Top Cyber Security Jobs in Tucson, AZ

Audits information systems and technical controls for security, compliance, and architectural standards. Monitors firewalls, IDS/IPS, anti-malware, logs, patching, SIEM tools, and audit scans. Investigates incidents and performs forensics, develops security procedures and standards, recommends enterprise security solutions, and provides risk mitigation guidance and compliance reports. The role collaborates with technical and non-technical teams and requires occasional after-hours and weekend support.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Oversee cybersecurity compliance, authorization, continuous monitoring, and sustainment for classified information systems. Manage RMF and A&A documentation, POA&Ms, DCSA assessments, self-inspections, security reviews, incident investigations, training, and system accountability. Coordinate with government assessors, internal stakeholders, IT teams, security personnel, and program managers while providing technical cybersecurity expertise across complex classified environments.

The Senior ISSO monitors and assesses information system compliance, conducts audits and technical assessments, develops security plans, investigates security violations, and manages corrective actions. The role reviews configuration changes, implements cybersecurity processes and tools, maintains security documentation, and provides security education. It requires collaboration with the ISSM and adherence to NIST, NISPOM, DAAPM, JSIG, RMF, and DoD requirements in a classified environment.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Partner with sales to design and present data security solutions for SLED customers. Lead technical evaluations, gather requirements, build test plans, configure proof-of-concepts, and guide customers to successful outcomes while collaborating across GTM teams.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Lead MSSP-focused sales to recruit, enable, and grow managed security provider partners. Drive joint services, partner-led customer adoption, revenue attainment, forecasting, and cross-team issue resolution while meeting quotas and pipeline targets.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead design and delivery of scalable, secure platform and identity services; build data-platform and security troubleshooting applications; define architecture and standards; mentor senior engineers; partner with product, security, and business teams to enable observability, analytics, automation, and long-term platform strategy.

Supports classified information-system security through compliance monitoring, audits, security-plan development, user security education, violation investigations, corrective-action reporting, and system sustainment. Manages hardware and software changes, accounts, media protection, file transfers, and related controls. Collaborates with security teams, program personnel, and government representatives while ensuring compliance with NISPOM, DAAPM, JSIG, and other cybersecurity requirements. Must maintain an active Secret clearance and obtain IAM Level I certification if not already certified.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead product strategy and execution for security, compliance, and public-sector capabilities in MongoDB Atlas for Government. Translate FedRAMP/DoD/NIST requirements into roadmaps, drive multi-team programs, align senior stakeholders, enable audit readiness, and support market expansion and GTM for regulated industries.