Top Cyber Security Jobs in Phoenix, AZ

Reviews client evidence and controls for SOC 2, ISO 27001, PCI, HIPAA, and GDPR audit readiness. Supports security program managers with client consultations, control implementation, policies, procedures, integrations, auditor coordination, and stakeholder communication. Identifies evidence gaps, documents actionable findings, tracks readiness metrics, contributes to QA standards, and provides product feedback. The role combines internal audit quality assurance with client-facing security compliance support.

Support backend, database, API, authentication, authorization, and security improvements for a live HR platform. Responsibilities include identifying vulnerabilities, improving tenant isolation and access controls, maintaining database integrity and performance, monitoring production issues, writing automated tests, reviewing dependencies, documenting changes, and assisting with backups, migrations, and deployment testing.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Lead FIPS 140-3 evaluations and entropy source validations, including source code reviews, test planning, noise data analysis, entropy assessments, health-test evaluation, documentation, and CMVP submissions. Address reviewer comments, explain technical findings to customers, mentor colleagues, and improve testing automation and methods. The role requires cryptographic implementation knowledge, probability and statistics expertise, programming skills in C/C++ and Python, strong technical writing, and approximately 25% domestic travel.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

Maintains the operational security posture of classified information systems supporting Collateral, SCI, and SAP environments. Responsibilities include authorization package management, compliance reviews, configuration change impact analysis, audit monitoring, vulnerability identification, incident handling, security documentation, system recovery oversight, and coordination with ISSM and authorization officials. The role requires SAP experience, TS/SCI clearance, eligibility for a CI polygraph, and on-site work with occasional travel.

Leads Lilly’s enterprise security posture and exposure management organization. Owns vulnerability management strategy, scanning architecture, application security integration, offensive security oversight, risk-based prioritization, remediation SLAs, exposure reporting, tooling, automation, vendors, budget, and executive accountability. The role requires deep hands-on cybersecurity expertise and experience leading leaders across enterprise-scale vulnerability management or security operations.

Designs and builds secure AWS infrastructure for a regulated SaaS platform. Responsibilities include cloud security architecture, IAM, networking, containers, encryption, logging, monitoring, automated guardrails, risk remediation, reference architectures, and engineering mentorship. The role partners with application security and infrastructure teams to secure AWS environments across design and production, supporting compliance for financial services customers.

Design and lead the application security program centered on Wiz. Automate security throughout the SDLC, including code, dependency, secrets, container, infrastructure-as-code, and release scanning. Establish threat modeling, secure design reviews, and guardrails for AI-assisted development. Improve developer adoption by delivering accurate findings within existing tools, while mentoring the AppSec team and partnering with cloud and AI security architects.

Lead enterprise security architecture across software procurement, on-premises data centers, networks, infrastructure, identity, encryption, privileged access, and zero-trust design. Establish security standards, conduct practical third-party software and SaaS reviews, support cloud and application security architects, identify cross-domain gaps, and advise executives and engineering teams. The role requires broad cybersecurity expertise, regulated-industry experience, and strong risk-based decision-making.

Secure and maintain ServiceNow platforms across federal environments by implementing NIST, RMF, FedRAMP, and security hardening controls. Manage ATO packages, SSPs, POA&Ms, vulnerability remediation, monitoring, SIEM integrations, access governance, incident response, audits, configuration baselines, and secure ServiceNow development. Collaborate with platform teams, assessors, auditors, and system owners while reporting security posture metrics and leading security capability rollouts.

Design, administer, optimize, and support enterprise endpoint security platforms across a global environment. The role develops security baselines, hardening standards, automation workflows, and detection capabilities; investigates security events; supports incident response; evaluates security technologies; and partners with Cyber Operations, Infrastructure, Desktop Engineering, Identity, and DevOps/SecOps teams. Responsibilities include managing EDR, PAM, firewall, device control, API integrations, and security projects while improving overall endpoint security posture.

Supports Account Executives and senior engineers in qualifying, positioning, and solutioning Application Security and AI security opportunities. The role involves customer discovery, explaining security risks and architectural tradeoffs, demonstrating solutions, developing proposals and Statements of Work, researching emerging technologies, and participating in sales events. It focuses on DevSecOps, secure SDLC, AppSec, AI security, AI governance, and related technologies, with up to 25% travel.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Lead product and application security strategy for the Endor Labs platform. Build scalable security tooling and automation, validate and remediate vulnerabilities, prevent insecure code merges, and apply LLMs and AI agents to security workflows. Conduct threat modeling and secure design reviews, secure CI/CD and build systems, influence product roadmaps, and collaborate with engineering, product, customers, and security stakeholders.

Implements and operates data security controls across cloud analytics platforms, databases, data lakes, storage, and pipelines. Responsibilities include encryption, key and secrets management, least-privilege access, data classification, masking, tokenization, database hardening, secure integrations, entitlement reviews, automation, telemetry, compliance evidence, threat modeling, documentation, and technical support. The role collaborates with security, data, governance, engineering, and IT teams while working remotely.