Top Cyber Security Jobs in Phoenix, AZ

Manage the database vulnerability program: identify, track, communicate, and drive remediation of database vulnerabilities across application teams. Report remediation progress, advise technical and third-party teams on fixes and secure configuration best practices, and coordinate follow-up until closure.

Lead product security governance across business units: define frameworks for threat modeling, vulnerability management, regulatory readiness, and supply-chain security; drive cross-functional adoption, metrics, executive reporting, and industry engagement.

Provide security oversight for network and mainframe systems, conduct security auditing, risk assessments and penetration testing, evaluate security architecture, recommend hardware/software, support disaster recovery testing and documentation, and help create and review information security policies and standards.

Provide enterprise security engineering support including troubleshooting and resolving tickets for firewalls, IDS/IPS, web filtering, SIEM, and endpoint security. Identify network/system security needs, conduct risk assessments and intrusion detection, implement vulnerability baseline monitoring, and help create and enforce security policies and procedures. Support web access duties related to the Affordable Care Act.

Perform intrusion detection and network analysis, support SIEM/IDS/IPS/firewall and web filtering, implement and enforce security policies and baseline monitoring for data center moves, and act as backup Enterprise Security Engineer resolving related help desk tickets.

Execute written security risk assessments and audits; produce policies, processes, and procedure documentation; facilitate assessments for custom and third-party applications; identify control deficiencies and associated risks; develop remediation action plans and alternate solutions; and provide security consulting and advisory services to business units and project teams.

Provide Nexpose and Nessus implementation, configuration, tuning, and reporting. Collaborate with staff to identify risks, develop mitigation plans, improve scanning processes, manage projects, and transfer knowledge to technical teams. Produce technical and management reports and ensure environment meets agency requirements.

Perform software vulnerability assessments (blackbox/whitebox), remediate OWASP Top 10 issues, and advise development teams. Leverage penetration testing frameworks, scanners, and source code analysis while working with Java/.NET web apps and SQL databases. Communicate findings and conduct debriefs with engineering teams.

Support email security initiatives: analyze gateway logs and reports, implement and test email authentication (SPF, DKIM, S/MIME), evaluate email security products, create/update process documentation, and coordinate with internal and external stakeholders to enforce email security controls.

Configure, tune, and manage Nexpose and Nessus enterprise vulnerability scanning environments. Produce technical and management reports, develop procedures and process improvements, identify security risks, assist mitigation, and transfer knowledge to technical staff while collaborating across teams and managing project deadlines.

Work on infrastructure email security projects: coordinate with teams, analyze gateway logs, implement SPF/DKIM/S/MIME controls, test email security software, and maintain process documentation.

Provide network and mainframe security oversight, evaluate infrastructure and applications for security, recommend hardware/software, participate in security projects, support disaster recovery testing and documentation, and assist in creating and reviewing information security policies and standards.

Design, implement, and manage company-wide network and IT security standards to meet PCI compliance. Assess and remediate vulnerabilities, perform pen tests, create incident response plans, lead security meetings, and support network security events and audits.

Lead execution of SOC1/SSAE16 audits and manage IT risk, compliance, and security controls. Advise stakeholders on IT risk mitigation, vendor controls, incident management, IAM, and security monitoring. Develop policies, metrics, documentation, and remediation plans; support audits, provide technical support for security tools, and lead multiple initiatives to improve enterprise IT risk and compliance maturity.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Member of the security team responsible for host, network, data and application security. Monitor and maintain security platforms, manage vulnerabilities, perform risk analysis, enforce security policies, create security reports and dashboards, coordinate with stakeholders, implement security plans, and respond to security events.

Onsite IT Security Analyst to support data center moves, border gateway access, intrusion detection, vulnerability monitoring, and security policy implementation. Backup for SIEM, IDS/IPS, web filtering, and firewall ticket resolution. Conduct risk assessments for network entry points and security zones.

Technical leader responsible for integrating, optimizing, and operationalizing enterprise cloud and security platforms. Drive SIEM ingestion, telemetry and logging strategy, detection alignment, automation, interoperability, and resiliency across EDR/XDR, CNAPP, IDS/IPS, DLP, WAF, firewalls, and AI security. Partner with platform teams, build standards, and develop automation using Python, PowerShell, Go, APIs, and IaC.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.