Top Remote Cyber Security Jobs in Santa Cruz, CA

Lead presales technical engagements and internal practice development for Security Operations. Assess SOC maturity, design target-state SOC architectures, deliver demos/POCs, build enablement collateral, evaluate vendors, and train sales and engineering teams to drive SecOps revenue and adoption.

Lead developer advocacy for AI and agentic security: advise security companies, accelerate NVIDIA stack adoption, guide partner integrations, map ecosystems, collaborate cross-functionally, run community events, and feed product teams with field insights.

Develop and formalize methods to validate reported vulnerabilities and generate/verify safe patches for internal NVIDIA targets. Define correctness, regression, and revalidation standards; produce repeatable, auditable processes and evidence. Apply AI-assisted workflows cautiously, perform bounded applied research on vulnerability classes, and document findings for independent security review.

Design, build, validate, and maintain high-confidence detections across SIEMs and security platforms. Translate incidents, hunts, and threat intelligence into production-ready detection logic, drive detection-as-code workflows, and partner with responders to reduce noise, improve context, and monitor detection health. Coach teams, shape telemetry requirements, and own the full detection lifecycle from development to retirement.

Lead design and implementation of security systems and controls for large-scale AI and HPC cluster infrastructure. Drive incident response, risk assessment, system hardening, governance, audit readiness, and cross-team collaboration to protect hardware, software, and datacenter platforms.

Lead Togal's security program: own SOC 2 compliance, manage audits and Vanta, respond to customer security reviews, design and lead incident response, evaluate monitoring/MDR/SIEM, tighten cloud security posture, and coordinate breach communications with Legal and executive leadership.

Design, implement, and maintain enterprise-scale Identity & Access Management solutions across hybrid environments. Drive modernization to Zero Trust, automate identity processes, strengthen privileged access and governance, integrate AI-enabled tooling, monitor and respond to identity threats, ensure compliance and audit readiness, and collaborate with cross-functional teams to reduce identity risk and enable secure business operations.

Assess customers' information security and privacy posture against standards (NIST, PCI, GDPR, HIPAA, etc.), perform gap analyses, conduct onsite/remote assessments, produce findings and remediation recommendations, support sales as SME, and travel to customer sites as needed (25–50%).

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Implement and support enterprise endpoint security solutions, troubleshoot incidents, contribute to solution architecture and tactical builds, participate in on-call rotation, and collaborate across teams to deliver projects and continuous improvements.

Provide AppSec architecture and governance to embed security across the SDLC. Conduct threat modeling and secure design reviews, define secure-by-design patterns, integrate SAST/DAST/SCA into CI/CD, track vulnerabilities and risk acceptances, and enable DevSecOps adoption through training and stakeholder collaboration.

Design and review security controls across cloud, network, and enterprise environments. Conduct network and cloud security assessments, evaluate tool configurations, support onboarding, develop policies/standards, perform gap analyses, and advise cross-functional teams to reduce risk and ensure regulatory compliance.

Technical owner for the SASE platform and enterprise data protection. Design and maintain secure access policies, troubleshoot production SASE issues, manage vendors/upgrades, support Microsoft Purview DLP and sensitivity labeling, oversee endpoint persistence (e.g., Dell Absolute), produce runbooks/standards, support audits/compliance, and develop AI automation.

Lead application and operational implementation of GRC/compliance frameworks (SOC 1/2, ISO 27001, CSA STAR, NIST CSF). Develop policies, run internal audits, support risk management and remediation, coordinate with SecOps to ensure controls meet audit standards, and support access reviews and annual audits.

Serve as the ISSO for a high-visibility DoD program: develop and enforce security policies, perform vulnerability assessments (ACAS, STIGs, SCAP), implement DISA-approved configurations, conduct continuous monitoring, prepare ATO documentation (SSP, POA&Ms), perform risk assessments for satellite communications, and coordinate cross-functional cybersecurity efforts to mitigate risks and support authorization decisions.

Work on product AI team combining research and development to create and test security-focused AI use cases. Generate threat data, emulate APT attacks, write Python and shell automation, build repeatable tests, evaluate AI model effectiveness for SOC workflows, and influence engineering priorities through data-driven findings.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Lead and mature enterprise cyber resilience: build and run a 24/7 SOC, enhance detection via analytics and automation, oversee threat intelligence, incident response, forensics, vendor relationships, and security tool roadmaps. Produce metrics, run tabletop exercises, and coordinate logging and cloud security integrations.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Join the Infrastructure team to provision and secure cloud resources (compute, containers, databases, networking). Maintain infrastructure security, implement policies, handle Jira tickets, participate in daily standups, and perform DevSecOps tasks using Terraform, Helm, CI/CD, and security tooling.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Senior privacy consultant to design and implement privacy technology and governance. Lead OneTrust platform configuration, privacy assessments (ROPA, PIA, PTA, DSAR), data discovery, classification, mapping, and privacy-by-design. Translate privacy requirements into technical solution architectures and Azure integrations (Data Lake, Data Factory, Databricks, SQL), build workflows, dashboards, reports, and operational procedures, and implement data protection controls (masking, encryption, retention).