Top Cyber Security Jobs in Santa Cruz, CA

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Build and operate reliable security infrastructure across hundreds of AWS environments. Responsibilities include security telemetry and log analytics, OpenSearch, GitOps deployments, Kubernetes and EKS security, cross-account cloud infrastructure, Python automation, AI-assisted engineering workflows, compliance evidence collection, incident support, and on-call operations. The role partners with Security Operations, Risk, and SRE teams to automate manual processes and improve platform resilience.

Leads OT network security engineering across manufacturing sites, translating enterprise architecture into segmentation, firewall, DMZ, access-control, and remote-access implementations. Coordinates production-sensitive cutovers with plant, IT, and safety teams while protecting manufacturing operations. Develops site-specific designs, compensating controls, implementation playbooks, and network documentation. Requires deep ICS expertise, knowledge of industrial protocols and security standards, and 10+ years of OT or industrial network security experience.

Design, build, deploy, and operate enterprise security controls as software products. Develop production code, APIs, backend services, and scalable cloud-based distributed systems while integrating security capabilities into development platforms. Apply test-driven development, continuous integration and deployment, and agile practices. Collaborate with product and engineering teams, evaluate emerging technologies, and improve security, reliability, adoption, and developer experience.

Build, integrate, and operate cloud-native security controls across infrastructure, data platforms, applications, CI/CD pipelines, and enterprise services. Develop CSPM and DLP capabilities, detection logic, automation, and incident-response mechanisms. Integrate controls with SIEM platforms, apply infrastructure-as-code and automated testing practices, and support reliable production operations. Collaborate with platform, application, and product teams to improve cloud security effectiveness and developer adoption.

Define and drive Security Operations strategy at the intersection of Identity and AI. Analyze IAM and AI roadmaps, perform threat modeling, build security frameworks for AI-enabled systems and agentic workloads, identify capability gaps, incubate new security approaches, and partner with engineering and security teams to influence long-term direction and operational readiness.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Lead cybersecurity governance, risk assessments, compliance, and Authorization to Operate efforts for applications, products, and cloud environments. Identify vulnerabilities, manage POA&Ms, assess security controls, support continuous monitoring, coordinate audits, and ensure compliance with federal cybersecurity mandates and RMF requirements. Collaborate with stakeholders and security engineering teams across IAM, SaaS, enterprise IT, and cloud platforms, while leading multidisciplinary efforts in federal environments.

Leads governance, risk, and compliance engagements for clients, including vCISO accounts. Develops security roadmaps, conducts maturity and risk assessments, governs incident response and policies, supports audit readiness, advises on budgets, delivers executive communications, and mentors security advisory staff.

Executes and helps define the information security strategy by leading risk assessments, audits, control testing, policy development, business continuity planning, vendor risk reviews, incident response, and remediation tracking. The role aligns security programs with CIS, NIST, ISO 27001, and SOC 2 frameworks, maintains risk and compliance reporting, and mentors junior security staff while partnering with global business and IT leaders.

Own and operate MEDvidi’s HIPAA security program, including risk management, remediation, administrative and technical safeguards, incident response, vendor security, policies, GRC operations, security architecture, and compliance monitoring. The role partners with IT, Privacy, Compliance, and leadership to protect ePHI, manage healthcare technology risks, coordinate penetration testing, conduct tabletop exercises, and maintain compliance with evolving HIPAA requirements.

Leads NVIDIA’s Infrastructure Security Engineering organization for EDA clusters. Builds and operates security controls across compute, storage, and networking in on-premises and multi-cloud environments while preserving performance for long-running workloads. Owns the technical roadmap, security technology lifecycle, automation, instrumentation, compliance evidence, and cross-functional execution. Develops secure-by-default infrastructure and leads teams responsible for scalable enforcement, observability, mitigation, and security outcomes.

Administer and troubleshoot PKI infrastructure and digital certificates supporting USPS applications and services. Manage certificate authorities, enrollment services, AD CS monitoring, certificate automation, and Venafi/CyberArk integrations. Advise customers and stakeholders, create documentation and reports, identify automation and AI opportunities, and supervise the PKI team. The role also develops project requirements, recommends operational improvements, and supports certificate lifecycle management across enterprise systems.

Lead enterprise AI security architecture, strategy, governance, and secure-by-design implementation across cloud, hybrid infrastructure, software, and AI/ML environments. Design security patterns for LLM hosting, agentic systems, vector databases, and inference endpoints; translate regulatory requirements into technical standards; review complex architectures; implement AI security guardrails and policy enforcement; advise engineering and product teams; and mentor teams while influencing senior stakeholders.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Operate and improve security across cloud, endpoint, identity, SaaS, and corporate environments. Responsibilities include 24/7 alert triage, incident investigation and containment, threat hunting, phishing and fraud analysis, vulnerability management, evidence collection, and incident reporting. The role also engineers security-tool integrations and SOAR automation, supports PCI DSS and SOC 2 audits, maintains security posture, and communicates risks and remediation guidance to technical and nontechnical stakeholders.

Implements and supports security data ingestion pipelines across applications, cloud services, infrastructure, security tools, and business systems. Develops transformations, parsing, normalization, enrichment, masking, validation, and delivery workflows. Troubleshoots data quality and pipeline issues, documents architectures and data flows, coordinates with client stakeholders, and supports SIEM, detection, investigation, observability, and automation use cases. Requires data engineering experience, scripting, query languages, integration knowledge, and strong client communication.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Lead remediation of MQ security vulnerabilities on mainframe systems for a regulated financial services client. Design and implement Broadcom Top Secret access controls, security patterns, and governance across batch processing, CICS, user permissions, and third-party integrations. Collaborate with mainframe and MQ engineers, document security standards, and complete audit remediation within strict deadlines.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads and develops an engineering team building and operating cloud security controls as software products. Provides technical direction through architecture, design, and code reviews; owns production reliability and continuous improvement; translates security risks into automated, scalable solutions; and coordinates roadmaps and dependencies with product, platform, application, and security teams. The role also drives agile delivery, secure engineering practices, mentoring, and adoption of reusable cloud security patterns across AWS, Azure, and GCP.

Sell CDW Security services and products through full sales lifecycle management: strategic account planning, opportunity qualification, relationship building, partnering with services and OEMs, pipeline forecasting, and closing. Mentor junior team members, engage partners and marketing, maintain Salesforce, represent CDW at industry events, and drive revenue, bookings, and gross profit targets.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Lead complex cloud, identity, supply-chain, and nation-state security investigations. Perform root-cause analysis, threat hunting, blast-radius assessment, attribution, and incident response across Microsoft telemetry. Operationalize intelligence into queries, detections, playbooks, and platform fixes; investigate adversary tradecraft; use AI-assisted tooling; produce executive-ready reports; and mentor peers in advanced investigations, forensics, and reverse engineering.

Leads Windows security assurance across compliance, risk assessment, threat modeling, vulnerability research, and security tooling. Partners with engineering and product teams to translate security requirements into controls, execute scalable risk-based reviews, coordinate cross-team initiatives, and deliver measurable security improvements across the product lifecycle.