Top Cyber Security Jobs in Tucson, AZ

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads and develops Security Consultants while overseeing security submission triage, validation, escalations, and resolution. Provides application security expertise across web, network, cloud, or mobile domains; improves operations through metrics, automation, and process optimization; manages workloads; and partners with customers, leadership, and cross-functional teams. The role requires incident response and vulnerability management experience, technical mentorship, strong communication, and periodic travel for customer-facing and onsite events.

Lead application and infrastructure security for LiteLLM, focusing on Python code reviews, vulnerability remediation, threat modeling, secure development tooling, CI/CD and supply-chain security, cloud and IT controls, incident response, and LLM-specific attack testing. Partner closely with engineers to strengthen authentication, authorization, tenant isolation, secrets management, deployment security, monitoring, vulnerability management, and disclosure processes.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Analyzes exposure risks across databases and data platforms, including permissions, access models, configurations, storage, encryption, and service-to-service access. Investigates attack paths, validates risks using queries and logs, prioritizes issues by exploitability and business impact, and partners with database, cloud, platform, engineering, and cybersecurity teams on remediation and preventative controls.

Oversee internal IT infrastructure, cybersecurity operations, incident response, cloud systems, identity and access management, employee IT support, and technology vendors. Administer Microsoft 365, Azure, networking, firewalls, endpoints, backups, and SSO. Lead security assessments, vendor selection and negotiations, insurance compliance, documentation, infrastructure initiatives, and risk communication to leadership.

The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance.

Hands-on senior security engineer responsible for building secure libraries, templates, guardrails, and developer tooling. Reviews architecture and code for authentication, authorization, and data exposure risks; conducts threat modeling; strengthens secrets, logging, and auditability; integrates security checks into CI/CD; supports vulnerability remediation, secure development practices, and incident reviews.

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Conduct OT and ICS inventories at DoD facilities, assess network architecture and cybersecurity compliance, create topology and dataflow diagrams, oversee field teams, coordinate site visits, and recommend remediation aligned with RMF, DoD standards, and UFC requirements. The role requires extensive domestic and international travel, customer collaboration, project reporting, and technical assessment of critical building systems.

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.

Supports company IT and security operations in a fully remote environment. Responsibilities include helpdesk and endpoint support, authentication and access management, security and compliance automation, disaster recovery, vendor management, system migrations, security tooling, and cross-functional technical project planning. The role also helps maintain audit-ready processes and supports AWS security, identity providers, compliance platforms, scripting, and remote security tools.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

Leads threat actor communications and ransomware negotiations, advising clients, legal counsel, and insurers during digital extortion incidents. Conducts threat intelligence collection and analysis, supports digital forensics and incident response investigations, develops persona operations, and produces technical and executive-facing deliverables. The role also improves intelligence workflows through automation, scripting, and tool integration, contributes to cybercrime research, and participates in an emergency on-call rotation.

Conduct original research into active campaigns, attacker behavior, and email and identity attacks. Synthesize technical findings from diverse sources into threat briefs, analytical reports, customer briefings, webinars, and executive summaries. Present intelligence to customers and prospects, collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing teams, mentor analysts, and use AI tools and automation to improve research and content workflows.