Top Senior Cyber Security Jobs in San Diego, CA

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Supports federal security certification and authorization activities, coordinates assessments with independent assessors, validates control evidence, drives remediation and continuous monitoring, and evaluates security incidents for federal reporting obligations. The role also develops scalable compliance processes for cloud services and authorized boundaries, collaborating with technical and nontechnical stakeholders. It requires expertise in NIST 800-53, FedRAMP, DoD Cloud Computing SRG, CNSSI 1253, and federal cloud security compliance.

Drives growth of CDW’s security portfolio among state and local government customers. Builds executive relationships with CIOs and CISOs, leads security opportunities from discovery through close, and positions broad security solutions across identity, cloud, risk, compliance, threat management, and secure infrastructure. Partners with sales teams, solution architects, delivery teams, vendors, and public-sector stakeholders to develop integrated solutions, manage procurement cycles, coordinate events, and maintain accurate forecasts. Regional travel is required as needed.

Lead product security incident response for post-release vulnerabilities, including deep-dive investigations, exploit analysis, remediation coordination, CVE assignment and disclosure, advisory review, and incident leadership. Partner with engineering, product, release, customer-facing, and external security teams to reduce exposure windows, verify fixes, conduct postmortems, and improve secure development processes and PSIRT capabilities.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Monitor and triage security alerts, support incident response and vulnerability remediation, review logs, tune SIEM detections, and maintain security documentation. The role contributes to risk assessments, control improvements, automation, dashboards, and operational playbooks while collaborating with internal teams. It requires familiarity with EDR, SIEM/SOAR, CSPM, vulnerability management, firewalls, cloud environments, networking, operating systems, security frameworks, and common attack techniques.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Architects and operates enterprise outbound security services for a multi-tenant SaaS platform. Responsibilities include egress filtering, proxying, SSRF protection, exfiltration prevention, Kubernetes operations, threat modeling, incident response, compliance, and evaluating AI/ML for anomaly detection and risk scoring. The role also mentors engineers and advances secure connectivity, TLS, and post-quantum readiness.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.

Leads consulting, presales, architecture, and delivery oversight for ServiceNow Security and Risk solutions. Designs integrations and governance workflows, advises executive stakeholders, develops implementation roadmaps and service offerings, supports solution scoping, mentors delivery teams and partners, and promotes best practices across regulated enterprise customers. The role requires deep ServiceNow Security and Risk expertise, strong consulting and communication skills, and up to 20% annual travel.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Develop application security policies and integrate security scanning tools into CI/CD pipelines. Review findings, partner with developers to remediate vulnerabilities, perform threat modeling, and validate secure-by-default architectures and coding standards. The role also involves software analysis, secure coding, cryptography, DevSecOps practices, and collaboration across engineering teams.

Leads the F-35 cybersecurity program at MCAS Miramar, overseeing ISSOs and cybersecurity controls for classified and unclassified systems. Responsibilities include incident response, vulnerability remediation, compliance monitoring, authorization artifacts, reporting, self-inspections, and customer inspection readiness. The role requires collaboration with military stakeholders and adherence to DoD cybersecurity and SAP requirements.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Leads Apollo’s detection and response strategy, detection architecture, security observability, incident response, and AI-assisted security workflows. Builds MITRE ATT&CK-aligned detections, response automations, investigation tools, and detection-as-code pipelines using Panther and Python. Leads high-severity incidents across cloud, SaaS, and corporate systems; improves IR readiness, metrics, playbooks, and forensic processes. Partners with Engineering, Infrastructure, IT, Legal, Fraud, and leadership while mentoring engineers and driving multi-quarter security initiatives.