Top Senior Cyber Security Jobs in Philadelphia, PA

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Responsible for ensuring security and integrity in technology operations, providing expertise in security engineering, and collaborating with teams to embed security measures in API design and deployment.

Lead and execute network security for Comcast platforms by owning security posture, vulnerability remediation, patch validation, secure configuration rollout, compliance support, and vendor engagement. Validate and harden software and configurations in lab environments, support audit readiness, implement access controls and secure monitoring, and coordinate cross-functional remediation and incident response activities.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.

Lead and mentor a small IT security engineering team to deploy and operate enterprise-grade Zero Trust security across networks, endpoints, applications, and cloud. Drive Customer Zero initiatives, manage cross-functional security projects, optimize policies (SSL decryption, segmentation, access control), and serve as an internal subject-matter expert.

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Design, implement, and operationally support enterprise security platforms across cloud, endpoint, identity, network, and SaaS. Lead detection, telemetry, vulnerability management, automation, and incident escalation. Partner with stakeholders to deliver secure, scalable services, improve security posture and Zero Trust objectives, and mentor engineers while maintaining documentation, KPIs, and on-call support.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Build and maintain Premonition, an internal platform for managing, deploying, and monitoring agentic LLM pipelines. Develop composable agents, tools, APIs, orchestration, and infrastructure on AWS/EKS. Optimize high-performance data layers (Iceberg/Delta/Hudi), embedded engines (DuckDB, LanceDB), and ensure observability, safety, and secure integration with SOC, IR, and threat-hunting workflows.