Top Cyber Security Jobs in San Luis Obispo, CA

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Monitor, investigate, and respond to security alerts, phishing, vulnerabilities, and incidents for managed security clients. Conduct threat hunts, collect evidence, identify root causes, perform containment and remediation, and create incident reports and SOPs. Support deployment of security toolsets, collaborate with analysts and engineers, communicate with clients, and participate in after-hours or on-call coverage.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Conduct ISO 27001 and information security management system audits for assigned clients, managing engagements from contracting and scheduling through planning, assessment, reporting, invoicing, and follow-up. Lead audit teams when needed, mentor junior auditors, maintain client records, coordinate travel, and ensure audits meet BSI, regulatory, scheme, cost, timing, and customer satisfaction requirements.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Manage security operations and lead a security engineering team defending endpoints, SaaS, infrastructure, and corporate systems. Serve as senior Incident Commander, oversee detection and response using CrowdStrike, conduct cybersecurity risk assessments, and improve vulnerability, patch, access, and configuration management. Build detection coverage across endpoint, identity, SaaS, and cloud signals while partnering with AppSec and technical leaders. Lead the company’s AI security strategy and develop specialized security capabilities.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Build and operate reliable security infrastructure across hundreds of AWS environments. Responsibilities include security telemetry and log analytics, OpenSearch, GitOps deployments, Kubernetes and EKS security, cross-account cloud infrastructure, Python automation, AI-assisted engineering workflows, compliance evidence collection, incident support, and on-call operations. The role partners with Security Operations, Risk, and SRE teams to automate manual processes and improve platform resilience.

Leads OT network security engineering across manufacturing sites, translating enterprise architecture into segmentation, firewall, DMZ, access-control, and remote-access implementations. Coordinates production-sensitive cutovers with plant, IT, and safety teams while protecting manufacturing operations. Develops site-specific designs, compensating controls, implementation playbooks, and network documentation. Requires deep ICS expertise, knowledge of industrial protocols and security standards, and 10+ years of OT or industrial network security experience.

Build, integrate, and operate cloud-native security controls across infrastructure, data platforms, applications, CI/CD pipelines, and enterprise services. Develop CSPM and DLP capabilities, detection logic, automation, and incident-response mechanisms. Integrate controls with SIEM platforms, apply infrastructure-as-code and automated testing practices, and support reliable production operations. Collaborate with platform, application, and product teams to improve cloud security effectiveness and developer adoption.

Leads NVIDIA’s Infrastructure Security Engineering organization for EDA clusters. Builds and operates security controls across compute, storage, and networking in on-premises and multi-cloud environments while preserving performance for long-running workloads. Owns the technical roadmap, security technology lifecycle, automation, instrumentation, compliance evidence, and cross-functional execution. Develops secure-by-default infrastructure and leads teams responsible for scalable enforcement, observability, mitigation, and security outcomes.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Operate and improve security across cloud, endpoint, identity, SaaS, and corporate environments. Responsibilities include 24/7 alert triage, incident investigation and containment, threat hunting, phishing and fraud analysis, vulnerability management, evidence collection, and incident reporting. The role also engineers security-tool integrations and SOAR automation, supports PCI DSS and SOC 2 audits, maintains security posture, and communicates risks and remediation guidance to technical and nontechnical stakeholders.

Implements and supports security data ingestion pipelines across applications, cloud services, infrastructure, security tools, and business systems. Develops transformations, parsing, normalization, enrichment, masking, validation, and delivery workflows. Troubleshoots data quality and pipeline issues, documents architectures and data flows, coordinates with client stakeholders, and supports SIEM, detection, investigation, observability, and automation use cases. Requires data engineering experience, scripting, query languages, integration knowledge, and strong client communication.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads and develops an engineering team building and operating cloud security controls as software products. Provides technical direction through architecture, design, and code reviews; owns production reliability and continuous improvement; translates security risks into automated, scalable solutions; and coordinates roadmaps and dependencies with product, platform, application, and security teams. The role also drives agile delivery, secure engineering practices, mentoring, and adoption of reusable cloud security patterns across AWS, Azure, and GCP.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.