Top Senior Cyber Security Jobs in Philadelphia, PA

Leads Pfizer’s global network security operations, including monitoring, incident response, service performance, risk management, governance, and continuous improvement. Develops network security strategy and Zero Trust roadmaps, oversees firewalls, IDS/IPS, VPN, NAC, and cloud security capabilities, and manages distributed teams and third-party providers. Partners with engineering and infrastructure teams to strengthen detection, response, resilience, and regulatory compliance across a complex hybrid environment.

Leads cybersecurity threat intelligence and vulnerability management initiatives, analyzing threats, deploying intrusion detection and network security platforms, and developing proactive defenses. Manages client projects, including planning, budgeting, execution, and delivery, while mentoring teams and resolving stakeholder issues. Partners with leadership to maintain quality and timelines, conducts security research, and promotes innovation across cybersecurity practices.

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Build secure, scalable platforms and automation for cybersecurity operations, including threat hunting, incident response, PSIRT, product security, vulnerability management, and analyst workflows. Develop LLM-powered agents, integrate SIEM, SOAR, cloud, endpoint, ticketing, and scanning systems, and process high-volume security telemetry. Partner with security teams to automate investigations, enrich alerts, prioritize risks, track remediation, and deliver reliable production services.

Lead cross-functional cybersecurity programs to reduce enterprise risk from frontier AI models. Drive planning through execution, prioritize vulnerabilities, expand WAF coverage, enable AI-driven testing and automated patching, strengthen identity controls and telemetry, escalate risks, provide executive reporting, and coordinate remediation across technology, product, operations, and business stakeholders.

Administer and improve Workday and multi-platform HR security, including role-based access, security groups, access reviews, request approvals, audit support, governance documentation, and compliance controls. Evaluate elevated access requests, identify risks, resolve routine issues, coordinate remediation, and escalate complex decisions. Partner with HR, IT, Legal, and Compliance stakeholders to strengthen policies, processes, and least-privilege access across Workday, Peakon, UKG, Prism, and HR data platforms.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Designs, documents, tests, and maintains IT general and security controls across corporate, engineering, SaaS, and cloud-native systems. The role maps controls across SOX, SOC 2, ISO, NIST, PCI-DSS, privacy, and contractual requirements; manages audits, access reviews, change-management testing, remediation, policy work, and evidence automation. It also establishes governance standards for enterprise AI use and partners with IT, Security, Engineering, Finance, Legal, Privacy, and auditors.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads cybersecurity consulting across the customer lifecycle, supporting presales demonstrations, proof-of-concepts, executive reviews, cyber skills programs, crisis simulations, and platform adoption. Advises strategic customers on cyber resilience, risk measurement, security initiatives, and program roadmaps. Partners with sales, product, content, and engineering teams while serving as a trusted embedded advisor and escalation point.

Leads enterprise security architecture strategy, governance, standards, and multi-year roadmaps. Establishes Zero Trust architectures, security guardrails, reference architectures, review processes, and regulatory control mappings across cloud, identity, data, network, application, AI, and OT/IoT domains. Partners with enterprise architecture, technology, legal, privacy, and compliance teams; supports transformations, acquisitions, and divestitures; drives automation, risk assessment, metrics, and audit readiness. Leads global security architects, defines operating models and career paths, and reports enterprise risk posture to executives.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Leads enterprise Identity and Access Management architecture, strategy, standards, roadmaps, and governance. Designs scalable identity solutions across cloud, hybrid, and on-premises environments, covering IGA, PAM, SSO, MFA, federation, and access governance. Partners with cybersecurity, infrastructure, application, cloud, compliance, and business teams to support Zero Trust objectives and regulatory requirements. Evaluates IAM technologies and vendors, guides architecture reviews, mentors technical staff, and advises senior leadership on identity modernization and security transformation.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Manages global 24/7 Security Operations Center operations, including processes, playbooks, shift coverage, quality assurance, analyst development, incident response capabilities, and operational performance. Leads cybersecurity analysts, partners with Product and Support teams, reports on objectives and key results, operationalizes new services, and represents the organization in public speaking engagements.

Lead technical discovery, design, demos, and proof-of-value engagements for enterprise security, identity, and exposure management. Advise customers and Sales on integrations, validate solutions, create customer-facing documentation, run trainings, and support events while driving technical wins and measurable business outcomes.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.