Top Cyber Security Jobs in Phoenix, AZ

Provide security oversight for network and mainframe systems, conduct security auditing, risk assessments and penetration testing, evaluate security architecture, recommend hardware/software, support disaster recovery testing and documentation, and help create and review information security policies and standards.

Assist senior engineers to design, architect, test, and deploy secure classified network and firewall solutions for USG environments. Implement and harden COTS/GOTS/open-source components, define security requirements and interfaces, coordinate security assessments, support compliance with Federal/DoD/IC guidance, and assist operational monitoring, incident response, and documentation.

Provide enterprise security engineering support including troubleshooting and resolving tickets for firewalls, IDS/IPS, web filtering, SIEM, and endpoint security. Identify network/system security needs, conduct risk assessments and intrusion detection, implement vulnerability baseline monitoring, and help create and enforce security policies and procedures. Support web access duties related to the Affordable Care Act.

Perform intrusion detection and network analysis, support SIEM/IDS/IPS/firewall and web filtering, implement and enforce security policies and baseline monitoring for data center moves, and act as backup Enterprise Security Engineer resolving related help desk tickets.

Execute written security risk assessments and audits; produce policies, processes, and procedure documentation; facilitate assessments for custom and third-party applications; identify control deficiencies and associated risks; develop remediation action plans and alternate solutions; and provide security consulting and advisory services to business units and project teams.

Design, deploy, and manage enterprise PKI; automate certificate lifecycle tasks; integrate PKI with AD, identity and PAM systems; monitor and troubleshoot certificate, CRL/OCSP, and encryption issues; develop policies, documentation, and training; collaborate with security, infrastructure, and DevOps teams.

Perform software vulnerability assessments (blackbox/whitebox), remediate OWASP Top 10 issues, and advise development teams. Leverage penetration testing frameworks, scanners, and source code analysis while working with Java/.NET web apps and SQL databases. Communicate findings and conduct debriefs with engineering teams.

Provide Nexpose and Nessus implementation, configuration, tuning, and reporting. Collaborate with staff to identify risks, develop mitigation plans, improve scanning processes, manage projects, and transfer knowledge to technical teams. Produce technical and management reports and ensure environment meets agency requirements.

Support email security initiatives: analyze gateway logs and reports, implement and test email authentication (SPF, DKIM, S/MIME), evaluate email security products, create/update process documentation, and coordinate with internal and external stakeholders to enforce email security controls.

Lead security architecture for Client and Data Center SoCs, using AI-driven tools to discover firmware and low-level vulnerabilities, define firmware security specifications, drive threat modeling, partner with architects and engineers to translate risks into mitigations, and mentor engineers to operationalize AI-enabled security discovery across products.

Configure, tune, and manage Nexpose and Nessus enterprise vulnerability scanning environments. Produce technical and management reports, develop procedures and process improvements, identify security risks, assist mitigation, and transfer knowledge to technical staff while collaborating across teams and managing project deadlines.

Work on infrastructure email security projects: coordinate with teams, analyze gateway logs, implement SPF/DKIM/S/MIME controls, test email security software, and maintain process documentation.

Provide network and mainframe security oversight, evaluate infrastructure and applications for security, recommend hardware/software, participate in security projects, support disaster recovery testing and documentation, and assist in creating and reviewing information security policies and standards.

Design, implement, and manage company-wide network and IT security standards to meet PCI compliance. Assess and remediate vulnerabilities, perform pen tests, create incident response plans, lead security meetings, and support network security events and audits.

Lead execution of SOC1/SSAE16 audits and manage IT risk, compliance, and security controls. Advise stakeholders on IT risk mitigation, vendor controls, incident management, IAM, and security monitoring. Develop policies, metrics, documentation, and remediation plans; support audits, provide technical support for security tools, and lead multiple initiatives to improve enterprise IT risk and compliance maturity.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Member of the security team responsible for host, network, data and application security. Monitor and maintain security platforms, manage vulnerabilities, perform risk analysis, enforce security policies, create security reports and dashboards, coordinate with stakeholders, implement security plans, and respond to security events.

Onsite IT Security Analyst to support data center moves, border gateway access, intrusion detection, vulnerability monitoring, and security policy implementation. Backup for SIEM, IDS/IPS, web filtering, and firewall ticket resolution. Conduct risk assessments for network entry points and security zones.

Support and maintain enterprise security controls and tools, investigate security events, manage tickets and remediation, perform threat and vulnerability assessments, maintain Microsoft security platform (Azure Conditional Access, Intune, Defender), assist auditors, develop security documentation and awareness, mentor analysts, and support deployment of data-loss prevention and remote access solutions.

Technical leader responsible for integrating, optimizing, and operationalizing enterprise cloud and security platforms. Drive SIEM ingestion, telemetry and logging strategy, detection alignment, automation, interoperability, and resiliency across EDR/XDR, CNAPP, IDS/IPS, DLP, WAF, firewalls, and AI security. Partner with platform teams, build standards, and develop automation using Python, PowerShell, Go, APIs, and IaC.

Support development and implementation of AI governance, security policies, and controls. Integrate security tools across AI platforms, document AI use cases, and design privacy/compliance frameworks. Collaborate cross-functionally with data, engineering, and compliance teams to ensure responsible, secure AI adoption.

Lead development and maturation of the Application Security program. Maintain and integrate appsec testing platforms, review and triage scan results, produce metrics, mentor development teams, monitor CVEs, and coordinate with Audit, Governance, and Compliance to improve security posture.

Lead application and cloud security architecture for APIs, microservices, and AI/ML pipelines. Design secure access (OAuth/OpenID/JWT), threat modeling, SIEM/logging, incident response, risk management, and reusable security patterns. Collaborate across development, operations, and enterprise teams to implement zero-trust, secure DevOps practices, and regulatory-aligned security standards.

Lead and manage a security engineering team responsible for operating and improving security infrastructure (SIEM, EDR, DLP, vulnerability management, IAM, network security). Oversee tooling implementation, incident response playbooks, threat hunting, vendor management, cross-team security integration, metrics reporting, and mentoring of junior engineers.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.