Top Senior Cyber Security Jobs in Philadelphia, PA

Designs and operates Microsoft-focused security controls across cloud, identity, endpoints, data protection, and Microsoft 365. Leads identity and cloud investigations, incident response, threat hunting, detection engineering, privileged-access security, and data-exfiltration prevention. Develops playbooks, automates security workflows, supports post-incident remediation, and partners with legal, privacy, compliance, HR, IT, and security vendors. The role also mentors analysts and provides operational and executive reporting.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Lead design, implementation, automation, and operation of enterprise Okta identity services. Drive application onboarding, federation, lifecycle management, resiliency, monitoring, incident response, governance, and platform automation while mentoring engineers and improving security posture.

Designs and maintains network, cloud, firewall, SASE, and CASB security controls; conducts threat hunting, detection engineering, incident response, and forensic analysis; administers Microsoft Purview data governance, DLP, and eDiscovery; and manages business continuity and disaster recovery planning and exercises. Partners with legal, compliance, leadership, and business teams to address security risks and regulatory requirements.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Leads the design and implementation of enterprise cloud security controls across AWS environments. Builds policy-as-code, infrastructure-as-code, CI/CD guardrails, posture checks, drift detection, and automated remediation. Establishes technical standards, mentors engineers, influences cross-team architecture, operationalizes CSPM findings, supports audit and governance activities, and participates in on-call rotations.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Lead product cybersecurity for connected heart-recovery medical devices across development and post-market lifecycles. Responsibilities include security architecture, threat modeling, risk assessments, cryptographic controls, secure boot, firmware protection, PKI, vulnerability management, penetration testing, SBOM analysis, secure OTA updates, regulatory submissions, and remediation planning. The role partners with R&D and cross-functional teams to implement secure development practices, embedded protections, cloud and device security, and compliance with medical-device cybersecurity standards.

Leads advanced cybersecurity operations, including incident response, digital forensics, threat hunting, SIEM and EDR monitoring, threat intelligence, vulnerability management, and remediation. Develops incident response playbooks and SOC procedures while mentoring analysts and coordinating with infrastructure teams to improve defensive capabilities.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Develop and operate cloud security solutions across Azure, AWS, Google Cloud, and Oracle platforms. Define security standards, implement least-privilege access, network segmentation, encryption, monitoring, and compliance controls. Review cloud architectures and risk assessments, automate security processes, support incident response and vulnerability remediation, and participate in DevSecOps, SAST, DAST, code review, and red-team activities. Partner with architects and business stakeholders to communicate risks and implement secure cloud solutions.

Designs, implements, and oversees security architectures for federal systems, including zero-trust and cloud environments. Leads secure system design, control integration, detection and response architecture, and alignment with NIST and FISMA requirements. Collaborates with SOC analysts, incident responders, engineers, and leadership to build resilient, scalable security operations environments.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Set the strategy and roadmap for AI Security Posture Management discovery and detection. Lead enterprise-wide AI system inventory, identify Shadow AI and policy violations, oversee detection lifecycle development and tuning, establish risk and coverage metrics, collaborate across security and business functions, and build a high-performing AI Security team.

Leads cybersecurity threat intelligence and vulnerability management initiatives, analyzing threats, deploying intrusion detection and network security platforms, and developing proactive defenses. Manages client projects, including planning, budgeting, execution, and delivery, while mentoring teams and resolving stakeholder issues. Partners with leadership to maintain quality and timelines, conducts security research, and promotes innovation across cybersecurity practices.

Consult on Oracle application security and compliance: analyze client requirements, implement security controls, perform compliance audits, develop policies, guide regulatory adherence, train and manage junior staff, and help clients mitigate risks and protect sensitive data.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.