Top Cyber Security Jobs in Santa Cruz, CA

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Design, implement, and validate anti-scraping defenses through red-team/blue-team testing. Develop bypass strategies, automated adversarial scripts, and conduct Android reverse engineering, packet analysis/tampering, and offensive/defensive drills to protect JD's platforms.

Design, implement, and maintain cloud security controls across Microsoft Azure and Microsoft 365. Configure and operate Defender suite, Sentinel, and logging; assess AKS and container workloads; perform vulnerability management and incident response; collaborate with cloud and compliance teams; support audits and customer security requests; develop documentation, automation, and monitoring to improve security posture.

Analyze large-scale SaaS security data to identify attack vectors and vulnerabilities, investigate incidents, reduce false positives, and develop detection strategies. Collaborate with security researchers, data scientists, and customers; ingest and correlate SaaS logs via APIs; produce thought leadership and improve platform detection capabilities.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Lead Microsoft's global Security partner strategy to accelerate customer adoption, consumption, and value realization via partner-led motions. Drive strategy, analytics, governance, partner readiness, and cross-functional alignment; generate insights from partner and product data; manage strategic programs and stakeholder communications; mentor team members and continuously optimize partner ecosystem performance.

Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.

Lead research and analysis on cloud-native security, create thought leadership, advise clients and vendors, present at events, support sales and peer review, mentor junior analysts, and improve research processes. Provide actionable guidance on cloud security architectures, vendor selection, and the intersection of cloud security with GenAI. Travel up to 25%.

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Owner of information security, privacy, and data governance programs. Maintain SOC 2 Type II, lead ISO 27001 certification, administer Vanta, run risk assessments, incident response, data governance, and partner cross-functionally to embed security and privacy.

Lead Fabric's security program and corporate IT operations, including identity, endpoint, cloud, application, and vendor security. Hire and manage a small team, run incident response, handle customer security questionnaires, partner on SOC2/HITRUST/HIPAA control implementation, and set practical security policy while remaining hands-on in operations and tooling.

Senior individual contributor who researches and delivers thought leadership on application security for enterprise applications (ERP/CRM). Produces insights, advises CIOs, supports sales and events, mentors junior analysts, and builds security strategies, roadmaps, metrics, and vulnerability testing programs for major vendors and third-party tools.

Lead security advisory engagements focused on cybersecurity and data governance. Conduct program assessments, design and operationalize data governance programs, produce client deliverables, mentor consultants, support sales with scoping and proposals, and contribute to practice development, thought leadership, and forecasting to drive advisory services revenue.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead and remain hands-on for security engineering and operations: design and harden controls, build automation and detection, manage MDR, run incident response, and own vulnerability management, metrics, and cross-functional security integration.

Own and operate the organisation's accounts, access, and cloud subscriptions; set practical security standards; identify and remediate risks hands-on; manage onboarding/offboarding access across core platforms; partner with engineers and researchers to ensure secure, usable controls.

Lead technical discovery and solution design for enterprise identity and privileged access management opportunities. Build reference architectures, guide PoC/PoV engagements, present to executive and technical stakeholders, collaborate with Sales Engineering, Product and Sales leadership, and represent Keeper at customer and market events while staying current on identity security landscape.

Design, build, and maintain automated API and security test frameworks. Validate authentication, authorization, rate limiting, and error handling. Conduct fuzzing, token validation, access control testing, and integrate tests into CI/CD. Analyze failures, test integrations, ensure API contract adherence, and mentor automation engineers to improve coverage and reliability.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Serve as the ISSO for assigned systems, maintain system security documentation (SSPs, control narratives, POA&Ms), support FedRAMP/GovRAMP/DoD authorization and continuous monitoring, coordinate remediation and assessments with engineering and auditors, support incident response and audit readiness, and track security metrics and evidence.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead and scale the enterprise application security program, embed secure SDLC and DevSecOps practices, integrate SAST/DAST/SCA into CI/CD, run assessments and remediation, advise engineering on architecture and high-risk issues, build governance/metrics, represent AppSec for audits, and mentor application security engineers.