Top Remote Cyber Security Jobs in San Luis Obispo, CA

Lead and execute OT/IoT security assessments, design and implement OT security architectures, perform technical testing, produce remediation recommendations and documentation, and guide organizational change for energy/water/manufacturing clients.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Lead security engineering for an AI-native cybersecurity product: architect product security, build and evolve operational security and incident response, collaborate with ML engineers to integrate security into AI agents, implement protections and automation, and represent Cogent externally through writing and speaking.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Lead application security efforts by threat modeling (STRIDE), performing secure code reviews, creating CI/CD security tests, administering bug bounty programs, coaching security champions, consulting with development teams, and maturing the AppSec program while leveraging AI to streamline work.

Lead and manage daily SOC/SFC operations, integrate threat intelligence into detection and response, oversee physical security systems, manage vendors, and drive cross-functional incident investigations, emergency preparedness, and strategic security programs.

Lead cloud and cybersecurity engineering engagements: design and implement multi-cloud security architectures, detect and respond to threats, manage identity and access, enforce compliance baselines (SOC 2, ISO 27001, PCI, HIPAA), secure cloud infrastructure and DevSecOps pipelines, mentor staff, and develop AI-accelerated internal tooling and automation.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead delivery of cybersecurity strategy and advisory engagements as the primary client contact. Conduct security and maturity assessments, risk analyses, program roadmaps, workshops, and executive presentations. Mentor junior staff, support scoping/proposals, collaborate with GRC and engineering teams, and contribute to practice development and business development activities.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Build and operate Flox's security program: deploy and manage SIEM/SOC, harden AWS and Cloudflare, implement IaC/CSPM/SAST/SCA scanning, manage endpoint protection, secure the software supply chain, run incident response, and own identity and access controls.

Serve as part-vCISO and account manager: assess client security posture, design and customize security programs mapping controls to infrastructure, liaise with auditors, guide implementations, advise engineering on integrations, and communicate with stakeholders to ensure compliance and operational security.

Design, implement, and maintain a cross-platform endpoint security agent (Windows, macOS, Linux) using Go and JavaScript. Build low-level system automation, telemetry collection, secure agent-cloud communication, real-time threat detection, update mechanisms, and monitoring tools. Optimize performance, ensure multi-OS compatibility, and collaborate with security teams on detection rules and compliance checks.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Design and implement security and privacy improvements across Tailscales codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive remediation, and spend at least half your time writing code to build security features, defenses, and tooling.

Lead and scale the Email Security engineering team, own roadmap delivery, drive architecture for high-throughput distributed systems, partner with Product and Security, mentor engineers, and oversee on-call, incident response, and system reliability.

Assess and validate a high-volume Salesforce-to-AWS notification integration (S-Docs, VA Notify). Build and deploy integration components, implement DevSecOps (SAST/DAST/SCA), automate secrets/configuration, enable monitoring and error handling, and document architecture, risks, and compliance for federal ATO/RMF alignment.

Own and implement the platform's security and compliance posture (SOC 2, PCI, HIPAA). Design and automate controls and evidence pipelines, secure PII and tenant isolation across a multi-tenant platform, harden AI/LLM systems, partner with domains and CTO, and write production code to make compliance continuous and auditable.

Serve as a senior platform consultant and security architect advising engineering teams on secure-by-design platforms. Lead threat modeling, design large-scale cloud-native microservices, embed CI/CD security, drive Zero Trust and IAM strategies, mentor engineers, influence architecture and delivery, and communicate security posture to technical and business leaders.

Secure and harden cloud infrastructure, identity systems, and internal AI/agentic tooling. Build security automation, detection pipelines, and IaC controls (Terraform). Investigate incidents, query logs (Athena, CloudTrail Lake), design IAM policies, support secure customer deployments, research cloud/AI security threats, and produce runbooks and playbooks to scale security practices.

Develop, implement, and maintain security policies and controls mapped to NIST CSF; manage policy and compliance workflows in ServiceNow IRM; perform risk assessments and gap analyses; support audit readiness and vendor assessments; produce dashboards and reports; lead security awareness and AI governance training; mentor junior analysts; collaborate with IT, risk, compliance, and business teams to drive remediation and policy adoption.

Support VA Health portfolio cybersecurity across projects: lead ATO/ATC activities, develop security/privacy artifacts, review controls against NIST SP 800-53, perform scans and remediation, update ServiceNow/CAM and GRC tools, prepare audit documentation, and coordinate with stakeholders to identify and mitigate risks while enabling agile application development and operations.

Design, implement, and improve security architecture across AWS and Azure. Harden identity and privilege models, integrate CNAPP/CSPM and AppSec into SDLC, drive vulnerability and patch management, enable SIEM telemetry, implement IAM/PAM/least-privilege, and promote zero trust across engineering and product teams.

Sell IonQ's quantum-security solutions to SLED accounts by identifying and closing opportunities around quantum-safe encryption and post-quantum readiness. Manage full sales cycle, engage CISOs and IT leaders, collaborate with technical teams, maintain pipeline in CRM, and represent the company at industry events. Drive strategic, solution-oriented deals in complex, consultative environments.

Lead cross-functional security initiatives: automate security tasks and incident response, manage HITRUST/SOC2/PCI assessments and remediation, evaluate and optimize security tools, secure software development (GitHub, code scanning, AI code), respond to audits, deliver training, and investigate and remediate security incidents to advance program maturity.