Top Cyber Security Jobs in San Luis Obispo, CA

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads enterprise security architecture for cloud and on-premises systems supporting a federal agency. Develops security standards, reference architectures, diagrams, policies, procedures, and hardening guidance; assesses architectures and security postures; identifies gaps and privacy requirements; supports Zero Trust, RMF, acquisition, compliance, risk management, and technical briefings. Partners with stakeholders to translate business needs into secure technical solutions and maintains architecture documentation throughout the system lifecycle.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Leads security operations and corporate IT for a healthcare technology company handling PHI. Responsibilities include incident response, application and cloud security, IAM, endpoint management, vendor reviews, security policies, compliance support for HIPAA, SOC 2, and HITRUST, and management of three direct reports. The role also builds AI-driven automation tools and workflows for IT and security operations while partnering with executives, engineers, customers, auditors, and compliance leaders.

Monitor, investigate, and respond to global security incidents; lead incident response as an incident commander; develop security alerts, playbooks, automated actions, and escalation workflows; conduct threat hunting and threat intelligence research; improve detection, containment, and post-incident processes; collaborate with stakeholders; and participate in an on-call rotation.

Supports managed security clients through threat hunting, security event analysis, detection use-case tuning, incident documentation, remediation guidance, metrics, root cause analysis, and process improvement. Provides escalation support, mentorship, technical oversight, and collaboration with security engineering and architecture teams. Requires experience with enterprise SIEM and case-management tools, SOAR platforms, vulnerability scanning, cybersecurity frameworks, technical documentation, and 24/7 managed services operations.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Monitor and investigate security alerts across client environments in a 24/7 security operations center. Analyze threats, identify malicious activity and indicators of compromise, distinguish false positives, support incident response and remediation, develop vulnerability reports, and communicate findings to technical and executive audiences. Participate in shift handoffs and rotating incident triage coverage while collaborating with incident response teams.

Leads and coordinates security and operational incident response for infrastructure, platforms, hosting, and customer environments. Serves as incident commander, manages escalations and communications, facilitates bridge calls and post-mortems, analyzes incident trends, maintains response procedures, and tracks corrective actions. Partners with technical and leadership teams to improve incident management maturity, accountability, governance, reporting, and operational transparency during high-severity events.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Translates compliance guidelines into business requirements, technical specifications, and security frameworks. Collaborates with internal teams, assessors, sales, project managers, support, engineering, and customers to understand web-scale systems, meet security obligations, integrate solutions, mitigate risks, and support go-live activities. Provides guidance on security controls, DDoS mitigation, network monitoring, incident escalation, threat detection, and security documentation.

Implement and validate Oracle Cloud Infrastructure security controls for a federal health customer. Responsibilities include securing IAM, networks, encryption, monitoring, Cloud Guard, Security Zones, Security Advisor, threat intelligence, key management, SIEM integrations, and Infrastructure as Code automation. The engineer will collaborate with cloud operations, migration, application, and systems teams while establishing technical security standards for cloud and on-premises environments.

Lead design and implementation of security systems and controls for large-scale AI and HPC cluster infrastructure. Drive incident response, risk assessment, system hardening, governance, audit readiness, and cross-team collaboration to protect hardware, software, and datacenter platforms.

Reviews and investigates security events, phishing reports, malware detections, and brand-monitoring alerts as a Tier 2 SOC analyst. Escalates incidents, supports containment and eradication, leads remediation, mentors junior analysts, documents procedures, and collaborates with security and IT teams across a multinational organization to improve threat detection and response capabilities.

Leads a 12-person application security practice conducting code audits, vulnerability research, and secure design reviews. Oversees technical delivery, client relationships, project staffing, utilization, profitability, recruiting, and team development. Provides hands-on technical direction across source-code security work, determines investments in tooling and methodologies, and integrates AI-assisted auditing and research into team workflows. The role also owns practice P&L and supports engineers’ conference, publication, and open-source contributions.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Lead enterprise security risk assessments, maintain the risk register, prioritize and track remediation, evaluate vendor and architectural risks, define risk methodologies, map controls to NIST and CMMC requirements, support audits, report risk metrics to leadership, and promote risk ownership across the organization.

Leads OT/ICS and enterprise cybersecurity architecture for a federal critical-infrastructure modernization program. Responsibilities include requirements development, NERC CIP traceability, market research, RFI and vendor evaluation, lab testing, alternatives analysis, product recommendations, and executive briefings. The role bridges utility operational technology and IT security, covering access control, monitoring, asset management, vulnerability management, SCADA environments, and industrial systems. It is fully remote in the U.S. with up to 25% domestic travel and requires Public Trust eligibility.

Leads data security governance across database monitoring, encryption, certificate and key management, HSM operations, data masking, and cryptographic asset inventory. Manages a security governance team, develops controls and procedures, supports audits and regulatory inquiries, partners cross-functionally, and drives post-quantum cryptography readiness, automation, metrics, service reliability, and operational maturity.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.