Top Remote Cyber Security Jobs in San Luis Obispo, CA

Senior individual contributor who researches and delivers thought leadership on application security for enterprise applications (ERP/CRM). Produces insights, advises CIOs, supports sales and events, mentors junior analysts, and builds security strategies, roadmaps, metrics, and vulnerability testing programs for major vendors and third-party tools.

Lead security advisory engagements focused on cybersecurity and data governance. Conduct program assessments, design and operationalize data governance programs, produce client deliverables, mentor consultants, support sales with scoping and proposals, and contribute to practice development, thought leadership, and forecasting to drive advisory services revenue.

Lead go-to-market strategy for the Security practice, develop and package security solutions, enable sales and delivery, build partner ecosystem, drive business development and marketing, and mentor security teams to achieve revenue and growth targets.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Senior pre-sales architect focused on network and infrastructure security. Support sales of DDoS mitigation, Security Posture Management, and DNS products (including Prolexic). Engage customers with demos, deep technical discussions, trials, and solution evangelism. Collaborate with sales and product management to influence roadmap and drive adoption.

Hands-on senior security engineer responsible for designing and automating security controls across cloud and application stacks. Lead implementation of PAM/JIT, vulnerability management, SAST/DAST/SCA integration, security automation (Python/Go/Terraform/Tines), endpoint and DLP protections, cloud network hardening, key management, SIEM correlation, and developer-focused security tooling and reviews to protect PHI and advance security posture.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Own and operate the organisation's accounts, access, and cloud subscriptions; set practical security standards; identify and remediate risks hands-on; manage onboarding/offboarding access across core platforms; partner with engineers and researchers to ensure secure, usable controls.

Manage and perform red and purple team engagements, external/internal penetration tests, wireless/web/mobile/embedded assessments, ransomware readiness and social engineering. Develop tools, incorporate threat intelligence, present findings to technical and executive audiences, and mentor and expand offensive security capabilities. Occasional travel (~10%).

Lead and build vdBA's Managed Detection and Response service line for life sciences: own roadmap, tooling, SLAs, incident response, compliance (SOC 2/HITRUST/ISO), client engagements, and scale the security operations team while integrating security into delivery and sales.

Design, build, and harden security-critical systems: manage KMS and key management, protect PHI/PII, secure storage and tenant isolation, embed security in SDLC and CI/CD, lead threat modeling, and improve security scanning and compliance.

Design, build, and maintain automated API and security test frameworks. Validate authentication, authorization, rate limiting, and error handling. Conduct fuzzing, token validation, access control testing, and integrate tests into CI/CD. Analyze failures, test integrations, ensure API contract adherence, and mentor automation engineers to improve coverage and reliability.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Operate and improve security operations and enterprise controls: incident response, playbooks, endpoint/SaaS/cloud tooling, remediation coordination, access governance, compliance evidence, and automation to reduce risk.

Lead technical discovery and solution design for enterprise identity and privileged access management opportunities. Build reference architectures, guide PoC/PoV engagements, present to executive and technical stakeholders, collaborate with Sales Engineering, Product and Sales leadership, and represent Keeper at customer and market events while staying current on identity security landscape.

Serve as the ISSO for assigned systems, maintain system security documentation (SSPs, control narratives, POA&Ms), support FedRAMP/GovRAMP/DoD authorization and continuous monitoring, coordinate remediation and assessments with engineering and auditors, support incident response and audit readiness, and track security metrics and evidence.

Lead and grow a team of Security Solution Engineers supporting an email security managed service. Oversee platform configuration, backend engineering, service delivery, SLA monitoring, incident escalation, and automation. Drive technical strategy, risk assessment, telemetry-driven improvements, and platform hardening to ensure reliable, scalable, and secure email protection for customers.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead security assessments and integrations for mergers & acquisitions, develop risk-based mitigations, deploy security tools, support vulnerability remediation and pen testing, advise executives and stakeholders, and produce documentation and metrics across identity, cloud, endpoint, and monitoring domains.

Lead and scale the enterprise application security program, embed secure SDLC and DevSecOps practices, integrate SAST/DAST/SCA into CI/CD, run assessments and remediation, advise engineering on architecture and high-risk issues, build governance/metrics, represent AppSec for audits, and mentor application security engineers.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.