Top Senior Cyber Security Jobs in Tampa, FL

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Investigates wire fraud, business email compromises, network security incidents, and other high-level financial crime matters. The role manages cases, analyzes evidence, conducts interviews, coordinates wire recalls and loss recovery, prepares investigative reports, works with law enforcement, and presents findings. It requires strong banking fraud expertise, forensic and eDiscovery knowledge, court testimony experience, sound judgment, and familiarity with cryptocurrency-related risks and AI-enabled investigative workflows.

Leads and develops a cloud security engineering team while overseeing security operations across AWS, Azure, and GCP. Responsibilities include managing CSPM, CNAPP, vulnerability management, cloud identity, compliance monitoring, security baselines, remediation programs, automation, governance, metrics, audits, and incident response. The role partners with technical and business stakeholders to reduce enterprise cloud risk and improve security service delivery.

Leads and mentors cloud security engineers while developing and executing security strategy across AWS, Azure, and GCP. Oversees cloud security baselines, monitoring, compliance, vulnerability management, IAM, container and Kubernetes security, and enterprise-scale security solutions. Identifies service gaps, drives automation and AI/ML improvements, documents policies and operational runbooks, and partners with stakeholders to implement new security technologies in production.

Develop and drive enterprise cybersecurity strategy, multi-year roadmaps, portfolio governance, and risk-reduction initiatives. Manage cybersecurity budgets across operational, capital, and professional-services spending. Prepare bi-monthly executive and board reporting that synthesizes cyber posture, threats, vulnerabilities, control gaps, project progress, and remediation risks. Partner with cybersecurity leadership, Finance, technology, risk, and business stakeholders to optimize investments and support risk-informed decision-making.

Manages secrets management and infrastructure security technologies, resolves complex security issues, leads implementations, supports architecture and change control, coordinates incident reporting, and performs advanced configuration, capacity, maintenance, escalation, and root-cause analysis activities. Provides technical guidance on risk assessments, security procedures, vendor services, IAM, cloud security, certificates, PKI, Kubernetes, DevSecOps, and security monitoring.

Support SOF PEO-TIS by performing vulnerability scans, STIG remediation, and RMF/DIACAP accreditation. Produce IA packages using XACTA/eMASS, advise engineering teams on IA, apply DoD IA policies, and assist testing, integration, and authorization processes to field secure tactical systems.

Advise business leaders on resilience and business continuity, design and implement continuity strategies and incident response plans, lead exercises and recovery during disruptions, modernize program using technology (including generative AI), collaborate enterprise-wide, and serve as subject matter expert for business continuity for designated areas.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Own data security posture management, classification, labeling, and protection initiatives across traditional data stores and AI/ML environments. Implement DSPM tools, define scanning patterns, integrate classification results with security systems, monitor risks, report security metrics, and advise on governance and data security strategies. Partner with privacy, IAM, engineering, legal, governance, analytics, and AI teams to enforce regulatory, privacy, retention, and data usage controls, including generative AI guardrails.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Detects, investigates, and responds to cybersecurity events as part of the CSIRT. Responsibilities include analyzing network and operating-system logs, interpreting forensic data, performing eDiscovery, leading investigations and projects, serving as incident commander for minor incidents, mentoring junior staff, improving processes, and participating in on-call coverage and occasional travel.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Lead design, implementation, and oversight of enterprise security controls. Define security policies, manage access and monitoring, recommend security products, perform compliance audits (SOX/PCI), mentor engineers, run incident response, and support intrusion detection, encryption, firewalls, and vulnerability management across projects.

Lead RMF activities and ATO processes to secure cloud, network, and containerized environments. Conduct security impact analyses, manage GRC/RMF packages, track POA&Ms, implement controls, monitor compliance, respond to incidents, and collaborate with engineering teams to embed security across systems lifecycle.