Top Senior Cyber Security Jobs in Sacramento, CA

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Manage security operations and lead a security engineering team defending endpoints, SaaS, infrastructure, and corporate systems. Serve as senior Incident Commander, oversee detection and response using CrowdStrike, conduct cybersecurity risk assessments, and improve vulnerability, patch, access, and configuration management. Build detection coverage across endpoint, identity, SaaS, and cloud signals while partnering with AppSec and technical leaders. Lead the company’s AI security strategy and develop specialized security capabilities.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Lead design and implementation of secure global network infrastructure. Architect security standards, conduct threat modeling and network assessments, build security automation and tooling, integrate controls with SDN/BGP/MPLS platforms, support incident response, and mentor engineering teams to maintain resilient, observable network security posture.

Presales Security Architect responsible for designing and presenting cybersecurity solutions for strategic enterprise clients. Partners with sales teams, gathers requirements, develops security architectures and roadmaps, supports RFP/RFI and proof-of-concept processes, and ensures successful solution handoff and implementation. Builds executive-level client relationships, contributes to sales playbooks and consulting offerings, mentors engineers, and provides security thought leadership. Requires substantial travel to client sites as needed.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Partner with sales to design and present data security solutions for SLED customers. Lead technical evaluations, gather requirements, build test plans, configure proof-of-concepts, and guide customers to successful outcomes while collaborating across GTM teams.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Lead MSSP-focused sales to recruit, enable, and grow managed security provider partners. Drive joint services, partner-led customer adoption, revenue attainment, forecasting, and cross-team issue resolution while meeting quotas and pipeline targets.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.