Top Senior Cyber Security Jobs in Tampa, FL

Provides pre-sales technical support for Vectra’s cybersecurity platform. Demonstrates products, advises customers and partners, resolves technical obstacles, supports deployments and technology reviews, and develops customer relationships alongside regional sales managers. The role requires expertise in security platforms, networking, cloud security, attacker progression, incident response, and security processes, along with strong communication skills and regional travel.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Engineer and operate SIEM and SOAR platforms supporting SOC and MDR services. Responsibilities include log-source onboarding, parsing, enrichment, detection engineering, playbook automation, alert and dashboard development, end-to-end pipeline troubleshooting, vendor escalations, customer onboarding, ingest-volume management, documentation, and platform incident response. The role serves as the technical escalation point and participates in an after-hours on-call rotation.

Provides technical leadership for Zscaler Zero Trust Browser solutions across the sales lifecycle. Leads executive briefings, technical workshops, proof-of-value evaluations, deployments, and architecture discussions. Develops technical collateral, demos, test plans, and reference architectures while articulating browser security controls such as threat prevention, monitoring, DLP, private application access, and privileged remote access. Partners with sales and engineering to support customer outcomes, product enhancements, and successful technical wins.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Leads security operations and corporate IT for a healthcare technology company handling PHI. Responsibilities include incident response, application and cloud security, IAM, endpoint management, vendor reviews, security policies, compliance support for HIPAA, SOC 2, and HITRUST, and management of three direct reports. The role also builds AI-driven automation tools and workflows for IT and security operations while partnering with executives, engineers, customers, auditors, and compliance leaders.

Supports cybersecurity system planning, design, implementation, operations, reporting, and DoD RMF accreditation. Manages vulnerabilities, reviews network security configurations, monitors system health, responds to cyber incidents and tasking orders, maintains cybersecurity diagrams and change documentation, and trains military personnel. The role also provides expertise in risk management, vulnerability remediation, compliance, and cyber readiness reporting.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.

Lead cloud security engineering across AWS, Azure, and GCP by aligning security strategy with business and regulatory requirements. Identify and remediate security deficiencies, develop baselines and compliance monitoring, automate security capabilities, document controls and runbooks, mentor cybersecurity engineers, and partner with stakeholders to implement secure technologies. The role also supports vulnerability management, SIEM, IAM, container security, infrastructure as code, and enterprise-scale cloud solutions.

Leads application security governance across container platforms, integrating container security and vulnerability management into risk-driven controls. Oversees SCA, SAST, and DAST programs; drives vulnerability prioritization, remediation, and escalation; manages AppSec platforms; establishes secure development standards; and advances automation, metrics, reporting, emerging technologies, and audit-ready controls in partnership with Cloud, Platform, and Application teams.

Leads cybersecurity, AI assurance, DevSecOps, risk management, and compliance across data and software delivery. Translates government security requirements into engineering practices, directs RMF authorization activities, oversees AI and data threat modeling, embeds security into CI/CD pipelines, and manages continuous control monitoring. Coordinates with technical and government stakeholders, guides cybersecurity personnel, tracks remediation, and reports authorization risks and security status for mission-critical capabilities.

Lead enterprise security risk assessments, maintain the risk register, prioritize and track remediation, evaluate vendor and architectural risks, define risk methodologies, map controls to NIST and CMMC requirements, support audits, report risk metrics to leadership, and promote risk ownership across the organization.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Designs, implements, and manages AWS cloud security policies, architecture, and technologies. The role oversees firewalls, DLP, vulnerability scanning, monitoring, logging, IAM, incident response, compliance, and remediation. It provides security guidance for AWS solutions, supports migrations of mission-critical applications, researches new technologies, documents standards, presents to varied audiences, and mentors less experienced engineers. The position requires strong AWS expertise, infrastructure-as-code proficiency, knowledge of regulated healthcare environments, and experience securing highly available cloud and serverless architectures.

Supports cybersecurity risk management and authorization for the VA.gov Platform. Assesses NIST security controls, performs gap and risk analyses, maintains SSPs, POA&Ms, and authorization evidence, and translates deficiencies into engineering remediation. The role supports ATO/cATO readiness, OSCAL automation, threat modeling, secure design reviews, stakeholder coordination, incident response, and continuous synchronization between technical changes and security documentation.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.