Top Senior Cyber Security Jobs in Philadelphia, PA

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Supports federal security certification and authorization activities, coordinates assessments with independent assessors, validates control evidence, drives remediation and continuous monitoring, and evaluates security incidents for federal reporting obligations. The role also develops scalable compliance processes for cloud services and authorized boundaries, collaborating with technical and nontechnical stakeholders. It requires expertise in NIST 800-53, FedRAMP, DoD Cloud Computing SRG, CNSSI 1253, and federal cloud security compliance.

Leads information security strategy and execution for the Federal Reserve System’s District IT and Corporate Services portfolio. Advises senior technology and business leaders, manages cybersecurity risk and tolerance, develops resilient security practices, and partners across a matrixed organization to deliver secure technology services. Builds high-performing, AI-savvy teams, drives change and innovation, manages stakeholders and external partners, and aligns security initiatives with business objectives and system standards.

Leads information security strategy and execution for the Federal Reserve’s Central Bank Services portfolio, including Markets, Credit Risk Management, and Reserves. Advises senior business and technology leaders, manages cybersecurity risk and resilience, partners across a matrixed organization, develops security strategies, builds AI-savvy teams, drives change and innovation, and ensures secure, reliable technology delivery aligned with business objectives and System standards.

Leads information security strategy and execution for Federal Reserve System IT Operations and Policy portfolios. Advises the System CISO and business and technology leaders, manages cybersecurity risk and resilience, develops secure technology practices, and partners across infrastructure, architecture, data, innovation, and IT business teams. Builds AI-savvy security teams, drives organizational change, strengthens governance, and ensures secure, reliable technology delivery across a geographically dispersed enterprise.

Design, build, and operate secure, reliable cloud software platforms and distributed systems. Develop backend APIs, data ingestion pipelines, workflows, automation, and agentic pipelines. Lead architecture, implementation, testing, deployment, observability, and production support while writing high-quality Python code. Provide technical leadership, mentor engineers, document systems, and evaluate cloud-native, AI, and workflow technologies.

Drives growth of CDW’s security portfolio among state and local government customers. Builds executive relationships with CIOs and CISOs, leads security opportunities from discovery through close, and positions broad security solutions across identity, cloud, risk, compliance, threat management, and secure infrastructure. Partners with sales teams, solution architects, delivery teams, vendors, and public-sector stakeholders to develop integrated solutions, manage procurement cycles, coordinate events, and maintain accurate forecasts. Regional travel is required as needed.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Monitor and triage security alerts, support incident response and vulnerability remediation, review logs, tune SIEM detections, and maintain security documentation. The role contributes to risk assessments, control improvements, automation, dashboards, and operational playbooks while collaborating with internal teams. It requires familiarity with EDR, SIEM/SOAR, CSPM, vulnerability management, firewalls, cloud environments, networking, operating systems, security frameworks, and common attack techniques.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads Motive’s global security compliance, privacy, risk, audit, customer trust, and AI governance functions. Builds integrated controls across ISO, SOC, PCI DSS, FedRAMP, GDPR, and related frameworks; manages audits, privacy operations, international regulatory readiness, customer security reviews, policies, training, and human risk. The role also establishes AI-first automation, AI governance, and a path to FedRAMP while leading a distributed team and partnering across Legal, Engineering, Product, IT, Finance, Sales, and Customer Success.

Delivers virtual and occasional onsite cloud security training covering Falcon Cloud Security, CNAPP, CSPM, CWPP, containers, and incident response. Develops curricula, certification exams, and hands-on labs; maintains expertise in cloud threats and CrowdStrike products; and supports broader endpoint, identity, logging, and SIEM topics. Requires strong technical education, cloud security, communication, project management, AI technology, and occasional travel experience.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Provides SAP security and access controls consulting, including role design, authorization solutions, SAP GRC implementation, segregation-of-duties reviews, compliance assessments, audit support, risk remediation, and access control documentation. Collaborates with clients and engagement teams, evaluates control gaps, tracks remediation, protects sensitive data, and mentors junior team members.

Leads SAP security and access-control consulting workstreams, including role design, segregation-of-duties analysis, user provisioning, SAP GRC implementation, compliance controls, remediation, and audit readiness. Reviews security architecture across SAP S/4HANA, Fiori, HANA, BTP, and cloud environments; manages project delivery, advises clients, develops team members, and supports continuous monitoring and digital risk prevention.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Manages application security assessments and client delivery across cloud environments. Designs security controls for IaaS, PaaS, and SaaS platforms; reviews architectures for vulnerabilities and control gaps; conducts risk assessments and vulnerability testing; guides remediation and security tool usage; monitors emerging threats; coaches security teams; and communicates findings to technical and business stakeholders.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.