Top Senior Cyber Security Jobs in Sacramento, CA

Leads day-to-day information security across applications, infrastructure, cloud, networks, endpoints, and data platforms. Responsibilities include incident response, threat and vulnerability assessment, application and API protection, AWS and container security, IAM, endpoint controls, compliance support, vendor reviews, and executive communication. The role partners with engineering teams to remediate risks, improve security controls, protect high-traffic consumer sites from abuse, and maintain incident procedures and security documentation.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Lead Runpod’s security organization and own the security posture of its cloud platform, infrastructure, and corporate environments. Responsibilities include security strategy, cloud and application security, SecOps, GRC, compliance certifications, secure software development, threat modeling, vulnerability management, incident response, vendor risk, security automation, and infrastructure security. Build and mentor a distributed security team while partnering with Engineering, Infrastructure, Product, GTM, and Legal to protect customer AI workloads and support scalable growth.

Research and analyze threat intelligence, attacker tactics, vulnerabilities, and forensic evidence. Conduct threat hunts and investigations, develop detection logic and security recommendations, create customer and internal briefings, produce threat content, and improve Microsoft security tooling and investigative practices. The role supports global efforts to identify adversary activity, catalog TTPs, and protect enterprise customers.

Leads Lilly’s enterprise security posture and exposure management organization. Owns vulnerability management strategy, scanning architecture, application security integration, offensive security oversight, risk-based prioritization, remediation SLAs, exposure reporting, tooling, automation, vendors, budget, and executive accountability. The role requires deep hands-on cybersecurity expertise and experience leading leaders across enterprise-scale vulnerability management or security operations.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Own the company-wide security program across cloud infrastructure, mobile applications, IoT firmware, and autonomous AI systems. Responsibilities include security operations, SIEM and incident response, vulnerability management, product threat modeling, penetration testing, secure SDLC enforcement, AI security guardrails and monitoring, cloud security, and end-to-end compliance ownership. Serve as the primary security authority, partnering with engineering and executives on risk, controls, audits, customer security, and incident post-mortems.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.

Build, validate, deploy, tune, monitor, and retire high-confidence security detections across SIEM, endpoint, cloud, identity, SaaS, developer, and AI environments. Translate incidents, threat intelligence, hunts, and red-team findings into tested detection logic. Improve detection-as-code workflows, telemetry quality, coverage tracking, and alert context while reducing false positives. Partner with responders and security teams, conduct reviews, document operational content, and coach analysts and engineers.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Provides security architecture and enablement across SaaS platforms, APIs, custom applications, data integrations, cloud environments, and AI workflows. Partners with product, engineering, data, architecture, identity, infrastructure, enterprise, and procurement teams to conduct threat reviews, develop secure-by-design patterns, assess vendors, implement guardrails, and manage risks. Translates security requirements into practical solutions, supports enterprise data strategy and M&A integration, and mentors teams as a trusted security advisor.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Leads proactive cybersecurity consulting engagements from planning through delivery. Manages consulting teams, client relationships, budgets, timelines, and engagement outcomes; presents findings to technical and executive stakeholders; supports business development, capability building, and methodology development. Requires extensive client-facing cybersecurity experience, strong risk and governance knowledge, excellent communication skills, and international travel.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Leads major cyber incident response and command activities, performing digital forensics, threat hunting, containment, recovery, and malware triage across endpoint, cloud, network, identity, Windows, and Linux environments. Coordinates technical teams, mentors analysts, briefs executives, develops response playbooks and training, automates investigations with scripting, and partners with detection engineering and threat intelligence teams to improve SOC capabilities.

Own and scale Komodo Health’s application and product security program across software repositories, CI/CD pipelines, cloud deployments, and AI features. Build security automation, configure SAST/SCA/DAST tooling, conduct threat modeling and penetration-test remediation, secure software supply chains, and establish AI security guardrails. Partner closely with Engineering and Forward Deployed Engineering teams, support customer security reviews, improve vulnerability management, and maintain SOC 2 readiness.

Leads a team of intelligence analysts and translates security priorities into threat intelligence requirements. Oversees intelligence production workflows, establishes standards, reviews finished intelligence products, tracks sophisticated adversaries and ransomware campaigns, and partners with engineering and external organizations to improve customer protection. The role also manages escalations, communicates technical findings and business impact, and supports security objectives across Microsoft and its customers.

Leads hypothesis-driven threat hunting, cloud vulnerability analysis, remediation, and incident response across AWS, Azure, GCP, and OCI. Administers Qualys and Tenable, analyzes SIEM and cloud telemetry, investigates threats, prioritizes vulnerabilities, remediates misconfigurations and IAM risks, develops detections and hunt playbooks, documents findings, briefs stakeholders, and mentors junior engineers.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Lead enterprise security architecture across AWS cloud, applications, infrastructure, and CI/CD pipelines. Responsibilities include threat modeling, DevSecOps integration, policy-as-code guardrails, IAM, encryption, data protection, container security, compliance, risk assessments, and evaluation of AI security solutions. The role partners with engineering and cloud teams to implement secure architectures and controls aligned with NIST, OWASP, CIS, ISO 27001, FedRAMP, and SOX.