Top Cyber Security Jobs in San Luis Obispo, CA

Lead and grow the security operations team to detect, investigate, and respond to threats across endpoints, identity, email, and cloud. Develop SecOps strategy, incident response playbooks, run tabletop exercises, manage SIEM/EDR/email security, drive identity governance, vendor/MSSP relationships, and report security KPIs to leadership.

Customer-facing role to drive security transformation on Azure and Microsoft 365. Architect, design, and implement cloud security, identity, threat protection, and information protection solutions; run design sessions, perform hands-on evaluations (Defender, Sentinel, AAD, Intune), troubleshoot implementations, and influence product and engineering teams to improve customer security posture and adoption.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Supports implementation and operation of data security posture management capabilities. Defines requirements, coordinates cross-functional stakeholders, supports system testing and implementation, monitors compliance and remediation, assists data owners with resolving sensitive-data violations, and recommends improvements to security processes, reporting, controls, and workflows. The role transitions into ongoing data security operations focused on secure data handling, retention, protection, and governance.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Conduct internal and external network, web application, API, mobile, cloud, social engineering, and wireless penetration tests. Advise clients on security and compliance, simulate cyberattacks, generate assessment reports, support engagement scoping and remediation, improve testing methodologies, manage escalations, and mentor junior staff while meeting delivery and utilization targets.

Defines enterprise technology strategy, architecture standards, security controls, and multi-year roadmaps across AWS, Azure, GCP, GitHub Enterprise, AI platforms, and infrastructure. Leads cloud governance, migration, modernization, FinOps, developer platform management, AI governance, and security architecture initiatives. Advises executives, ensures compliance and risk alignment, drives operational excellence, and mentors architects and engineers.

Administers Microsoft Defender services for a DoD customer, monitoring endpoint security, EDR, NGAV, attack-surface reduction, cloud protection, SIEM integrations, cross-platform controls, WDAC, DLP, compliance reporting, and security dashboards. Escalates anomalies, maintains policies and procedures, investigates alerts, and supports Windows, Linux, and mobile-device protection. Requires cybersecurity experience, Microsoft security expertise, DoD compliance knowledge, Security+ certification, and an active Secret clearance.

Partner with sales leadership and cross-functional stakeholders to drive billed revenue growth for Microsoft 365 E5. Monitor revenue performance, improve pipeline health, perform root-cause analysis, generate data-driven insights, and translate strategy into execution plans. Lead governance, cadence, and operational improvements to scale best practices and accelerate sales execution across regions.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.

Assess and reduce security risks across AWS infrastructure, applications, CI/CD pipelines, containers, and AI/LLM integrations. Responsibilities include threat modeling, security reviews, integrating SAST/DAST/SCA tools, hardening cloud and Kubernetes environments, automating security and incident-response workflows, and remediating vulnerabilities from scans and bug bounty programs.

Conduct proactive security reviews of features, architectures, integrations, and AI/ML systems. Lead threat modeling, design reviews, secure SDLC practices, vulnerability remediation, AI security governance, incident response exercises, and security automation. Support SOC 2 and ISO 27001 programs, collaborate with consultants on penetration testing and vendor assessments, and influence engineering teams on security without owning their roadmaps.

Customer-facing Cloud Solution Architect driving security transformation on Azure and Microsoft 365. Design and implement security architectures (Identity, Threat Protection, Cloud Security), run design sessions, perform hands-on evaluations of Defender, Sentinel, and Azure AD, and influence product and engineering teams to improve customer security posture and adoption.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Lead the maturation of Ontic’s AWS cloud security program by designing and automating security controls, integrating security into CI/CD workflows, improving cloud monitoring and detection, and developing continuous evidence collection for FedRAMP and other compliance initiatives. Partner with Engineering and DevOps teams on secure architecture, cloud best practices, regulated SaaS environments, and measurable security improvements.

Lead pre-sales security architecture engagements by designing and validating defense-in-depth solutions across hybrid, cloud, application, identity, endpoint, network, and data environments. Conduct security assessments, create remediation roadmaps, integrate security platforms, and support DevSecOps, SOC, detection engineering, incident response, compliance, and risk programs. Collaborate with sales, engineering, clients, and executive stakeholders to communicate technical trade-offs and deliver scalable enterprise security strategies.

Administers and supports enterprise cybersecurity technologies across a nationwide healthcare network. Responsibilities include security monitoring, incident response, vulnerability remediation, identity and access management, endpoint and cloud security, system hardening, backup security, security project implementation, documentation, and collaboration with IT, engineering teams, and managed security providers.

Leads DLP security operations across endpoint, network, SaaS, and cloud environments. Responsibilities include deploying and tuning DLP controls, investigating data exfiltration incidents, developing data classification policies, automating alert response playbooks, threat hunting for anomalous data movement, managing incident remediation, and tracking DLP effectiveness metrics. The role also supports incident response and vulnerability management and partners with stakeholders to balance security, usability, and regulatory requirements.

Design, develop, and maintain secure Linux endpoint privilege-management capabilities across Rust, C, and .NET. Build kernel-facing agents, PAM modules, privileged services, authentication and authorization workflows, systemd services, and Linux packages. Troubleshoot low-level security and execution issues involving permissions, SELinux, AppArmor, and race conditions. Collaborate with engineering and QA teams on architecture, testing, production support, and cross-platform functionality while using AI-assisted development tools.

Leads enterprise cryptography consulting engagements for executives and security leaders. Responsibilities include cryptographic risk assessments, post-quantum readiness, enterprise key management, HSM strategy, PKI architecture, encryption modernization, crypto-agility design, and migration roadmaps. The role develops governance, policies, standards, and risk-based transformation programs aligned with NIST, ISO, and regulatory requirements. It also includes client presentations, executive advisory, thought leadership, cross-functional coordination, workshops, and mentoring.