Top Cyber Security Jobs in San Luis Obispo, CA

Lead the creation and growth of a new OT/IoT cybersecurity practice, owning its P&L, offerings, pricing, partnerships, hiring, delivery quality, and go-to-market strategy. Serve as a senior technical SME and trusted advisor for client assessments, regulatory compliance, executive workshops, roadmaps, and security engagements. Shape and close consulting opportunities, develop methodologies and deliverables, manage teams, and advise organizations on ICS/SCADA, segmentation, monitoring, IT/OT convergence, and AI-related risks.

Leads Security Operations Center activities, including incident response, complex threat investigations, detection engineering, SIEM development, security tooling, log pipeline management, vulnerability remediation, risk analysis, automation, and operational reporting. Serves as the senior escalation point and incident coordinator, leading containment and eradication while collaborating with technical and business stakeholders. The role is fully remote within approved states and may require extended or non-business hours during crises.

Own Hightouch’s application security posture as the first dedicated security hire. Secure multi-tenant systems, sub-tenant access controls, distributed architecture, internet-facing APIs, and multi-region, multi-cloud infrastructure. Lead threat modeling, compute isolation, rate limiting, abuse detection, authorization, privacy controls, and security program initiatives. The role is highly hands-on, emphasizing code-level fixes, architecture influence, roadmap ownership, and collaboration with engineering teams.

Leads governance, risk, and compliance engagements for clients, including vCISO accounts. Develops security roadmaps, conducts maturity and risk assessments, governs incident response and policies, supports audit readiness, advises on budgets, delivers executive communications, and mentors security advisory staff.

Lead customer-facing application security engagements, including architecture reviews, threat modeling, secure code reviews, penetration testing, and cloud security assessments. Translate technical risks into actionable remediation guidance, communicate findings to technical and executive stakeholders, develop assessment methodologies and automation, define secure development standards, research emerging threats, and mentor consultants while helping build Salesforce’s Professional Services Security Assurance practice.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Leads regulatory and security compliance for evaluating agentic AI vendors within a CMS Fraud Prevention Services authorization boundary. Assesses vendor security postures, authors control inheritance, boundary, data-flow, SSP, POA&M, PIA/SORN, and compliance artifacts, and coordinates with CMS security stakeholders. Advises on AI-specific risks involving data retention, prompt logging, PHI, tool authorization, and RBAC. Requires extensive federal compliance experience, AWS security knowledge, HIPAA/FISMA expertise, and the ability to obtain Public Trust clearance.

Own product and infrastructure security across fintech products and cloud environments. Lead threat modeling, architecture reviews, secure code reviews, vulnerability management, bug bounty operations, CI/CD security scanning, IAM and secrets management, and security standards. Partner directly with engineering leadership to identify and remediate critical vulnerabilities across backend services, APIs, frontends, Solana programs, and infrastructure.

Leads ISSO and risk and compliance teams overseeing FedRAMP, NIST RMF, FISMA, HIPAA, and accreditation activities. Conducts security control and vulnerability assessments, develops ATO and compliance documentation, manages continuous monitoring and remediation, advises authorization officials, and coordinates audits, penetration testing, and assessments. Provides technical leadership, trains security personnel, maintains risk registers and policies, and supports federal healthcare cybersecurity programs.

Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Assess cloud, network, infrastructure, and application designs against security and compliance requirements. Translate requirements into technical specifications, security blueprints, and engineering guardrails. Support compliance programs, control assessments, and audits, investigate security risks, define remediation, and improve security-control adoption through AI and automation.

Manages the IT and Security team, including helpdesk workflows, project roadmaps, compliance automation, access management, authentication standards, disaster recovery, vendor relationships, and enterprise system rollouts. Partners with product, engineering, and business leaders on security initiatives and complex technical changes. Maintains audit-ready security processes while overseeing remote IT operations, cloud security, identity tools, and technology spend.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Designs, implements, maintains, and improves cybersecurity controls across enterprise systems, networks, cloud environments, and applications. Deploys and troubleshoots security technologies, responds to incidents, identifies security requirements, supports audits and change management, documents procedures, analyzes risks, and delivers remediation recommendations. Collaborates with architects, project managers, engineers, and stakeholders to protect organizational data and infrastructure while automating repeatable security tasks.

Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.

Leads enterprise security architecture by assessing threats, performing application security assessments and threat modeling, reviewing designs, and integrating controls into SDLC and DevSecOps environments. Advises business and engineering stakeholders on secure solutions, remediates vulnerabilities, protects APIs, web applications, and cloud workloads, and improves security processes through automation and standardization.

Designs and implements application security protections for APIs, services, developer tools, and data platforms supporting autonomous vehicle and software infrastructure. Responsibilities include threat modeling, code and architecture reviews, authentication and authorization controls, secure handling of credentials and sensitive data, CI/CD security integration, vulnerability remediation, and reusable security tooling. The role partners with software, infrastructure, and corporate security teams to prioritize and measure security improvements.

Designs, builds, automates, and operates security capabilities across Azure, GCP, and on-premises environments. Responsibilities include Python automation, AI/LLM security workflows, infrastructure as code, cloud and network security, threat modeling, vulnerability remediation, security tool integration, documentation, troubleshooting, incident improvement, and on-call support. The role owns security services through production, collaborates across engineering teams, and mentors peers.