Top Remote Cyber Security Jobs in Phoenix, AZ

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Leads cybersecurity execution across Danaher’s global Life Sciences operating companies. Owns cyber strategy implementation, risk and vulnerability management, security architecture, assurance, certifications, data and application security, product security coordination, M&A cyber integration, and OT/manufacturing security. Builds globally distributed security teams, manages matrixed stakeholders, supports regulated environments, and oversees cyber PMO performance. The role is based in Washington, D.C., remote/hybrid, and requires 25–30% international travel.

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Leads end-to-end cybersecurity execution across Danaher's global Diagnostics operating companies. Responsibilities include managing distributed security teams, cyber risk and vulnerability programs, architecture reviews, assurance and certifications, connected medical device product security, data and AI security, M&A cyber integration, application security, and OT/manufacturing security. The role serves as the senior cybersecurity leader for the platform, influencing executives and operating companies while driving regulatory compliance, continuous improvement, and global security initiatives.

Lead the AWS cloud security program and manage security engineering teams. Establish AWS security standards, oversee IAM, encryption, logging, monitoring, vulnerability management, Terraform automation, CI/CD security, incident response, and secure architecture reviews. Manage risk registers, compliance workflows, audits, control testing, and FedRAMP, FISMA, NIST, and SA&A readiness. Guide investigations, remediation, runbooks, tabletop exercises, and secure cloud practices while reporting risks and metrics to leadership.

Designs and delivers Qualys-based security and compliance solutions for enterprise customers across cloud and on-premises environments. Supports technical sales engagements, proofs of concept, architecture workshops, proposals, deployment health checks, and customer advisory activities. The role addresses asset and vulnerability management, patching, compliance, threat detection, application security, and remediation. It also contributes to product roadmap feedback, sales enablement, technical content, field training, and industry events, with at least 30% customer travel.

Monitor and secure federal cloud environments across AWS, Azure, and Google Cloud. Perform cloud threat hunting, log analysis, incident response, and develop cloud security playbooks and monitoring use cases. Ensure cloud logs are integrated with SIEM tools, tune detection systems, establish KPIs, support threat information sharing, and assist with cloud SOC tool deployment and proof-of-concept efforts.

Manage, maintain, and troubleshoot enterprise security technologies while monitoring, detecting, investigating, and remediating security incidents. Perform digital forensics, threat hunting, vulnerability and risk assessments, audits, compliance checks, evidence preservation, and root cause analysis. Collaborate with internal teams and third parties, implement new security solutions, create security documentation, and support incident response during regular and on-call hours.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Leads end-to-end Cisco Duo MFA and access management engagements, including architecture, deployment, integrations, migrations, automation, device trust, security reviews, documentation, and client handoff. Supports Okta and Ping Identity projects, contributes to presales activities, owns technical delivery, mentors junior engineers, and manages client communication. The role integrates identity platforms with VPNs, cloud services, applications, directories, endpoint management tools, and enterprise infrastructure.

Leads enterprise Identity, Credential, and Access Management architecture and application security integration for Defense Logistics Agency mission systems. Defines identity, authentication, authorization, access governance, provisioning, and integration requirements; designs secure architecture patterns; supports application onboarding and modernization; and guides RBAC, privileged access management, and segregation of duties implementations. Provides technical leadership and communicates recommendations to government stakeholders, application owners, engineers, developers, and cybersecurity teams.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Monitors SIEM dashboards, correlates logs across security and cloud sources, investigates alerts, assesses threats, performs preliminary incident triage, tunes detection rules, documents findings, and escalates high-risk events. The analyst supports continuous monitoring, SOC playbooks, detection use cases, reporting, and coordination with incident response and engineering teams in a DoD-aligned environment.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Supports AWS GovCloud IL5 cybersecurity compliance and security operations. Performs RMF impact analysis, maintains SSPs, POA&Ms, SARs, and control evidence, validates STIGs and cloud configurations, monitors vulnerabilities and logs, supports IL5 migrations, audits, ATO activities, and continuity planning, and documents remediation and compliance findings.