Top Cyber Security Jobs in Hartford, CT

The Information Security Analyst will manage security operations, penetration testing, antivirus and SIEM tools, security assessments, AI-system risk evaluations, business continuity improvements, and compliance frameworks including SOC 2, NIST, and CJIS. The role also delivers security training, evaluates vendors, responds to security questionnaires and RFPs, and partners with IT, engineering, sales, and product teams. U.S. citizenship and FBI fingerprint and background checks are required.

Leads information security governance, risk, and compliance activities, including risk assessments, risk register management, remediation, security metrics, HITRUST and SOC 2 audits, client questionnaires, control documentation, and third-party risk management. Collaborates with IT, Privacy, Compliance, business stakeholders, and auditors to maintain healthcare data security and regulatory compliance.

Lead strategy to define and scale technical skilling for Microsoft's global Security Solutions Specialist community. Use sales and field data, market intelligence, and AI-enabled analytics to identify capability gaps, design skilling frameworks, drive adoption, measure impact, and advise senior leaders to accelerate security and AI-driven customer outcomes.

Conduct advanced vulnerability research across Microsoft products, cloud services, and open-source ecosystems. Develop scalable automation, AI-driven systems, and security tooling for vulnerability discovery and remediation. Lead offensive security assessments, analyze emerging attack techniques, collaborate with engineering and security teams, and publish technical findings influencing large-scale software systems.

Administer and enhance enterprise data security platforms, including SecuPi, while implementing access controls, masking, encryption, tokenization, monitoring, classification, and DLP across databases, cloud platforms, applications, and AI services. The role integrates security tools with IAM, PAM, SIEM, SOAR, and monitoring systems; troubleshoots complex environments; develops automation; investigates anomalous access; supports audits and incidents; and partners with infrastructure, cloud, database, application, privacy, and governance teams.

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Lead cloud security strategy and engineering across AWS infrastructure, applications, data, Kubernetes, CI/CD, and cloud-native systems. Design security controls for identity, networking, workloads, secrets, monitoring, and vulnerability management; automate guardrails; assess broader risks and attack paths; guide architecture and incident response; define security metrics; and influence engineering teams through technical leadership and communication.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Owns IT systems administration and security operations for a fully remote workforce. Responsibilities include managing Microsoft 365 and Google Workspace, endpoint and identity platforms, security tools, access controls, threat monitoring, incident response, vulnerability management, compliance evidence, disaster recovery, vendor relationships, reporting, and operational roadmaps.

Owns the architecture and technical roadmap for the Ping Identity platform. Designs enterprise SSO, MFA, identity governance, application integrations, RBAC and ABAC frameworks, lifecycle management, and cloud or hybrid deployments. Leads migration and multi-region availability strategies while producing architecture designs, solution blueprints, integration standards, and audit-ready runbooks.

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.

Designs, deploys, configures, migrates, and troubleshoots Palo Alto Networks security infrastructure in customer environments. Responsibilities include firewall, Panorama, Prisma, Strata Cloud Manager, and GlobalProtect implementation; migration from legacy platforms; routing and switching support; change-window execution; technical design and migration documentation; post-deployment stabilization; and communication with customers, account teams, and engineering. Travel to customer sites and evening, overnight, or weekend maintenance windows may be required.

Supports the deployment, configuration, integration, testing, migration, and troubleshooting of Palo Alto Networks, Zscaler, and other network security technologies for enterprise customers. Assists consultants with customer discovery, design workshops, implementation activities, technical documentation, and solution validation. Communicates technical concepts to technical and non-technical stakeholders while developing expertise in cybersecurity consulting, firewalls, networking, SASE, and cloud security.

Leads software security for Cisco’s IT and Enterprise Operations portfolio. Responsibilities include portfolio risk management, secure architecture and design reviews, threat modeling, AI and LLM security, analysis of SAST/DAST/SCA findings, remediation guidance, security SME coordination, leadership influence, release risk presentations, and security engineering metrics. The role drives risk-based security outcomes across engineering, product, IT, and operations teams without direct authority.

Lead software security for Cisco’s IT and Enterprise Operations portfolio. The role owns security posture, threat modeling, secure architecture reviews, AI and LLM security, risk-based remediation, security metrics, and release risk reporting. It partners with engineering, product, and IT leadership to drive security outcomes without direct authority, coordinate security subject-matter experts, and reduce security debt across cloud-native applications and enterprise platforms.

Build and operate cloud security controls across AWS, Azure, GovCloud, and secondary platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform and CI/CD automation, remediation, application and vendor design reviews, and audit evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal assessments.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Designs, implements, and maintains enterprise security solutions; operates EDR, SIEM, web application firewall, and vulnerability-scanning tools; advances Zero Trust maturity; integrates security into DevSecOps, CI/CD, and infrastructure-as-code processes; addresses vulnerabilities and security gaps; develops security performance dashboards; and validates system designs against requirements.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.