Top Cyber Security Jobs in Hartford, CT

Manage SOC 1, SOC 2, and ISO 27001 compliance programs, including internal and external audits, control enforcement, corrective actions, and policy updates. Monitor security alerts, support incident investigations, coordinate penetration testing, and administer password and phishing management systems. Lead security awareness initiatives, advise stakeholders, collaborate with Legal on encryption regulations, and drive continuous improvements to the organization’s information security posture.

Security Engineer responsible for application security, vulnerability and threat management, cloud and Kubernetes security, DevSecOps tooling, incident response, forensic analysis, and secure system architecture. The role integrates security testing into CI/CD pipelines, automates security tasks, supports IAM and cryptographic key management, and collaborates with engineering teams to strengthen security processes and tooling.

Leads complex digital forensics and incident response engagements, including ransomware, APT, nation-state, insider threat, host and network forensics, malware triage, cloud investigations, and threat attribution. Provides technical oversight, client leadership, methodology development, mentorship, tooling improvements, pre-sales support, and external thought leadership. Participates in on-call coverage and supports high-severity incident surges.

Designs, deploys, configures, migrates, and troubleshoots Palo Alto Networks security infrastructure in customer environments. Responsibilities include firewall, Panorama, Prisma, Strata Cloud Manager, and GlobalProtect implementation; migration from legacy platforms; routing and switching support; change-window execution; technical design and migration documentation; post-deployment stabilization; and communication with customers, account teams, and engineering. Travel to customer sites and evening, overnight, or weekend maintenance windows may be required.

Leads software security for Cisco’s IT and Enterprise Operations portfolio. Responsibilities include portfolio risk management, secure architecture and design reviews, threat modeling, AI and LLM security, analysis of SAST/DAST/SCA findings, remediation guidance, security SME coordination, leadership influence, release risk presentations, and security engineering metrics. The role drives risk-based security outcomes across engineering, product, IT, and operations teams without direct authority.

Lead software security for Cisco’s IT and Enterprise Operations portfolio. The role owns security posture, threat modeling, secure architecture reviews, AI and LLM security, risk-based remediation, security metrics, and release risk reporting. It partners with engineering, product, and IT leadership to drive security outcomes without direct authority, coordinate security subject-matter experts, and reduce security debt across cloud-native applications and enterprise platforms.

Build and operate cloud security controls across AWS, Azure, GovCloud, and secondary platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform and CI/CD automation, remediation, application and vendor design reviews, and audit evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal assessments.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Designs, implements, and maintains enterprise security solutions; operates EDR, SIEM, web application firewall, and vulnerability-scanning tools; advances Zero Trust maturity; integrates security into DevSecOps, CI/CD, and infrastructure-as-code processes; addresses vulnerabilities and security gaps; develops security performance dashboards; and validates system designs against requirements.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Leads the design and delivery of AI-driven cybersecurity solutions focused on application security, vulnerability management, threat detection, and cyber resilience. Builds secure full-stack applications and cloud-native platforms using AWS and AI/ML, integrates logging and monitoring tools, and embeds security into SDLC and CI/CD pipelines. Provides architecture guidance, technical leadership, mentoring, and delivery oversight for distributed teams while influencing enterprise engineering standards and secure-by-design practices.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Supports enterprise cybersecurity and GRC programs through third-party risk assessments, security testing coordination, corrective action tracking, policy development, compliance support, incident response planning, disaster recovery exercises, and enforcement of technical and administrative controls. Partners with engineering, operations, managed security providers, and internal stakeholders to strengthen security posture across cloud and hybrid environments.

Leads cybersecurity execution across Danaher’s global Life Sciences operating companies. Owns cyber strategy implementation, risk and vulnerability management, security architecture, assurance, certifications, data and application security, product security coordination, M&A cyber integration, and OT/manufacturing security. Builds globally distributed security teams, manages matrixed stakeholders, supports regulated environments, and oversees cyber PMO performance. The role is based in Washington, D.C., remote/hybrid, and requires 25–30% international travel.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Build and deploy highly reliable endpoint security agents for Windows, macOS, and Linux. Lead technical execution, system design, architecture documentation, code quality, performance, and reliability initiatives. Mentor engineers and collaborate with Product, Security, and DevOps teams. The role requires strong systems programming, operating system internals, cybersecurity, threat detection, security data processing, and technical leadership experience.

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Supports application security and information systems for a large healthcare organization. Analyzes user requirements, develops and implements system solutions, manages moderately complex projects, coordinates project teams, establishes system procedures, and provides guidance to less experienced staff. Collaborates with internal teams, vendors, and stakeholders across multiple facilities. Epic accreditation or certification is required, along with industry experience and a related bachelor's degree.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.