Top Senior Cyber Security Jobs in Philadelphia, PA

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Protect the firm from web-based threats by designing, implementing, and maintaining web filtering proxies, secure web gateways, and cloud proxy platforms. Develop security policies for web filtering, SSL inspection, DLP, and threat prevention; translate regulatory requirements into technical controls; automate policy management and integrate security tools with SIEM, SOAR, and identity platforms. Support incident response, secure business use cases, scalability, Zero Trust alignment, and leadership reporting on risks and program maturity.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Perform RMF lifecycle tasks to obtain/maintain IATT/AO/ATO, implement and test DoD STIG/SRG controls, run vulnerability assessments (ACAS/SCAP/SCC), maintain POA&Ms in eMASS/VRAM, patch and harden Windows Server and Cisco assets, image/re-image systems, and support configuration management and PPSM for NSWC-PD.

Administer, troubleshoot, and maintain Cisco ASA firewalls, Cisco IPS, and Bluecoat Proxy SG. Build/support IPSec site-to-site VPNs, monitor systems, resolve incidents, perform change management, maintain documentation, and participate in 24/7 on-call rotations in a global team following ITIL practices.

Operate and maintain Cisco ASA firewalls, Cisco IPS and Bluecoat Proxy SG; schedule changes, apply patches, monitor systems, resolve incidents, perform troubleshooting and initial incident response, escalate as needed, maintain documentation, follow change management and SLAs, and participate in 24/7 on-call rotations.

Manage and maintain Cisco ASA firewalls, Cisco IPS, and Blue Coat Proxy SG; troubleshoot network/security incidents; schedule changes and apply patches; monitor systems, perform initial incident resolution, maintain documentation, support 24/7 on-call rotations, and help develop compliance controls and assessments.

Lead application security reviews and SDLC engagement across North America, advise on secure design and remediation, apply secure coding and broad cybersecurity expertise (pen testing, vulnerability management, IAM, network/cloud security), evaluate AI risks, and partner with technology and business leaders to embed security throughout development and production.

Senior Tier-3 NOC engineer serving as final technical escalation for major network incidents. Leads RCA, incident recovery, and architecture guidance across multi-vendor environments. Expert in Palo Alto and Zscaler security platforms, packet analysis, automation/IaC, and enterprise routing/segmentation. Mentors junior staff, coordinates vendor escalations, and shapes operational standards to improve stability and observability.

Manage full lifecycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems' Authorization to Operate (ATO). Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patch management (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and advise on mitigation strategies and configuration management.