Top Remote Cyber Security Jobs in Tucson, AZ

Manages enterprise information assurance and cybersecurity support for DHS/TSA, including incident response, vulnerability management, risk and compliance services, RMF-based assessment and authorization, security audits, POA&M remediation, and security architecture. Coordinates cybersecurity teams, stakeholders, system owners, and government offices while monitoring performance, identifying risks, and recommending mitigation strategies.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Leads proactive cybersecurity consulting engagements from planning through delivery. Manages consulting teams, client relationships, budgets, timelines, and engagement outcomes; presents findings to technical and executive stakeholders; supports business development, capability building, and methodology development. Requires extensive client-facing cybersecurity experience, strong risk and governance knowledge, excellent communication skills, and international travel.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Supports the ISSM in securing classified and unclassified F-35 systems. Responsibilities include implementing and validating cybersecurity controls, continuous monitoring, vulnerability remediation, risk assessment, incident investigation, compliance reporting, security documentation, inspections, and enforcing data-handling policies. The role also performs event correlation, threat analysis, corrective action oversight, regulatory assessments, and user security training at a 100% on-site customer facility.

Manages site security operations supporting F-35 programs, including classified material control, access control, security training, incident reporting, inspections, vault alarm testing, and SAP compliance. Enforces DoD, USAF, SAP, SCI, and NISPOM security requirements; supports customer inspections, security inquiries, facility operations, and classified document and media handling. The role may require rotating shifts, weekends, occasional travel, and future Top Secret clearance requirements.

Leads major cyber incident response and command activities, performing digital forensics, threat hunting, containment, recovery, and malware triage across endpoint, cloud, network, identity, Windows, and Linux environments. Coordinates technical teams, mentors analysts, briefs executives, develops response playbooks and training, automates investigations with scripting, and partners with detection engineering and threat intelligence teams to improve SOC capabilities.

Assists the CISO in managing a bank’s information security program, including cybersecurity strategy, risk assessments, policy development, regulatory compliance, audits, incident response, business continuity, security metrics, employee training, and oversight of security technologies. The role coordinates with IT, security, and business teams to protect data and technology assets and meet banking, OCC, and FFIEC requirements.

Own and scale Komodo Health’s application and product security program across software repositories, CI/CD pipelines, cloud deployments, and AI features. Build security automation, configure SAST/SCA/DAST tooling, conduct threat modeling and penetration-test remediation, secure software supply chains, and establish AI security guardrails. Partner closely with Engineering and Forward Deployed Engineering teams, support customer security reviews, improve vulnerability management, and maintain SOC 2 readiness.

Leads Windows security assurance across compliance, risk assessment, security controls, vulnerability research, and security tooling. Manages security assurance program managers, partners with engineering and product teams, translates requirements into controls, drives scalable security reviews and scanning, and coordinates high-impact initiatives. The role requires influencing across teams, managing ambiguity, tracking outcomes, and improving security processes throughout the product lifecycle.

Leads a team of intelligence analysts and translates security priorities into threat intelligence requirements. Oversees intelligence production workflows, establishes standards, reviews finished intelligence products, tracks sophisticated adversaries and ransomware campaigns, and partners with engineering and external organizations to improve customer protection. The role also manages escalations, communicates technical findings and business impact, and supports security objectives across Microsoft and its customers.

Leads hypothesis-driven threat hunting, cloud vulnerability analysis, remediation, and incident response across AWS, Azure, GCP, and OCI. Administers Qualys and Tenable, analyzes SIEM and cloud telemetry, investigates threats, prioritizes vulnerabilities, remediates misconfigurations and IAM risks, develops detections and hunt playbooks, documents findings, briefs stakeholders, and mentors junior engineers.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Leads enterprise cybersecurity, infrastructure, cloud, technology risk, governance, and operational resilience. Advises executive leadership and Board committees, owns security strategy and risk remediation, directs incident response and security operations, oversees Microsoft cloud infrastructure, resilience planning, regulatory compliance, vendors, budgets, and technology investments. Recruits and develops security and infrastructure teams while ensuring secure, reliable, and cost-effective technology supporting the institution’s strategic goals.

Provides cybersecurity risk, security, governance, and compliance consulting for clients. Leads and supports advisory engagements, communicates technical findings to executive and technical audiences, develops reports and security roadmaps, evaluates business drivers and control frameworks, supports proposals and business development, and helps advance client cybersecurity programs and practice operations.

Supports federal cybersecurity authorization and ongoing authorization activities under the NIST RMF. Reviews ATO packages, SSPs, PIAs, risk assessments, contingency plans, POA&Ms, and security controls. Maintains assessment records in CSAM or similar GRC tools, tracks authorization renewals, supports continuous monitoring, and coordinates audit and compliance responses with technical and non-technical stakeholders.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Leads product security, cloud and infrastructure security, AI security, security architecture, vulnerability management, and edge security. Oversees threat modeling, secure development standards, AWS controls, vulnerability remediation, AI risk governance, customer security reviews, and security engineering delivery. Reports to the CISO, partners with engineering and GRC leaders, and hires and develops the security engineering organization.

Lead enterprise security architecture across AWS cloud, applications, infrastructure, and CI/CD pipelines. Responsibilities include threat modeling, DevSecOps integration, policy-as-code guardrails, IAM, encryption, data protection, container security, compliance, risk assessments, and evaluation of AI security solutions. The role partners with engineering and cloud teams to implement secure architectures and controls aligned with NIST, OWASP, CIS, ISO 27001, FedRAMP, and SOX.

Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Designs and implements automation for federal security authorization and ATO processes. Responsibilities include automating evidence collection, validation, workflow routing, reporting, policy checks, and readiness dashboards; integrating security scans, SBOM/SCA, vulnerability, repository, and system-of-record tools; and maintaining testing, documentation, traceability, and release artifacts. Requires collaboration with security, engineering, platform, data, and government stakeholders.