Top Cyber Security Jobs in Tucson, AZ

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Leads security operations and engineering strategy, manages a 2–3-person team, and remains hands-on with WAF, DLP, AI security, automation, vulnerability management, incident response, cloud security, purple teaming, SIEM, and detection engineering. Partners with executives and cross-functional leaders, oversees vendors and tooling, reports risk metrics, and develops team capabilities and security roadmaps.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead and grow a team of Security and IT technical program managers and own the cyber security and IT program portfolio. Drive prioritization, resourcing, and delivery of cross-functional security initiatives, translate strategy into roadmaps, manage risks and dependencies, and standardize playbooks and metrics.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.

Lead and perform HITRUST Gap, Readiness, and Validated Assessments. Define scope, test controls, validate evidence in MyCSF, produce readiness and validated reports, advise clients on remediation, and ensure compliance with HITRUST methodology and related frameworks.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Leads global security strategy across manufacturing plant OT/ICS, connected medical products, and application security. Oversees FDA medical device cybersecurity compliance, OT/ICS frameworks, DevSecOps, CI/CD security, and application security tooling. Builds and develops global security teams, partners with executives and operating companies, maintains enterprise risk frameworks, reports security posture to leadership and committees, and travels internationally to manufacturing, R&D, and plant locations.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

The fellowship provides military spouses and separating service members with cybersecurity training and hands-on experience through projects and vendor training, aimed at enhancing their security skills.

Customer-facing role to drive security transformation on Azure and Microsoft 365. Architect, design, and implement cloud security, identity, threat protection, and information protection solutions; run design sessions, perform hands-on evaluations (Defender, Sentinel, AAD, Intune), troubleshoot implementations, and influence product and engineering teams to improve customer security posture and adoption.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.

Conduct internal and external network, web application, API, mobile, cloud, social engineering, and wireless penetration tests. Advise clients on security and compliance, simulate cyberattacks, generate assessment reports, support engagement scoping and remediation, improve testing methodologies, manage escalations, and mentor junior staff while meeting delivery and utilization targets.

Defines enterprise technology strategy, architecture standards, security controls, and multi-year roadmaps across AWS, Azure, GCP, GitHub Enterprise, AI platforms, and infrastructure. Leads cloud governance, migration, modernization, FinOps, developer platform management, AI governance, and security architecture initiatives. Advises executives, ensures compliance and risk alignment, drives operational excellence, and mentors architects and engineers.

Administers Microsoft Defender services for a DoD customer, monitoring endpoint security, EDR, NGAV, attack-surface reduction, cloud protection, SIEM integrations, cross-platform controls, WDAC, DLP, compliance reporting, and security dashboards. Escalates anomalies, maintains policies and procedures, investigates alerts, and supports Windows, Linux, and mobile-device protection. Requires cybersecurity experience, Microsoft security expertise, DoD compliance knowledge, Security+ certification, and an active Secret clearance.