Top Senior Cyber Security Jobs in Philadelphia, PA

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

Designs, implements, and supports enterprise cloud security systems and technologies. Troubleshoots complex production security issues, develops cloud data auditing methodologies, manages deployments and change controls, and performs systems analysis. Provides production support, documentation, technical guidance, and mentorship while partnering with clients to address business needs. Requires strong software, platform engineering, DevOps, cloud, authentication, incident response, and distributed-systems expertise.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Partner with sales to design and present data security solutions for SLED customers. Lead technical evaluations, gather requirements, build test plans, configure proof-of-concepts, and guide customers to successful outcomes while collaborating across GTM teams.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Lead MSSP-focused sales to recruit, enable, and grow managed security provider partners. Drive joint services, partner-led customer adoption, revenue attainment, forecasting, and cross-team issue resolution while meeting quotas and pipeline targets.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Protect the firm from web-based threats by designing, implementing, and maintaining web filtering proxies, secure web gateways, and cloud proxy platforms. Develop security policies for web filtering, SSL inspection, DLP, and threat prevention; translate regulatory requirements into technical controls; automate policy management and integrate security tools with SIEM, SOAR, and identity platforms. Support incident response, secure business use cases, scalability, Zero Trust alignment, and leadership reporting on risks and program maturity.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Own account-level security strategies for defense, aerospace, intelligence, and critical infrastructure customers. Lead security architecture, solution design, demonstrations, workshops, pilots, technical validations, and customer decision processes. Guide secure AI adoption and deployment of Microsoft security solutions, including Sentinel, Defender, Entra, Purview, Security Copilot, Microsoft 365, and Azure security services. Coordinate Microsoft and customer stakeholders, drive adoption, reduce risk, and deliver measurable security outcomes.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Administers Workday and multi-platform HR security, including role-based access, security configuration, access reviews, governance, audit support, and remediation. Evaluates routine and elevated access requests, enforces least-privilege standards, analyzes security and audit trends, maintains governance documentation, and recommends policy and process improvements. Collaborates with HR, IT, Legal, Compliance, and business stakeholders while protecting confidential employee data.

Lead RMF execution and authorization efforts for classified cloud and AI-integrated systems. Develop and maintain SSPs, SARs, POA&Ms, and continuous monitoring documentation; assess NIST, DoD, CNSS, FedRAMP, cloud, container, and AI security controls. Conduct architecture reviews, threat modeling, vulnerability assessments, risk analysis, and security control assessments while coordinating with architects, developers, DevSecOps teams, customers, and third-party assessors.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Designs and builds security orchestration and automation workflows for SOC processes, including alert triage, incident response, case management, integrations, scripting, error handling, and secure execution. The role translates client requirements into automation build plans, integrates SIEM, EDR/XDR, ticketing, threat intelligence, and email security tools, and may apply AI, cloud security, detection engineering, and automation-as-code practices.