Top Cyber Security Jobs in San Luis Obispo, CA

Assess customers' information security and privacy posture against standards (NIST, PCI, GDPR, HIPAA, etc.), perform gap analyses, conduct onsite/remote assessments, produce findings and remediation recommendations, support sales as SME, and travel to customer sites as needed (25–50%).

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.

Lead application and operational implementation of GRC/compliance frameworks (SOC 1/2, ISO 27001, CSA STAR, NIST CSF). Develop policies, run internal audits, support risk management and remediation, coordinate with SecOps to ensure controls meet audit standards, and support access reviews and annual audits.

Serve as the ISSO for a high-visibility DoD program: develop and enforce security policies, perform vulnerability assessments (ACAS, STIGs, SCAP), implement DISA-approved configurations, conduct continuous monitoring, prepare ATO documentation (SSP, POA&Ms), perform risk assessments for satellite communications, and coordinate cross-functional cybersecurity efforts to mitigate risks and support authorization decisions.

Work on product AI team combining research and development to create and test security-focused AI use cases. Generate threat data, emulate APT attacks, write Python and shell automation, build repeatable tests, evaluate AI model effectiveness for SOC workflows, and influence engineering priorities through data-driven findings.

Lead and grow a team of offensive security engineers, ensure high-quality red team, application, and cloud security engagements, drive operational metrics (utilization, margin, NPS), integrate field findings into product, champion AI/automation, and support sales and client relationships at executive levels.

Lead end-to-end application and product security for a Kubernetes-based multi-tenant platform. Perform deep security reviews of Go services, Kubernetes controllers, and frontends; lead threat modeling; integrate automated security checks into CI; manage vulnerability lifecycle; develop security-related features; and train developers on secure coding and attack vectors.

Lead and mature enterprise cyber resilience: build and run a 24/7 SOC, enhance detection via analytics and automation, oversee threat intelligence, incident response, forensics, vendor relationships, and security tool roadmaps. Produce metrics, run tabletop exercises, and coordinate logging and cloud security integrations.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Join the Infrastructure team to provision and secure cloud resources (compute, containers, databases, networking). Maintain infrastructure security, implement policies, handle Jira tickets, participate in daily standups, and perform DevSecOps tasks using Terraform, Helm, CI/CD, and security tooling.

Lead and build Swords Security Operations Center: architect SIEM, develop detection-as-code, run incident response, mentor SOC engineers, design SOAR/AI automation, run threat hunting and metrics to reduce MTTD/MTTR and scale defenses across cloud environments.

Lead design and improvement of detection, alerting, incident response playbooks, and threat hunting. Drive investigations, digital forensics, AI-assisted automation, and cross-functional coordination to contain, eradicate, and prevent security incidents while measuring and improving SOC effectiveness.

Senior privacy consultant to design and implement privacy technology and governance. Lead OneTrust platform configuration, privacy assessments (ROPA, PIA, PTA, DSAR), data discovery, classification, mapping, and privacy-by-design. Translate privacy requirements into technical solution architectures and Azure integrations (Data Lake, Data Factory, Databricks, SQL), build workflows, dashboards, reports, and operational procedures, and implement data protection controls (masking, encryption, retention).

Manage daily operations of Privilege Identity applications and monitor SIEM services within the IAM infrastructure. Handle end-user escalations, maintain and update documentation, review and improve PI and SIEM processes, and evolve into strategic IAM responsibilities as services expand globally.

Lead SecOps and threat initiatives: detect, investigate, and remediate complex incidents; perform forensics and adversary emulation; develop automation and security tools; run threat exercises; mentor engineers; and communicate risks while driving closure on incidents and security projects.

Lead corporate security strategy and operations across identity, endpoints, device trust, internal networks, SaaS security, and vendor risk. Deliver a current-state assessment and multi-year roadmap, improve monitoring and incident response, establish AI governance and access controls, hire and develop a corporate security team, and represent security in audits, investor/customer diligence, and executive reporting.

Lead enterprise security architecture across hybrid and multi-cloud environments. Develop and govern reference architectures, perform architecture reviews, drive remediation, and define security standards for identity, network segmentation, data protection, monitoring, CI/CD, and AI platforms. Partner with engineering teams, support incident response and audits, and ensure secure integration of acquisitions and research/AI workloads.

Lead product marketing for Identity Security, partnering with product, sales, customer success and demand gen to develop messaging, sales enablement, product launches, market education, and customer advocacy.

Lead and grow a distributed product security engineering team, own secure SDLC and Security Foundations, embed security into CI/CD, conduct threat modeling and automated testing (SAST/DAST/SCA/fuzzing), and manage the FedRAMP security program while partnering across engineering, DevOps, and product.

Lead architecture and implementation of endpoint security, automation, and orchestration across PC, mobile, cloud, and BYOD environments. Design reusable, service-oriented infrastructure, partner with product teams to prioritize automation, evaluate emerging technologies, and ensure scalability, availability, and performance aligned to product roadmaps.

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Design and manage cloud and product security for AWS, perform security assessments and pen-test remediation, integrate security into DevOps/IaC, mentor engineers, and advise on compliance and threat mitigation across mobile core, applications, and cloud environments.

Lead and scale a product security organization to define and execute SaaS, cloud, and product security strategy. Embed security into the SDLC/DevSecOps, influence architecture and roadmaps, manage customer security assurance and contract reviews, define secure development standards, oversee third-party/OSS risk, and measure program effectiveness while supporting sales and compliance needs.