Scottsdale, AZ

Cybersecurity Jobs in Scottsdale, AZ

2 jobs found

Include remote jobs

10d ago

Director of Cybersecurity & Compliance

XpertDox, Inc Scottsdale, AZ

Scottsdale, AZ

10d ago

$120k - $160k/yr Full time Cloud Platforms Identity and Access Management Information Security

Apply Now

Job Description

The Director of Cybersecurity & Compliance leads hands-on security and compliance operations for XpertDox, with responsibility for certification programs, control implementation, and audit readiness. This is an onsite role based in Scottsdale, Arizona.

Key Responsibilities

Implement and maintain security and compliance controls supporting SOC 2 Type 2, ISO 27001, ISO 22301, HIPAA, and HITRUST certification programs.
Own evidence collection and continuous control monitoring, including preparation for and execution of third-party audits.
Own enterprise client security questionnaires, maintain the answer library and trust documentation, and provide technical depth for client security reviews.
Own role-based access control and manage provisioning and deprovisioning, including periodic access reviews across cloud, on-premise, and remote access. Ensure access governance for the global delivery team in India.
Run multi-factor authentication (MFA) and single sign-on (SSO) operations.
Own application and web platform security, including secure development practices, code and dependency scanning, and secrets management.
Drive remediation of security findings with engineering teams.
Run vulnerability management and operate endpoint and cloud security controls.
Coordinate penetration testing and track findings through remediation.

Required Qualifications

Relevant certification such as CISSP, CISM, CISA, GIAC, or Security+.
Hands-on experience implementing and evidencing SOC 2 Type 2 and ISO 27001 controls, ideally using GRC or continuous-monitoring tooling.
6+ years in cybersecurity and compliance, including hands-on ownership of security operations or a compliance program.
Strong identity and access management experience, including RBAC, SSO, MFA, and periodic access reviews across cloud and hybrid environments.
Application and web security experience, including secure development practices, code and dependency scanning, and vulnerability remediation.
Experience in healthcare, health-tech, or another environment involving PHI.
Experience completing enterprise client security questionnaires and supporting audits.
Team leadership or senior individual-contributor experience.

Location and Work Schedule

This role is onsite at the Scottsdale, Arizona headquarters, Monday through Friday. The position is not remote or hybrid. You must relocate to the Scottsdale area before your start date. Travel is minimal.

Compensation and Incentives

Base salary: $120,000 to $160,000 per year, commensurate with experience.
Incentive stock options.
Relocation assistance, reimbursed against receipts.

Benefits

Health insurance
Dental insurance
Vision insurance
Life insurance
401(k) with matching
Unlimited PTO and parental leave
Wellness program
Friday lunch
Snacks
Relocation assistance, reimbursed against receipts

View full job page →

2mo ago

Lead Application Security Engineer

GTN Solutions LLC Scottsdale, AZ

Scottsdale, AZ

2mo ago Closed

$180k - $200k/yr Full time Application Security DevSecOps Engineering

This position is no longer accepting applications (closed Aug 14, 2026).

Job Description

The Lead Application Security Engineer drives secure software development practices and provides hands-on technical leadership across the application portfolio, embedding security throughout the SDLC. This hybrid role is based in Scottsdale, AZ.

Position Overview

In this role, you will guide secure software development practices, provide technical leadership across the application landscape, and ensure security is integrated from design through delivery. Located in Scottsdale, AZ, the position follows a hybrid schedule with four days onsite and one day remote.

Responsibilities

Lead application security assessments, vulnerability management, and remediation efforts across enterprise applications.
Perform and interpret SAST, DAST, and SCA scans using tools such as Veracode, Checkmarx, Fortify, or equivalent platforms.
Identify, prioritize, and drive remediation of security vulnerabilities, providing guidance on secure coding practices.
Design and implement security controls for REST APIs, including authentication, authorization, input validation, and data protection.
Develop security standards, policies, and best practices aligned with OWASP and industry frameworks.
Produce risk assessments, vulnerability reports, and executive-level security metrics.
Participate in architecture and design reviews to proactively identify and mitigate security risks.
Evaluate AI-generated code and leverage AI-assisted security tools to improve security operations and developer productivity.
Support compliance, audit, and regulatory security requirements.
Provide technical leadership for application design, development, and delivery.
Serve as a hands-on contributor, developing and reviewing code across Java, Spring Boot, Angular, and Microservices architectures.
Establish engineering standards that promote high-quality, secure, and maintainable software.
Guide architecture decisions, system integrations, and application modernization initiatives.
Collaborate with stakeholders to translate business requirements into scalable technical solutions.
Mentor and coach development teams on secure coding, software design, and engineering best practices.
Drive continuous improvement in application quality, performance, reliability, and security.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).
5+ years of Application Security experience, including vulnerability assessment and remediation.
7+ years of Software Development experience with Java and Angular/AngularJS technologies.
3+ years of Technical Leadership or Lead Engineering experience.
Strong expertise in Java, Spring Boot, Spring Security, REST APIs, Microservices, JavaScript, TypeScript, Angular, HTML/CSS, SQL, Git, Maven, JUnit, and Mockito.
Hands-on experience with application security tools and methodologies, including SAST, DAST, and SCA.
Deep understanding of OWASP Top 10, secure SDLC practices, and API security.
Experience securing applications using OAuth2, JWT, and modern authentication frameworks.
Strong communication, problem-solving, and stakeholder management skills.

Preferred Qualifications

Experience with GitHub Copilot, AI-assisted security tools, AWS, GCP, Rancher, Jira, Drupal, Burp Suite, Checkmarx, or Fortify.
Security certifications such as CSSLP, GWAPT, CEH, or equivalent.
Experience in Agile development environments and enterprise-scale application delivery.

Technologies

Java
Spring Boot
Angular
Microservices
Veracode
Checkmarx
Fortify
OWASP
REST APIs
OAuth2
JWT
JavaScript
TypeScript
HTML/CSS
SQL
Git
Maven
JUnit
Mockito
Spring Security
AngularJS
SAST
DAST
SCA
GitHub Copilot
AI-assisted security tools
AWS
GCP
Rancher
Jira
Drupal
Burp Suite

Benefits

401(k)
401(k) matching
Dental insurance
Employee assistance program
Health insurance
Life insurance
Vision insurance

Location

Scottsdale, AZ (Hybrid – 4 days onsite, 1 day remote)

Employment Type

Direct Hire

Eligibility

U.S. Citizen or Green Card Holder Only

Compensation

USD 180,000 - 200,000 per year

View full job page →

Cybersecurity Jobs in Scottsdale, AZ

Director of Cybersecurity & Compliance

Lead Application Security Engineer

Get Cybersecurity Jobs in Scottsdale, AZ alerts