Top Senior Cyber Security Jobs in Philadelphia, PA

Design and build agentic AI-driven security testing systems and automation frameworks. Integrate static/dynamic analysis, reverse engineering, network analysis, and custom tooling to enable autonomous and human-in-the-loop workflows that scale security testing across mobile, desktop, IoT, and APIs. Prototype, evaluate, and productionize agent orchestration, evaluation, and MLOps infrastructure.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Lead end-to-end incident investigations, perform threat hunting across cloud and on-prem environments, translate threat intelligence into defenses, improve SIEM/EDR detections, automate response, and develop IR and hunting playbooks while collaborating with engineering and DevSecOps teams.

Analyze large-scale SaaS security data to identify attack vectors and vulnerabilities, investigate incidents, reduce false positives, and develop detection strategies. Collaborate with security researchers, data scientists, and customers; ingest and correlate SaaS logs via APIs; produce thought leadership and improve platform detection capabilities.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Build, test, and maintain SQL-based behavioral detections and anomaly scoring on petabyte-scale network/security telemetry. Own dataset and demo environment creation, probe/data-collection strategy, SIEM/EDR integration, and hands-on delivery during customer pilots. Document detection logic, runbooks, and playbooks for reuse across industries.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Lead deep technical security reviews of products and platforms, produce prioritized remediation roadmaps, build security tools and automations, integrate guardrails and automated checks, partner with product teams to implement and validate fixes, and use threat intelligence and telemetry to convert attack paths into controls and detections.

Lead and deliver forward-deployed security programs: convert ambiguous risks into scoped initiatives, align governance, partner with engineering and product teams, apply AI/automation responsibly, build operating mechanisms for reviews, telemetry, remediation, and measure adoption and risk reduction across divisions.

Define and drive Security Operations strategy at the intersection of Identity and AI. Analyze IAM and AI roadmaps, perform threat modeling, build security frameworks for AI-enabled systems and agentic workloads, identify capability gaps, incubate new security approaches, and partner with engineering and security teams to influence long-term direction and operational readiness.

Manage and coach a team of cloud security architects to deliver customer security and AI transformation on Azure and Microsoft 365. Drive customer success plans, technical guidance (Zero Trust, SIEM/SOAR, XDR, cloud security, identity), operational KPIs, repeatable IP, and business results while fostering technical growth and stakeholder engagement.

Lead and grow the GRC team to ensure regulatory and internal security compliance. Oversee audits, certifications, enterprise risk assessments, remediation programs, and development of security policies and governance frameworks. Advise executives and technical teams on compliance risks, promote governance adoption, and support vulnerability, patch management, and AI cybersecurity governance.

Lead and expand the Application Security program: define roadmap, embed security into SDLC, perform architecture and code reviews, manage vulnerability lifecycle and incident response, lead penetration testing strategy, deliver executive metrics, and mentor a small hands-on AppSec team.

Lead cloud security for GCP and Azure by operationalizing CNAPP tooling, embedding security-as-code with Terraform/CI-CD, driving vulnerability management, improving detection and response with Chronicle, hardening data and endpoint security, and mentoring engineers while serving as senior escalation during incidents.

Lead research and analysis on cloud-native security, create thought leadership, advise clients and vendors, present at events, support sales and peer review, mentor junior analysts, and improve research processes. Provide actionable guidance on cloud security architectures, vendor selection, and the intersection of cloud security with GenAI. Travel up to 25%.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead research and produce high‑impact network security insights. Advise clients on evaluation, selection and deployment of network security technologies, present at events, support sales, mentor analysts, and drive research agenda and process improvements.

Lead research and advisory on network security: produce thought leadership, analyze market trends, advise clients on evaluation/selection/deployment of firewalls, NDR, SASE/SSE, microsegmentation and Zero Trust, present findings, mentor junior analysts, and support sales and research processes.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.

Lead design, assessment, and operationalization of secure Google Cloud environments. Advise on GCP security strategy, posture assessments, SIEM/Chronicle integration, CNAPP/CSPM tooling, Security Command Center implementation, Vertex AI security, remediation roadmaps, and delivery of architecture, runbooks, and executive advisory. Mentor consultants and develop repeatable security methodologies.

Lead Fabric's security program and corporate IT operations, including identity, endpoint, cloud, application, and vendor security. Hire and manage a small team, run incident response, handle customer security questionnaires, partner on SOC2/HITRUST/HIPAA control implementation, and set practical security policy while remaining hands-on in operations and tooling.