Santa Clara, CA

Cybersecurity Jobs in Santa Clara, CA

2 jobs found

Include remote jobs

Today

Sr. Cybersecurity AI Compliance Analyst

Marvell Santa Clara, CA

Santa Clara, CA

Today

$139k - $208k/yr Full time Adversarial Ai Security Ai Compliance Ai Security

Apply Now

Job Description

Marvell is looking for a Sr. Cybersecurity AI Compliance Analyst to help drive security and compliance for the organization’s use of AI technologies. In this onsite role in Santa Clara, CA, you will connect emerging AI security requirements to practical internal policies, support audit readiness, and help assess the security posture of AI models, pipelines, and integrations.

What you’ll do

Monitor and interpret emerging AI security regulations and standards, including EU AI Act security provisions, NIST AI Risk Management Framework, NIST Cybersecurity Framework, ISO/IEC 42001, and ISO/IEC 27001, then translate requirements into actionable internal policies.
Perform security reviews of AI plug-ins, agents, MCP connectors, and third-party AI APIs, including semiconductor EDA/AI design tools, before they are integrated into Marvell’s environment.
Conduct security risk assessments and audits of AI models, pipelines, and infrastructure to identify vulnerabilities and compliance gaps.
Plan and execute cyber security assessments and testing activities, including creating testing procedures, executing audits, documenting results, aligning findings with cross-functional stakeholders, developing risk management actions, performing timely updates, and communicating summary testing reports.
Evaluate AI systems for exposure to adversarial threats such as prompt injection, model poisoning, data exfiltration, model extraction/theft, and evasion attacks.
Partner with security engineering, MLOps, data science, legal, and product teams to embed security and compliance checkpoints throughout the AI development lifecycle.
Maintain documentation for AI security governance, including threat models, risk classifications, security impact assessments, and audit trails.
Review access controls, data handling practices, and third-party or vendor AI tools to ensure compliance with data protection and security requirements.
Support internal and external security audits, regulatory inquiries, penetration test follow-up, and certification processes such as SOC 2 and ISO 27001.
Develop and deliver training materials covering AI-specific security risks and compliance obligations.
Track remediation efforts for findings and compliance issues, then report remediation status and risk posture to leadership.
Stay current on the threat landscape, industry best practices, enforcement trends, and incident case studies related to AI security.

Qualifications

Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or equivalent experience.
5 to 8 years of experience in cybersecurity, IT risk management, security compliance, or a related field.
Familiarity with AI/ML concepts, including how models are developed, trained, deployed, and integrated into production systems.
Strong understanding of security frameworks and standards, including NIST CSF, ISO/IEC 27001, SOC 2, NIST AI Risk Management Framework, ISO/IEC 42001, and ISO/IEC 27017, plus emerging AI-specific security regulations.
Working knowledge of common AI/ML security threats (adversarial attacks, data poisoning, model extraction, prompt injection) and general security domains such as identity and access management, network security, and data protection.
Experience developing and maintaining a risk and controls matrix for security controls, including those focused on AI.
Experience developing testing procedures, executing audits, documenting outcomes, aligning findings with cross-functional stakeholders, developing risk management actions, performing timely updates, and communicating summary testing reports.
Excellent written and verbal communication skills, including the ability to explain technical security and regulatory concepts to varied audiences.
Strong analytical skills and attention to detail.

Relevant technologies and standards

EU AI Act, NIST AI Risk Management Framework, NIST Cybersecurity Framework, ISO/IEC 42001, ISO/IEC 27001, ISO/IEC 27017, NIST CSF, SOC 2
MCP connectors, ChatGPT, Copilot
Export Administration Regulations (EAR)

Compensation and benefits

Expected base pay range: USD 138,840 - 208,000 per annum.

Eligible to participate in Marvell’s bonus and equity plans, including a new hire equity grant and annual equity refreshers.
Employee stock purchase plan with a 2-year look back.
Family support programs.
Robust mental health resources.
Recognition and service awards.

Interview integrity

Candidates are not permitted to use AI tools during interviews, including transcription apps, real-time answer generators like ChatGPT or Copilot, or automated note-taking bots.
These tools must not be used to record, assist with, or enhance responses in any way.
Using AI tools without prior instruction from the interviewer will result in disqualification from the hiring process.

Export control notice

This position may require access to technology and/or software subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR).
Applicants must be eligible to access export-controlled information as defined under applicable law.
Marvell may be required to obtain export licensing approval from the U.S. Department of Commerce and/or the U.S. Department of State.
Except for U.S. citizens, lawful permanent residents, or protected individuals defined by 8 U.S.C. 1324b(a)(3), applicants may be subject to an export license review process prior to employment.

Marvell also highlights benefits offerings built around four key pillars: financial well-being, family support, mental and physical health, and recognition.

View full job page →

2mo ago

Senior Product Security Engineer

Hologic Santa Clara, CA 🇺🇸 Remote

Santa Clara, CA

2mo ago Closed

$107k - $172k/yr Full time Senior Application Security Cloud Platforms

This position is no longer accepting applications (closed Aug 23, 2026).

Job Description

The Senior Product Security Engineer role focuses on embedding Secure by Design across product teams, conducting security assessments and risk management, and supporting DevSecOps for healthcare solutions. The position may be remote or based in Newark, DE; Santa Clara, CA; Marlborough, MA, or other locations.

Responsibilities

Drive a Secure by Design culture across product teams, ensuring alignment with security standards and best practices.
Contribute to the ongoing enhancement of Secure by Design policies and procedures, aligning products with current security requirements and regulatory standards.
Assist in creating and maintaining security design documentation and architecture diagrams.
Perform and document continuous security assessments, including Threat Modeling, for Hologic products and remote connectivity solutions, providing guidance to product teams as needed.
Carry out Security Risk Management activities to address identified vulnerabilities and security design issues.
Develop and maintain security controls and requirements while actively participating in design discussions and activities.
Support product development efforts, including Security Code Reviews, to ensure adherence to Secure by Design principles and appropriate security controls.
Assist in automating security testing and reporting, manage security tooling, and secure cloud environments as part of DevSecOps.
Oversee ongoing security monitoring of in-market products and connected health solutions, and participate in incident response investigations as necessary.
Educate sales and service teams on securing our products, connected health solutions, and their operating environments.

Requirements

Master’s or Bachelor’s degree in Computer Science, Management Information Science, Engineering, or a related technical field.
4+ years of relevant experience in:
- Computer and network security
- Cloud based platform experience
- Computer networking administration
- Microsoft Windows and Linux operating systems
- Software application testing and maintenance
- Cybersecurity Risk Assessment
Knowledge of the secure development lifecycle and experience in a development environment.
Expertise in application secure design and code reviews, with an understanding of Secure Coding standards and common vulnerabilities (OWASP Top 10, CWEs).
Proficiency in scripting and simple application development (PowerShell, Python, C#, C++).
Experience with industry standard security tools (SAST, SCA, DAST, vulnerability scanning).
Leadership in Threat Modeling, with STRIDE method preferred.
Penetration testing experience (direct or supportive).
Ability to secure development and cloud environments (Azure preferred) and the DevSecOps (CI/CD) pipeline.
Strong verbal and written communication skills.

Technologies

PowerShell, Python, C#, C++, Windows, Linux, SAST, SCA, DAST, vulnerability scanning, Azure, STRIDE, Threat Modeling, OWASP Top 10, CWEs, CI/CD

Benefits

Competitive salary and annual bonus scheme
Comprehensive training and continued development
Equal Opportunity Employer

Ideal Candidate Profile

Industry Awareness: Maintains vigilance on security threats affecting healthcare products and manages risk in line with quality procedures.
Troubleshooting Expertise: Effectively diagnoses and resolves issues in networked, computer-based products.
Travel Flexibility: Availability for travel to Hologic offices, training sessions, and customer sites.
Autonomous Alignment: Works with some supervision while aligning with strategic priorities and corporate goals.
Cloud Knowledge: Strong grasp of cloud design concepts and familiarity with security analysis and protection tools.

Preferred Qualifications

Medical Systems Knowledge: Experience with medical information system administration and familiarity with medical device security standards and regulations, including FDA Premarket Cybersecurity Guidance, IEC 81001-5-1, AAMI TIR57, AAMI SW96.
Regulated Industry Experience: Background in software development and verification within a regulated sector.
Technical Support Experience: Experience providing technical support to field service teams and end users.
Certifications: Security-related credentials (for example CISSP) are strongly preferred, along with Windows, Linux, and Cisco networking certifications.

View full job page →

Cybersecurity Jobs in Santa Clara, CA

Sr. Cybersecurity AI Compliance Analyst

Senior Product Security Engineer

Get Cybersecurity Jobs in Santa Clara, CA alerts