related to the Affordable Care Act and act as backup for related security tools.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Perform blackbox and whitebox software vulnerability assessments, use penetration testing and scanning tools, remediate OWASP Top 10 issues, implement secure development practices, conduct debriefs with development teams, and work with IDEs and source management systems.

Implement whole-disk encryption for end-user devices using Microsoft encryption solutions and SCCM. Deploy software, remediate SCCM deployment and scripting issues, work with end users and the SCCM team to resolve problems, and develop tracking methods for implementation.

Develop an application to embed secure hyperlinks for an eFiling project. Implement authentication/authorization (OWIN, JWT, OpenID Connect, Azure AD), integrate with MS SQL/NoSQL, MQ, SOAP/REST services, and use .NET/WCF stack. Onsite contract in Phoenix, short initial term; background check required.

Manage the database vulnerability program: identify, track, communicate, and drive remediation of database vulnerabilities across application teams. Report remediation progress, advise technical and third-party teams on fixes and secure configuration best practices, and coordinate follow-up until closure.

Provide security oversight for network and mainframe systems, conduct security auditing, risk assessments and penetration testing, evaluate security architecture, recommend hardware/software, support disaster recovery testing and documentation, and help create and review information security policies and standards.

Lead product security governance across business units: define frameworks for threat modeling, vulnerability management, regulatory readiness, and supply-chain security; drive cross-functional adoption, metrics, executive reporting, and industry engagement.

Provide enterprise security engineering support including troubleshooting and resolving tickets for firewalls, IDS/IPS, web filtering, SIEM, and endpoint security. Identify network/system security needs, conduct risk assessments and intrusion detection, implement vulnerability baseline monitoring, and help create and enforce security policies and procedures. Support web access duties related to the Affordable Care Act.