Top Cyber Security Jobs in Tucson, AZ

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Leads enterprise cybersecurity, infrastructure, cloud, technology risk, governance, and operational resilience. Advises executive leadership and Board committees, owns security strategy and risk remediation, directs incident response and security operations, oversees Microsoft cloud infrastructure, resilience planning, regulatory compliance, vendors, budgets, and technology investments. Recruits and develops security and infrastructure teams while ensuring secure, reliable, and cost-effective technology supporting the institution’s strategic goals.

Provides cybersecurity risk, security, governance, and compliance consulting for clients. Leads and supports advisory engagements, communicates technical findings to executive and technical audiences, develops reports and security roadmaps, evaluates business drivers and control frameworks, supports proposals and business development, and helps advance client cybersecurity programs and practice operations.

Supports federal cybersecurity authorization and ongoing authorization activities under the NIST RMF. Reviews ATO packages, SSPs, PIAs, risk assessments, contingency plans, POA&Ms, and security controls. Maintains assessment records in CSAM or similar GRC tools, tracks authorization renewals, supports continuous monitoring, and coordinates audit and compliance responses with technical and non-technical stakeholders.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Leads product security, cloud and infrastructure security, AI security, security architecture, vulnerability management, and edge security. Oversees threat modeling, secure development standards, AWS controls, vulnerability remediation, AI risk governance, customer security reviews, and security engineering delivery. Reports to the CISO, partners with engineering and GRC leaders, and hires and develops the security engineering organization.

Lead enterprise security architecture across AWS cloud, applications, infrastructure, and CI/CD pipelines. Responsibilities include threat modeling, DevSecOps integration, policy-as-code guardrails, IAM, encryption, data protection, container security, compliance, risk assessments, and evaluation of AI security solutions. The role partners with engineering and cloud teams to implement secure architectures and controls aligned with NIST, OWASP, CIS, ISO 27001, FedRAMP, and SOX.

Performs application security assessments, penetration testing, secure code reviews, vulnerability analysis, and remediation validation across web applications, APIs, microservices, and backend systems. Produces detailed security reports, prioritizes risks, recommends mitigations, and communicates findings to technical and executive stakeholders. The role supports secure-by-design practices throughout the SDLC and evaluates modern cloud-native, containerized, and DevSecOps environments.

Designs and implements secure architecture across cloud, on-premises, hybrid, application, infrastructure, and AI-enabled environments. Defines security controls, governance requirements, and enterprise guardrails; supports cloud transformation and emerging AI adoption. Leads architecture reviews, ensures regulatory and policy compliance, and collaborates with architecture, engineering, development, cybersecurity, compliance, risk, and operations teams to identify and mitigate security risks.

Designs and implements automation for federal security authorization and ATO processes. Responsibilities include automating evidence collection, validation, workflow routing, reporting, policy checks, and readiness dashboards; integrating security scans, SBOM/SCA, vulnerability, repository, and system-of-record tools; and maintaining testing, documentation, traceability, and release artifacts. Requires collaboration with security, engineering, platform, data, and government stakeholders.

Assess and improve federal information-system security authorization programs. Review ATO packages, SSPs, privacy assessments, system artifacts, POA&Ms, audit reports, and continuous-monitoring activities under RMF. Coordinate stakeholders, support compliance reporting, track authorization renewals, advise on security and privacy requirements, and develop best practices. The role requires cybersecurity incident response, systems administration, SOC, malware analysis, threat intelligence, and enterprise credential-store experience.

Conducts security and privacy control assessments, vulnerability and penetration testing, ATO artifact reviews, risk analysis, and compliance reporting. Develops assessment plans, test schedules, findings reports, POA&M remediation templates, and executive briefings. Advises system owners, ISSOs, contractors, and stakeholders on corrective actions, acceptable evidence, authorization requirements, and enterprise security improvements while applying NIST, FedRAMP, RMF, FISMA, and related government standards.

Administers enterprise security infrastructure, investigates and responds to security alerts and incidents, performs threat hunting, maintains security asset inventories, documents procedures, and coordinates resolution across internal and external teams. The role requires at least three years of information security experience and hands-on operation of multiple security technologies, including protections, filtering, proxies, antivirus, threat hunting, or log investigation tools.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Secure Windows products and devices through security design and code reviews, penetration testing, vulnerability research, fuzzing, and mitigation development. Build reusable security-review tools, identify vulnerabilities in operating-system features and native applications, investigate attack vectors, and collaborate with Windows engineering teams to implement scalable defenses. The role also involves engaging with external security researchers and communicating the business value of security investments.

Leads product cybersecurity for AI COE products, coordinating security requirements, threat modeling, risk assessments, vulnerability management, SBOM and third-party software reviews, mitigation activities, and lifecycle documentation. Partners with engineering, ML, architecture, quality, regulatory, and security teams to establish repeatable cybersecurity practices and ensure traceable, compliant releases across AI/ML software products.

Lead the AWS cloud security program and manage security engineering teams. Establish AWS security standards, oversee IAM, encryption, logging, monitoring, vulnerability management, Terraform automation, CI/CD security, incident response, and secure architecture reviews. Manage risk registers, compliance workflows, audits, control testing, and FedRAMP, FISMA, NIST, and SA&A readiness. Guide investigations, remediation, runbooks, tabletop exercises, and secure cloud practices while reporting risks and metrics to leadership.

Owns and improves Microsoft security platforms across Azure, Microsoft 365, and hybrid infrastructure. Implements Zero Trust, identity, endpoint, application, cloud, and data security controls; develops automation with PowerShell, Graph, KQL, APIs, Bicep, and Terraform; integrates security telemetry; supports detection and incident response; documents controls for audits and compliance; mentors engineers and partners with platform teams.

Conduct hardware, network, web, mobile, and application security assessments, including threat modeling, code review, penetration testing, firmware and binary analysis, and technical writing. Analyze embedded architectures, debug interfaces, firmware security mechanisms, proprietary protocols, IoT devices, and customer environments. Communicate findings and recommendations to customers while adapting quickly to unfamiliar technologies and delivering quality results on complex projects.

Performs digital forensics and incident response investigations, including host forensics, network traffic analysis, malware triage, log review, and business email compromise analysis. Produces technical reports and recommendations, communicates findings to technical and managerial audiences, supports client engagements, automates DFIR workflows, participates in on-call rotations, and contributes to threat hunting, proactive investigations, and Purple Team activities.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.