Top Cyber Security Jobs in Phoenix, AZ

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Deploy and configure Rapid7 security products for post-sales customers, applying security best practices and documenting implementation decisions. Build custom dashboards, reporting workflows, integrations, and data pipelines using Python, SQL, and REST APIs. Support pre-sales scoping, resolve deployment challenges, collaborate across teams, improve internal delivery processes, and occasionally travel for customer engagements.

Leads and mentors a product security engineering team while remaining hands-on. Owns certification, accreditation, DISA STIG hardening, SOC 2, ISO 27001, audit readiness, vulnerability remediation, security tooling, and authorization initiatives. Coordinates with Compliance, Legal, Sales Engineering, and customers; tracks remediation SLAs and certification posture; establishes evidence collection processes; and translates technical security strategy into an executable roadmap.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Monitor and investigate cybersecurity alerts, analyze endpoint telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity, then coordinate threat remediation. The analyst also supports escalations, contributes to detection engineering and tuning, and collaborates across the SOC. The role requires knowledge of operating systems, enterprise administration, networking, web security, attacker techniques, and malware analysis while working a remote weekend 4x10 shift after training.

Monitor, triage, investigate, and respond to cybersecurity alerts and intrusions. Analyze EDR telemetry, logs, forensic artifacts, malware, and Microsoft 365 activity; determine root causes and recommend remediation. Support threat-related escalations, contribute to detection engineering and tuning, and collaborate across teams. The role requires familiarity with endpoint attack surfaces, threat actor techniques, Windows and domain administration, networking, web security, and basic malware analysis.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Own the company’s security compliance program from defining SOC 2 scope through completing the first Type II audit. Responsibilities include readiness assessments, policy creation, continuous evidence collection, engineering remediation, auditor and penetration-test vendor management, security awareness training, vendor risk reviews, and ongoing annual audit operations.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Partners with Sales to guide enterprise cybersecurity evaluations through technical discovery, solution design, demonstrations, proof-of-value engagements, and customer validation. Advises security, identity, infrastructure, risk, and executive stakeholders on asset visibility, exposure management, access, and risk solutions. Develops technical documentation, leads training, supports events, and collaborates cross-functionally to improve sales execution and customer outcomes. Travel is typically 25–50%.

Designs and leads enterprise cybersecurity architecture across network, cloud, endpoint, identity, and data environments. Develops security strategies, governance frameworks, and controls; conducts risk assessments, vulnerability management, penetration testing, and incident response. Oversees security tool integration, regulatory compliance, third-party risk, and secure development practices. Provides technical leadership, mentoring, and cross-functional guidance to protect business-critical systems and minimize cyber risk.