Top Cyber Security Jobs in Santa Cruz, CA

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Supports application security and information systems for a large healthcare organization. Analyzes user requirements, develops and implements system solutions, manages moderately complex projects, coordinates project teams, establishes system procedures, and provides guidance to less experienced staff. Collaborates with internal teams, vendors, and stakeholders across multiple facilities. Epic accreditation or certification is required, along with industry experience and a related bachelor's degree.

Develop and formalize methods to validate reported vulnerabilities and generate/verify safe patches for internal NVIDIA targets. Define correctness, regression, and revalidation standards; produce repeatable, auditable processes and evidence. Apply AI-assisted workflows cautiously, perform bounded applied research on vulnerability classes, and document findings for independent security review.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.

Own FAR.AI’s internal IT and security function, including accounts, devices, identity and access management, onboarding, offboarding, office networking, support, endpoint hardening, data protection, governance, and vendor risk. The role will remediate security gaps using threat modeling, automate self-service infrastructure, partner across teams, communicate and manage change, and hire and lead an IT Coordinator.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

The VP and CISO will establish and lead the enterprise information security program, define security strategy and roadmap, oversee security architecture, policies, compliance, risk management, third-party partners, and security operations. The role advises executives and the Board, manages distributed security teams, engages regulators and auditors, and translates cybersecurity risks into strategic business decisions.

Supports federal cybersecurity governance, risk management, Authority to Operate processes, continuous monitoring, vulnerability remediation, incident coordination, and compliance with NIST, FISMA, DHS, and ICE requirements. Maintains security plans, risk registers, POA&M records, and audit artifacts while advising leadership and coordinating with system owners, project managers, vendors, and technical teams. The role provides advisory and validation support rather than system configuration or operational control.

Leads R1’s enterprise security technology strategy and execution, overseeing security architecture, engineering, IAM, cloud security, threat and exposure management, offensive security, AI security, incident preparedness, and security transformation. Partners with executive and cross-functional leaders, manages budgets and investments, develops senior talent, and presents security risk and performance metrics. The role requires modernizing security capabilities across a complex, regulated organization while supporting growth, integrations, acquisitions, and new ventures.

Own and implement application security across the software development lifecycle for multiple product lines. Define security controls, validation gates, standards, and guardrails; conduct architecture reviews; enhance CI/CD security; triage SAST, SCA, and penetration-testing findings; support incident response; maintain FedRAMP and CJIS compliance; and represent security practices in audits and customer engagements.

Leads enterprise information security architecture strategy and design across network, application, data, identity, on-premises, hybrid, and cloud environments. Assesses risks, develops mitigation strategies, integrates advanced security technologies, automates security capabilities, and establishes identity and access management best practices. Influences stakeholders, drives organizational change, mentors technical teams, and ensures security initiatives align with business objectives and regulatory requirements.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Leads information security architecture and program initiatives across IT and business projects. Provides security consulting, develops enterprise data, network, and application protection requirements, conducts threat analysis, vulnerability assessments, penetration testing, and remediation planning. Researches emerging threats and technologies, supports control testing and incident response, and guides security team members. Requires extensive information security leadership, application and network security expertise, secure architecture knowledge, and strong communication skills.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Leads end-to-end cybersecurity execution across Danaher's global Diagnostics operating companies. Responsibilities include managing distributed security teams, cyber risk and vulnerability programs, architecture reviews, assurance and certifications, connected medical device product security, data and AI security, M&A cyber integration, application security, and OT/manufacturing security. The role serves as the senior cybersecurity leader for the platform, influencing executives and operating companies while driving regulatory compliance, continuous improvement, and global security initiatives.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Leads engineering operations, security, DevOps, quality engineering, cloud infrastructure, corporate IT, data integrations, and customer-facing technical escalations. Owns security strategy and compliance, incident management, on-call practices, reliability metrics, CI/CD, infrastructure as code, and production operations. Develops managers and senior engineers, restructures inherited teams, establishes service-level agreements, and drives automation and operational efficiency across the organization.

Designs, implements, maintains, and supports enterprise security infrastructure and tools. Responsibilities include firewall and network changes, security architecture, threat hunting, incident response, vulnerability assessments, system hardening, compliance with federal regulations, cloud security, automation, and technical documentation. The role also provides on-call support and assists with AWS and Azure workload protection, security monitoring, authentication, and security control implementation.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Supports cybersecurity compliance and system authorization activities for assigned information systems. Maintains RMF documentation and eMASS artifacts, reviews access requests, tracks vulnerabilities and incidents, coordinates with stakeholders, supports audits and risk assessments, validates STIG compliance, and assists with contingency planning and recovery testing under Federal and military cybersecurity requirements.