Top Cybersecurity Jobs in Los Angeles, CA

Leads threat-informed security programs by translating offensive security, threat intelligence, and incident response insights into risk-reduction initiatives. Partners with engineering teams to implement security controls, drive secure platform adoption, establish performance metrics, communicate outcomes, and automate inefficient processes. Requires broad information security expertise, complex program management experience, and familiarity with cloud infrastructure and BeyondCorp.

Lead security risk and compliance programs by translating objectives into engineered controls, acceptance criteria, monitoring, and evidence readiness. Evaluate infrastructure and system changes, advise on compliance impacts, coordinate remediation of control deficiencies, and align requirements across NIS2, CCPA, ISO 27001, SOC 2, ISO 42001, and other frameworks. Partner with engineering and business teams to deliver measurable security outcomes.

Lead Snap’s Production Security team and secure infrastructure across AWS and Google Cloud. Set technical strategy for perimeter security, workload identity, secrets management, CI/CD, and cloud controls; oversee service reliability, incident response, vulnerability remediation, security reviews, and risk acceptance. Partner with engineering teams to embed security by default, guide responsible AI adoption, recruit and develop engineers, and drive company-wide security platform adoption.

Designs and implements security controls for backend services and multi-cloud infrastructure. Conducts security reviews, remediates vulnerabilities and misconfigurations, secures CI/CD pipelines, and embeds secure design practices across engineering teams. The role also supports responsible AI and LLM adoption, mentors junior engineers, and champions security and privacy.

Lead offensive security engagements across corporate, cloud, application, and mobile environments, including red, purple, and orange team exercises. Develop covert engagement infrastructure, custom implants, payloads, and exploits; model threats and killchains; assess detection coverage; produce remediation-focused reports; support incident response; and advise security teams on vulnerabilities, threat intelligence, and defensive improvements.

Designs and hardens on-device security for Specs, including access control, secure IPC, sandboxing, trusted execution, cryptography, and platform protection. Develops privacy and security controls for on-device AI, protects sensitive data and model integrity, and secures OS, firmware, applications, services, sensors, and cloud-connected surfaces. Improves fuzzing infrastructure, automated security testing, threat modeling, vulnerability assessment, code review, and continuous validation across embedded and AI/ML system boundaries.

Design and implement logging and alerting systems across endpoints, infrastructure, networks, and cloud environments. Build automation for threat hunting and incident response, investigate and triage security events, lead incident response efforts, and develop threat intelligence on advanced adversary tactics. The role also requires secure, scalable software development using Python or Go and expertise across operating systems, Kubernetes, and cloud platforms.

Build privacy controls for advertising, measurement, machine-learning, and distributed systems. Conduct privacy reviews, threat modeling, and risk assessments; evaluate privacy-preserving techniques and attack risks; partner with engineering, product, legal, security, and data teams; and develop scalable privacy standards, auditing practices, tools, and documentation.

Lead the Identity Access Management team, define IAM strategy, design security controls, oversee security reviews, mentor engineers, and collaborate with stakeholders.

Design, implement, and scale security controls across infrastructure, applications, identity, and cloud. Perform security assessments, threat modeling, code reviews, incident response, and root cause analysis. Build automation and tooling for compliance, observability, and governance. Partner with product and engineering teams and help define security standards and documentation.