Top Cyber Security Jobs in Santa Cruz, CA

Lead and execute Governance, Risk, and Compliance (GRC) delivery tasks: conduct risk assessments, gap analyses, control and policy design, third‑party risk evaluations, and produce client-ready deliverables. Facilitate discovery workshops and stakeholder interviews, support program and roadmap recommendations, contribute to pre-sales and practice assets, and grow toward owning full workstreams while coaching junior team members.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.

Design, implement, and validate scalable endpoint security controls across Mac, Windows, and Linux. Lead patch and vulnerability management, host hardening, exploit validation, and threat-prioritization. Evaluate build vs. buy options, collaborate cross-functionally, translate technical risk to business impact, and provide business-hours operational support with infrequent incident response.

Develop, implement, and maintain the banks enterprise information security program. Independently assess first-line security risk management, regulatory compliance, incident response, and control effectiveness. Oversee security governance, policy, KRIs, business continuity, and third-line coordination. Provide unfiltered reporting and challenge to executive management and the Board and lead post-incident reviews and resilience testing.

Design, build, and operate runtime provisioning and secure transport systems to authenticate Netflix client applications at scale. Collaborate with client engineering across devices and platforms, apply applied cryptography and attacker mindset to validate controls, and take end-to-end ownership from design through in-field impact while balancing security and product tradeoffs.

Architect and implement system-level security for Open Connect edge and gaming appliances across hardware (FPGA, BMC, BIOS/UEFI), kernels and dual OS (FreeBSD/Linux). Improve platform integrity (measured/secure boot, BMC controls), triage system-level vulnerabilities, build low-level tooling and automation, and partner cross-functionally and with vendors to harden binary ingestion and execution.

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.

Own protocol and cryptographic foundations for Netflix Open Connect edge appliances. Design and implement security primitives, optimize crypto/transport for performance, build DoS mitigations, conduct vulnerability research, and partner cross-functionally to deploy end-to-end security controls across delivery infrastructure.

Serve as a public-facing Web3 security researcher: engage the community via social media, speak at conferences, give interviews, collaborate cross-functionally with CertiK teams, and support marketing and product feedback while performing technical Web3 security work.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform end-to-end blockchain security services including consulting, manual code reviews and audits of smart contracts and protocols (Solidity, Go, Rust), threat modeling, property-based and gas-related testing, penetration testing, and deliver detailed security assessments to clients.

Develop and optimize LLM-driven AI agents to automate smart contract security audits. Collaborate with blockchain security teams to research, prototype, and productionize threat detection, risk assessment, and automated vulnerability analysis for blockchain environments.

Join a security research team to develop analysis tools, review sandbox/VM and network modules, discover vulnerabilities and create PoC exploits for distributed systems, and publish findings. Research areas include malware analysis, vulnerability detection, network anomaly detection, mobile app analysis, reverse engineering, and fraud detection.

Perform guided audits of smart contracts, blockchain protocols, and dApps to identify and remediate vulnerabilities. Contribute to security tooling and research, explore attack vectors, and support process and methodology improvements under senior guidance.

Perform smart contract and blockchain audits to find and analyze vulnerabilities, define attack models, extract exploit characteristics to build feature-analysis tooling, and research/adopt analysis tools and emerging blockchain security technologies.

Serve as a senior security operations advisor: lead incident response, tune detection tooling (SIEM/SOAR/XDR/EDR), apply identity-centric and Zero Trust controls, advise product/R&D on secure-by-design, document runbooks and metrics, automate tasks, mentor teammates, and communicate findings across technical and non-technical stakeholders.

Own outbound field motion for Identity Threat Protection launch, validate messaging in live deals, synthesize field intelligence into product recommendations, run adoption diagnostics, and provide technical escalation support for complex identity situations.

Lead messaging, positioning, and go-to-market for core AI-native security products. Drive product launches, sales enablement, demand generation content, customer research, and analyst/customer-facing evangelism to accelerate pipeline and revenue.

Sell enterprise cybersecurity solutions to public sector and critical infrastructure clients. Build CxO relationships, manage full sales cycle from pipeline generation to close, collaborate with partners and services, meet revenue and margin targets, and maintain technical knowledge of cybersecurity products and market dynamics.

Support pre-sales and post-sales technical engagements for Keeper's DevOps-focused cybersecurity products. Conduct technical discovery, demos, trials, integrations, and level-2 support for CI/CD, container, and cloud-native environments. Act as DevOps SME, collaborate with sales and engineering, produce technical training, maintain Salesforce records, and travel to customer meetings as needed.

Lead design, implementation, upgrade, and migration of CyberArk PAM solutions across client environments. Conduct discovery workshops, onboard privileged accounts, integrate CyberArk with SIEM/ITSM/IAM via APIs, create custom connectors and PSM plugins, produce documentation, manage project delivery, troubleshoot production issues, and mentor junior engineers.

The Exposure Management Engineer optimizes and automates security platforms, manages vulnerabilities and exposure findings, and coordinates with client teams for remediation workflows.

Serve as primary customer contact from onboarding through renewal for Mitiga's CDR platform. Lead technical enablement, drive adoption, define success plans and KPIs, run QBRs, own renewals, identify expansion opportunities, and relay customer feedback to product and engineering. Coordinate integrations and implementation, analyze customer health and usage, and contribute to documentation and AI-assisted workflows.