San Jose, CA

Cybersecurity Jobs in San Jose, CA

6 jobs found

Include remote jobs

Today

Cybersecurity Analyst / Engineer

Hudson Manpower San Jose, CA

San Jose, CA

Today

Full time Cybersecurity Tools Engineer Identity and Access Management

Apply Now

Job Description

Hudson Manpower is seeking a Cybersecurity Analyst / Engineer to support security operations across enterprise and cloud environments. In this onsite role in San Jose, CA, you will help monitor security signals, assist with incident response, and contribute to vulnerability and access-related security activities. The position is also open to relocation anywhere in the United States.

What you will do

Monitor security alerts and logs using SIEM tools
Assist in identifying, analyzing, and responding to security incidents
Support vulnerability scanning and remediation efforts
Help maintain security policies, procedures, and documentation
Perform basic threat analysis and escalate incidents as required
Assist with access control, IAM, and user security management
Support endpoint, network, and application security initiatives
Work closely with senior security engineers and SOC teams
Participate in security audits and compliance activities

What you bring

Basic understanding of cybersecurity fundamentals including the CIA Triad and common threat vectors
Knowledge of networking concepts such as TCP/IP, DNS, firewalls, and VPNs
Familiarity with SIEM tools, including Splunk, Sentinel, and QRadar (academic or hands-on)
Understanding of Windows and Linux security basics
Knowledge of the OWASP Top 10 and basic application security concepts
Exposure to vulnerability scanning tools such as Nessus, Qualys, and Rapid7 (preferred)
Strong analytical and problem-solving skills
Willingness to learn and work in a fast-paced environment

Tools and technologies

SIEM: Splunk, Sentinel, QRadar
Vulnerability scanning: Nessus, Qualys, Rapid7
Platforms: Windows, Linux
Security and application concepts: OWASP Top 10
Networking: TCP/IP, DNS, firewalls, VPNs
Identity and access: IAM

Location: San Jose, CA (onsite). Open to relocation anywhere in the United States.
Experience: 4+ years.
Job type: Full-time / Contract / Contract-to-Hire.
Work authorization: US Citizens & Green Card Holders ONLY.

View full job page →

2d ago

M&A Security Engineer

Cognizant San Jose, CA

San Jose, CA

2d ago

$105k - $115k/yr Full time Cybersecurity Tools Device Management Endpoint Security

Apply Now

Job Description

Hybrid (San Jose, CA) role where you’ll help integrate security into newly acquired organizations. You’ll lead information security initiatives through the M&A Security Insertion and Integration Team, strengthening endpoint and identity protections while supporting incident and vulnerability response using Microsoft security tooling.

What you’ll do

As part of the M&A Security Insertion and Integration Team, you’ll support security insertion and integration activities to strengthen the security posture of acquired entities. Your work focuses on practical security operations across endpoint and identity controls, along with continuous monitoring and remediation.

Manage endpoint and identity security, including access reviews, authentication support, multifactor authentication enrollment, workstation compliance, security updates, and vulnerability remediation
Monitor and remediate security incidents and workstation vulnerabilities using Microsoft 365 Defender, Microsoft Defender for Endpoint, and Microsoft Sentinel
Administer endpoint security and management technologies, including Microsoft Intune, Mosyle, JAMF, and related tools
Review user and administrative access periodically and remove permissions that are no longer necessary
Examine simulated and realistic phishing emails and implement protections against malicious domains
Assist with the implementation of system security configurations
Monitor software currency across operating systems, browsers, and other workstation applications
Assess security controls and configurations, recommend infrastructure improvements, develop progress reports, and communicate security concerns and events to the M&A Security Insertion and Integration Team lead and acquired entity security leadership

What you bring

3 to 5 years of progressive information security experience across areas such as application security, infrastructure security, identity and access management, vulnerability management, cyber threat management, security architecture, or information technology risk management
A bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent professional experience
Experience implementing and maintaining information technology and security controls across complex networks, systems, applications, and infrastructure
Proficiency in endpoint security and management, identity management, multifactor authentication, and security information and event management technologies
Experience monitoring, managing, and tuning core security controls
Knowledge of information risk management frameworks, regulations, data-protection guidelines, security standards, and industry best practices
Ability to understand, build, and document complex information security designs and apply confidentiality, integrity, and availability principles
Ability to incorporate security designs and technologies into new and legacy environments, including environments undergoing technology transitions or upgrades
Broad knowledge of IT systems, networking and security components, applications, operating systems, and risk-mitigation controls
Technical aptitude and critical-thinking skills to identify security risks, resolve complex problems, and recommend appropriate controls
Ability to communicate technical risks clearly to IT business leaders and senior management
Strong written and verbal communication, organization, time-management, and multitasking skills
Experience working with global teams across time zones, cultures, and languages
Proficiency with word-processing, spreadsheet, and presentation software
A strong sense of ownership aligned with Cognizant values: Work as One, Dare to Innovate, Raise the Bar, Do the Right Thing, Own It
Preferred/Required credentials: CISSP, CISM, or another relevant industry-recognized information security certification
Graduate degree in Computer Science, Engineering, information security, or a related field
Experience with Microsoft Intune, Mosyle, JAMF, Microsoft Defender for Endpoint, Microsoft 365 Defender, or Microsoft Sentinel
Knowledge of controls such as web application firewalls, intrusion detection and prevention systems, and application allowlisting
Work model: East Coast preferred

Tools and technologies

Microsoft 365 Defender
Microsoft Defender for Endpoint
Microsoft Sentinel
Microsoft Intune
Mosyle
JAMF

Compensation and schedule

Salary: USD 105,000 to 115,000 per year (depending on experience and qualifications)
Incentive: eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to plan terms
Application deadline: Applications accepted until October 21, 2026
Hybrid requirement: 3 days per week in the Cognizant office

Benefits

Medical/Dental/Vision/Life Insurance
Paid holidays plus Paid Time Off
401(k) plan and contributions
Long-term/Short-term Disability
Paid Parental Leave
Employee Stock Purchase Plan

View full job page →

6d ago

Enterprise Principal Technology Analyst (Cybersecurity Operations Manager)

San Jose Police Department San Jose, CA

San Jose, CA

6d ago

$163k - $199k/yr Full time Manager Senior Cybersecurity Tools

Apply Now

Job Description

San Jose Police Department seeks an Enterprise Principal Technology Analyst (Cybersecurity Operations Manager) for an onsite, hands-on leadership role across enterprise cybersecurity operations.

Responsibilities

Provide hands-on technical leadership, mentoring, prioritization, and quality assurance while coordinating with infrastructure, network, endpoint, cloud, application, identity, and service desk teams to reduce enterprise cybersecurity risk.
Collect, analyze, and operationalize cyber-threat intelligence to identify emerging threats, vulnerabilities, attacker techniques, and indicators of compromise.
Convert intelligence into actionable defenses, including detections, hunting queries, blocking rules, advisories, and risk-based recommendations supporting incident response, vulnerability management, security engineering, and leadership reporting.
Lead cybersecurity emergency response for suspected or confirmed incidents: triage, containment, eradication, recovery, root-cause analysis, and post-incident improvement.
Provide technical direction during high-pressure events involving phishing, malware, credential compromise, unauthorized access, data exposure, endpoint compromise, cloud compromise, network intrusion, or advanced threats.
Build and maintain security operations standards, including process flows, incident response playbooks, escalation procedures, evidence-handling practices, and clear incident documentation.
Lead cybersecurity projects and operational initiatives by defining scope, milestones, deliverables, dependencies, risks, and success criteria; coordinate cross-functional teams, vendors, and stakeholders; track progress, resolve blockers, communicate status, and ensure measurable security/operational outcomes.
Design, implement, tune, and continuously improve enterprise security controls across network, endpoint, cloud, identity, email, data protection, remote access, logging, monitoring, and automation environments.
Ensure security tools are properly configured, integrated, monitored, and generating actionable outcomes; partner with technical teams on proposed changes, identify risks, recommend compensating controls, and embed security into enterprise solutions.
Oversee detection engineering across SIEM, EDR/XDR, network, identity, cloud, and email; lead threat hunting for suspicious behavior, control gaps, misconfigurations, compromised accounts, lateral movement, persistence, and other attacker indicators; improve coverage, reduce false positives, and measure operational effectiveness.
Independently lead cybersecurity risk reviews of complex technology implementations, including vendor and out-of-the-box solutions, cloud platforms, SaaS applications, infrastructure services, endpoint tools, network technologies, IoT, and desktop environments; evaluate default configurations, architecture decisions, access models, logging/data protection, integration points, and operational impacts; identify gaps and risk exposure; develop practical risk-reduction recommendations.
Support audit, compliance, and risk-management activities with technical evidence, control validation, and remediation support.

Requirements

Bachelor’s Degree from an accredited college or university in a relevant field AND five (5) years of increasingly responsible professional-level experience in computer applications, systems, networks, or telecommunications work.
At least two (2) years must include responsibility in development, implementation, and maintenance of electronic business systems/solutions or application development and/or support.
Additional directly related experience may substitute for education on a year-for-year basis up to two (2) years.
A Master’s Degree in a relevant field may substitute for one year of the required two (2) years of experience in electronic business systems/solutions or application development/support.

Technologies / Frameworks

NIST Cybersecurity Framework, NIST 800-53, CIS Controls, MITRE ATT&CK, CJIS, PCI DSS, ISO 27001
SIEM, EDR/XDR
Active Directory, Entra ID/Azure AD, MFA, privileged access, conditional access, zero trust
VPN, DNS, web filtering

Required Technical Strength (Must Demonstrate)

Network security: firewalls, segmentation, routing, VPN, DNS, web filtering, secure remote access, network traffic analysis.
Endpoint security: EDR/XDR, malware analysis concepts, host-based investigation, endpoint hardening, containment strategies.
Identity security: Active Directory, Entra ID/Azure AD, MFA, privileged access, conditional access, account compromise investigation, identity-based attack paths.
Cloud security: cloud logging, identity integration, access control, workload protection, SaaS security, cloud misconfiguration risk.
Security monitoring: SIEM use cases, detection logic, log source onboarding, alert tuning, threat hunting, incident investigation.
Incident response: triage, containment, eradication, recovery, root-cause analysis, evidence preservation, after-action reporting.
Threat intelligence: attacker behavior analysis, indicators of compromise, tactics, techniques, procedures, and operationalizing intelligence into controls.
Security architecture: defense-in-depth, zero trust principles, least privilege, secure design reviews, compensating controls, and enterprise risk reduction.

Salary

USD 163,035.60 – 198,525.60 per year
Approximate 5% ongoing non-pensionable compensation pay in addition to starting salary for the EPTA classification

Desirable Competencies

Experience in public sector, critical infrastructure, large enterprise, healthcare, financial services, or other highly regulated environments.
Experience leading complex cybersecurity projects or operational initiatives involving cross-functional technical teams, vendors, and stakeholders (project planning, risk/dependency management, progress tracking, issue resolution, executive communication, delivery of measurable improvements).
Ability to evaluate, administer, tune, and integrate security tools to improve visibility, control effectiveness, and response capabilities.
Experience building or maturing a cybersecurity operations function.
Experience with frameworks and standards including NIST Cybersecurity Framework, NIST 800-53, CIS Controls, MITRE ATT&CK, CJIS, PCI DSS, and/or ISO 27001.
Proven ability to independently evaluate complex technology implementations for cybersecurity risk across vendor/out-of-the-box, cloud, SaaS, network, endpoint, server, IoT, and desktop solutions, including architecture, identity/access controls, logging/monitoring, data protection, exposure, configuration baselines, integration risks, and operational dependencies, to identify gaps and develop risk-reduction outcomes.

Additional Workforce Expectations

Leadership skills: leads by example with high ethical standards; remains visible and approachable; promotes cooperative work environment; provides motivational support and direction.
Analytical thinking, problem solving, communication, multi-tasking, reliability, teamwork/interpersonal skills, and project management capabilities.
Building trust: communicates shared interests/goals, demonstrates honesty, keeps commitments, and behaves appropriately.
Vision/strategic thinking: supports alignment with organizational vision/values and translates vision to action.

Additional Information

Federal law requires verification of eligibility to work in the country.
The City of San Jose will NOT sponsor, represent, or sign documents related to visa applications/transfers for H1-B or other visa types requiring an employer application.
Applications are not accepted through CalOpps or other third-party job boards.
This recruitment may be used to fill multiple positions in this or other divisions/departments.
After submitting an online application, candidates receive an automatic confirmation email; if not received, email CityCareers@sanjoseca.gov.
Candidates are encouraged to use AI responsibly as support, but application responses and interview answers must reflect personal knowledge, skills, and experiences.

View full job page →

1mo ago

Cyber Security Engineer

TechniPower, Inc. San Jose, CA

San Jose, CA

1mo ago Closed

$150+/hr Contract Cybersecurity Tools Engineer Firewall

This position is no longer accepting applications (closed Aug 25, 2026).

Job Description

TechniPower, Inc. offers a six-month, onsite Senior Cybersecurity Engineer role in the utilities sector in San Jose, CA. The position provides a competitive compensation of USD 150 per hour and requires US citizenship. This onsite contract targets experienced professionals to design and enhance security controls across internal and external environments, including SaaS integrations and third-party risk.

Responsibilities

Design, implement, and enhance security controls across internal and external environments, including SaaS integrations and third-party risk management.

Requirements

5+ years of cybersecurity experience
Experience with Palo Alto Networks firewalls and VPN
Knowledge of Zero Trust networking concepts
Experience with identity-based and role-based access controls

View full job page →

2mo ago

Senior Cybersecurity GRC Analyst

The Norland Group San Jose, CA

San Jose, CA

2mo ago Closed

$85 - $95/hr Full time Senior Cmmc Controls Enterprise Risk

This position is no longer accepting applications (closed Jul 30, 2026).

Job Description

The Norland Group seeks a Senior Cybersecurity GRC Analyst to lead governance, risk, and compliance initiatives across the organization. The role encompasses audits, risk assessments, identity and access governance, third-party risk management, and policy and process engineering. This on-site position is based in San Jose, CA.

Responsibilities

Develop and manage the overarching Compliance Program to align with industry standards such as SOC 2, NIST 800-171, ISO 27001, and NIST 800-53.
Collaborate with IT Security Operations to ensure security controls are properly designed, implemented, and operating effectively.
Lead the end to end cybersecurity audit process, including preparation of response documentation and execution of remediation plans.
Produce and distribute high level information security reports and compliance dashboards for key stakeholders.
Direct comprehensive cybersecurity risk assessments across the enterprise, identifying vulnerabilities and recommending prioritized mitigations.
Develop and maintain the Corporate Risk Register, tracking risk acceptance, treatment plans, and residual risk.
Perform quantitative and qualitative risk analysis to inform executive decision making and resource allocation.
Oversee and collaborate with stakeholders to execute quarterly user access reviews and monthly user activity monitoring.
Ensure timely completion, technical accuracy, and rigorous documentation of all access reviews to meet audit requirements.
Analyze access trends and over privileged accounts to recommend Least Privilege improvements and RBAC refinements.
Own and maintain Third-Party Risk Management evaluation practices, ensuring vendors are vetted against corporate security standards to mitigate supply chain risk.
Author, maintain, and update information security policies and Standard Operating Procedures to align with evolving industry standards.
Manage and govern Change Management processes to maintain security stability and compliance during technical transitions.

Requirements

Experience: Minimum 10 years of experience managing cybersecurity compliance programs from inception to completion.
Technical Expertise: Hands on experience with SOC 2 and a deep understanding of IT security controls.
Framework Proficiency: Expert knowledge of ISO 27001, CIS v8.1, NIST 800-53, NIST 800-171, CMMC, and FedRAMP.
Analytical Skills: Strong analytical thinking with the ability to prioritize complex tasks in a fast paced, evolving environment.
Communication: Excellent interpersonal, verbal, and written communication skills, able to work effectively as part of a team or independently.
Security Knowledge: Solid foundation in IT security concepts with emphasis on Security Risk Assessment.
Certifications: CISSP, CISM, or CISA preferred.
Preferred Qualifications: Exceptional ability to tailor complex technical communication for both technical audiences and non technical executive leadership.

Technologies

SOC 2
NIST 800-171
ISO 27001
NIST 800-53
CIS v8.1
CMMC
FedRAMP

Location

Onsite at our San Jose office headquaters, five days a week.

View full job page →

2mo ago

Senior Cybersecurity Program Manager

The Norland Group San Jose, CA

San Jose, CA

2mo ago Closed

$85 - $95/hr Full time Manager Senior Cmmc Controls

This position is no longer accepting applications (closed Jul 27, 2026).

Job Description

The Norland Group seeks a Senior Cybersecurity Program Manager to lead the development and ongoing maintenance of IT security policies, steer enterprise cybersecurity programs, governance, risk and compliance efforts, and collaborate with cross functional teams to mature the organization’s security posture.

Compensation

USD 85 - 95 per hourly

Location

San Jose, CA onsite (five days per week)

Responsibilities

Develop and document comprehensive IT security policies, standards, and procedures from the ground up
Collaborate with IT and Security teams to identify policy gaps and requirements
Draft and maintain enterprise wide security policies covering access control, data protection, incident response, and other critical areas
Ensure all policies and procedures align with regulatory requirements, compliance frameworks, and industry best practices
Regularly review and update existing policies to reflect organizational changes and evolving threats
Establish clear, enforceable standards that are communicated and understood across technical and non technical teams
Document procedures with step by step guidelines for consistent implementation across departments
Conduct periodic audits of policy compliance and recommend updates based on findings and lessons learned
Facilitate policy review cycles and stakeholder approvals
Develop, establish, and maintain enterprise wide cybersecurity programs aligned with business objectives and best practices
Create and execute multi year cybersecurity roadmaps and strategic plans
Define program objectives, metrics, and key performance indicators to measure effectiveness
Identify emerging threats and trends and adjust program strategies accordingly
Manage program budgets and allocate resources to optimize utilization
Lead and collaborate with IT, Security Operations, Risk Management, Compliance, and business unit leaders
Establish governance frameworks and decision making processes for cybersecurity initiatives
Coordinate with external stakeholders, vendors, and third party service providers
Facilitate communication between technical and non technical teams to ensure program understanding
Promote cybersecurity culture and awareness across the organization
Ensure compliance with applicable regulatory requirements such as CCPA, CPRA, SOC 2, and CMMC
Conduct and oversee risk assessments, vulnerability assessments, and penetration testing programs
Develop and maintain security policies, procedures, and standards
Monitor and report on security posture and compliance status to executive leadership and the Board
Lead incident response planning and coordination during security incidents
Oversee design, deployment, and optimization of security tools, technologies, and controls
Manage security architecture reviews and technology evaluations
Drive continuous improvement initiatives within the cybersecurity program
Document program processes, procedures, and operational guidelines
Ensure effective program documentation and knowledge management
Provide executive leadership with regular updates on program status, risks, and achievements
Develop and present compliance metrics, dashboards, and reports to senior management
Communicate compliance requirements and implications to business stakeholders
Escalate critical issues and risks appropriately

Requirements

10+ years of experience in cybersecurity, including at least 5 years in a program management or leadership role
Proven track record writing, developing, and maintaining IT security policies, standards, and procedures from scratch
Demonstrated ability to collaborate with IT and security teams to create comprehensive policy documentation
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field
Deep knowledge of cybersecurity frameworks and standards (NIST CSF, ISO 27001, CIS, SOC 2, CMMC Controls)
Experience with security governance and policy development
Expertise in risk management and compliance requirements across regulated industries
Strong understanding of security controls, threat modeling, and vulnerability management
Proficiency in program management methodologies (Agile, Waterfall)
PMP or a similar project management certification
Excellent project management skills with the ability to manage multiple complex initiatives simultaneously

Technologies

NIST CSF
ISO 27001
CIS
SOC 2
CMMC Controls

Job Details

Job Posted Date: 6/22/2026

View full job page →

Cybersecurity Jobs in San Jose, CA

Cybersecurity Analyst / Engineer

M&A Security Engineer

Enterprise Principal Technology Analyst (Cybersecurity Operations Manager)

Cyber Security Engineer

Senior Cybersecurity GRC Analyst

Senior Cybersecurity Program Manager

Get Cybersecurity Jobs in San Jose, CA alerts