Top Remote Cyber Security Jobs in Santa Cruz, CA

Design, configure, and maintain Workday security across HCM and other modules. Build role-based access models, security groups, domain and business process policies. Troubleshoot access issues, perform SoD and audit reviews, support integrations and releases, create security documentation, and collaborate with HR/Finance/Compliance. Mentor team members and participate in on-call rotation.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Customer-facing presales role designing and demonstrating SASE and Zero Trust architectures. Lead technical discovery, deliver demos/POCs/workshops, respond to RFPs/RFIs, integrate HPE+Juniper security solutions, present to technical and executive stakeholders, and provide field feedback to influence product roadmap. Regional travel required.

Manage and grow a security engineering team responsible for product and platform security, embedding security into the SDLC, running red team/adversarial testing, performing hands-on web application pentesting, threat modeling, secure-coding guidance, and defining AI security guardrails.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Serve as a technical security consultant advising enterprise customers on secure adoption of AI-powered cloud services. Lead architecture discussions, design AI security strategies, conduct security reviews and audits, translate complex architectures for technical and executive audiences, and guide remediation of vulnerabilities. Partner with product, engineering, legal, and compliance teams to align security guidance and build long-term customer trust.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Join the security team to run security operations, monitoring, incident response, application and infrastructure security reviews, bug bounty management, and compliance (SOC 2, ISO 27001, GDPR). Participate in on-call rotations, triage alerts, remediate vulnerabilities (libraries, images, containers), threat model systems, and integrate defensive tooling to protect SaaS and on-prem deployments.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.

Design and implement software security solutions for diabetes care and digital health products. Lead product security risk assessments, vulnerability remediation, secure coding practices, static analysis, and incident response. Mentor engineers, run security reviews, and ensure compliance with regulated medical software development and quality management systems.

Lead strategy, execution, and operational excellence for multiple security engineering domains. Build and develop leaders, deliver multi-year roadmaps, drive platform evolution, automation, vendor strategy, and cross-functional programs to reduce risk and scale secure operations.

Hands-on senior IT security systems administrator responsible for administering Google Workspace and Microsoft 365, managing Windows and Mac endpoints via MDM, operating identity and SSO/MFA systems, and running security tooling (EDR, DLP, SIEM, email security). Owns threat monitoring, incident response, vulnerability and patch management, compliance evidence, DR planning, security reporting, and vendor relationships for a remote distributed workforce.

Lead architecture and continuous security improvement of enterprise Snowflake platforms. Build proactive monitoring and threat detection, integrate Snowflake telemetry with SIEM, perform threat modeling and remediation, guide governance and access controls, and drive managed services automation and runbooks while mentoring engineers.

Provide cybersecurity consulting for clients including risk assessments, policy and disaster recovery planning, incident response, security awareness, regulatory IT examination support, AI integration guidance, vendor oversight, reporting to leadership and boards, project management, and IT audit assistance. Deliver tailored security programs, documentation, tabletop testing, and timely communications while adapting to evolving regulations and client needs.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.

Hands-on offensive and defensive security engineer for a Layer 1 blockchain: audit Move modules, Solidity and Rust code, build fuzzers/static analysis/formal-verification tooling, threat-model protocol layers, run bug bounty triage, lead incident response, and partner with engineers and external auditors to harden the network against sophisticated adversaries.

Lead and deliver information security governance, risk, compliance, and privacy assessments; develop security programs, roadmaps, policies and executive presentations; advise C-level clients; perform PCI and CMMC advisory services; mentor staff and produce remediation recommendations and reports.

Lead enterprise security strategy for AI and cloud: design secure AI/ML architectures, enable secure cloud migrations (on‑prem to AWS/Azure), implement zero‑trust and IAM, secure data pipelines/APIs, establish governance and compliance (HIPAA/NIST), mentor teams, and drive audit‑ready security controls across AI and hybrid environments.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.