Top Cyber Security Jobs in Sacramento, CA

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Contract Information Security Consultant to perform PCI assessments for a client in Sacramento through Dec 31, 2017 (possible extension). Requires documented experience conducting PCI assessments and holding CISSP and QSA certifications. Candidates must be authorized to work in the U.S.; employer cannot sponsor visas.

Lead infrastructure, network, cloud, identity, and security engineering efforts. Own Cisco Meraki networks and Microsoft security platforms (Entra ID, Defender, Intune, Azure), drive MSP-to-internal transitions, manage incidents and vulnerability remediation, provide Tier III support, and establish security policies and Zero Trust practices while mentoring IT staff.

Perform offensive and defensive security operations: configure and operate vulnerability scanning, patching, asset discovery, penetration testing, and exposure management. Assess and remediate vulnerabilities across hosts, apps, VMs and cloud. Support threat assessments, adversary emulation, AI system vulnerability testing, and develop defensive/offensive AI agents. Collaborate with DevOps, engineering, and stakeholders in Agile teams and produce security reports.

Provide Tier 1/2 support and subject-matter expertise for enterprise compliance archiving and Microsoft 365 Purview. Manage permissions, retention policies, eDiscovery cases, and data connectors. Build automation, monitor service resiliency and data quality, document processes, and coordinate with vendors and stakeholders to resolve compliance tool issues.

Lead security architecture for Client and Data Center SoCs, using AI-driven tools to discover firmware and low-level vulnerabilities, define firmware security specifications, drive threat modeling, partner with architects and engineers to translate risks into mitigations, and mentor engineers to operationalize AI-enabled security discovery across products.

Define and document enterprise mobile security requirements and controls (MDM, MAM, encryption, offline storage). Perform mobile security assessments (code review, threat assessment), create security testing standards and checklists, ensure regulatory compliance, and recommend security protocols, tools, and products. Provide mobile security architecture and documentation for Health Net; familiarity with enterprise SSO (OAuth, SAML) preferred.

Lead offensive security engagements including internal/external network, web app, wireless, social engineering, red/purple teaming. Test IT and application controls, provide remediation recommendations, map findings to frameworks (NIST, CIS), present to stakeholders, mentor junior staff, and contribute to practice development and client program execution.

Designs, develops, deploys, and supports enterprise security automations, custom tools, integrations, and workflows. Responsibilities include Python-based application and API development, vulnerability enrichment, incident response automation, IAM administration, Linux and Docker platform support, and administration of SIEM, SOAR, endpoint, cloud, network, and other security technologies. The role also troubleshoots integrations, monitors operational health, supports security teams, and maintains resilient, secure configurations across enterprise systems.

Lead Fireworks AI’s security operations function, including CrowdStrike deployment, detection engineering, incident response, SOAR workflows, threat intelligence, playbooks, metrics, and cross-functional incident coordination. Build and tune detections, operationalize response processes, run post-incident reviews, and improve coverage against MITRE ATT&CK. The role begins as a hands-on individual contributor and may grow into team leadership, including hiring and expanding 24/7 coverage and capabilities such as cloud detection engineering and red/purple team operations.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Design, build, validate, and maintain high-confidence detections across SIEMs and security platforms. Translate incidents, hunts, and threat intelligence into production-ready detection logic, drive detection-as-code workflows, and partner with responders to reduce noise, improve context, and monitor detection health. Coach teams, shape telemetry requirements, and own the full detection lifecycle from development to retirement.

Develop and formalize methods to validate reported vulnerabilities and generate/verify safe patches for internal NVIDIA targets. Define correctness, regression, and revalidation standards; produce repeatable, auditable processes and evidence. Apply AI-assisted workflows cautiously, perform bounded applied research on vulnerability classes, and document findings for independent security review.

Design, implement, and maintain enterprise-scale Identity & Access Management solutions across hybrid environments. Drive modernization to Zero Trust, automate identity processes, strengthen privileged access and governance, integrate AI-enabled tooling, monitor and respond to identity threats, ensure compliance and audit readiness, and collaborate with cross-functional teams to reduce identity risk and enable secure business operations.

Design, implement, and test security controls for endpoints, identity, network and infrastructure. Lead vulnerability/patch management, coordinate penetration tests, manage third-party risk, triage incidents, and assess AI/LLM risks while partnering with IT and engineering to enforce Zero Trust and secure system deployments.

Provide technical and operational support for MDR customers: investigate and validate alerts, perform log and endpoint analysis, assist containment and recovery, administer Sophos MDR platform, support compliance and cyber hygiene reviews, and coordinate with TAMs, DFIR and Sophos teams to improve service and security posture.

Perform security impact assessments, provide cybersecurity recommendations aligned with DoD and USCG requirements, participate in security-focused working groups, and guide developers in securely integrating applications with existing on-premises and cloud infrastructure. The role requires secure architecture experience, architectural diagramming, security tool integration, strong communication skills, and collaboration with government and contractor teams on rapid prototypes.

Lead delivery and growth of large cybersecurity engagements: define scope, lead teams, shape strategy, implement security frameworks, support sales and thought leadership, and mentor junior staff. Drive client relationships and manage program delivery and outcomes.

Design and implement automated cloud security controls across multi-cloud environments. Integrate security into CI/CD pipelines, harden infrastructure and IaC, manage IAM and secrets, advance container and workload security, protect AI/ML systems and data, and support monitoring, detection, and incident response for cloud applications.

Lead research and deliver strategic and tactical advice on AI data security and AI ecosystem data management. Produce written research, briefings, and presentations; advise clients and stakeholders; grow networks of thought leaders and vendors; ensure research integrity and collaborate across Gartner to support deliverables. Travel up to 25%.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.