Top Cyber Security Jobs in Philadelphia, PA

Paid summer cybersecurity internship focused on security strategy, risk mitigation, digital ethics, threat analysis, fraud mitigation, and reporting. The intern will work collaboratively using Agile and Lean methodologies, gain exposure to the software life cycle, contribute to security outcomes, and receive training, mentorship, coaching, and networking opportunities with leaders and peers.

Two-year rotational program for graduating students supporting cybersecurity and operational risk identification, threat and vulnerability analysis, control strengthening, risk reporting, and security initiatives. Participants rotate across risk management, cybersecurity operations, threat intelligence, and identity and access management teams while developing analytical, leadership, and collaboration skills through hands-on projects, capstones, and mentorship.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Two-year rotational early-career program to design and build secure applications and systems, implement security controls, identify and remediate vulnerabilities, build security tools and automations, partner with engineering and security teams, apply DevSecOps and secure development practices, and receive mentorship and leadership development.

Perform RMF lifecycle tasks to obtain/maintain IATT/AO/ATO, implement and test DoD STIG/SRG controls, run vulnerability assessments (ACAS/SCAP/SCC), maintain POA&Ms in eMASS/VRAM, patch and harden Windows Server and Cisco assets, image/re-image systems, and support configuration management and PPSM for NSWC-PD.

Support SOC operations by onboarding log sources into the SIEM, creating and maintaining security dashboards, documenting incident response playbooks and SOPs, assisting security awareness and training, and working with relational databases to support monitoring and reporting.

Administer, troubleshoot, and maintain Cisco ASA firewalls, Cisco IPS, and Bluecoat Proxy SG. Build/support IPSec site-to-site VPNs, monitor systems, resolve incidents, perform change management, maintain documentation, and participate in 24/7 on-call rotations in a global team following ITIL practices.

Operate and maintain Cisco ASA firewalls, Cisco IPS and Bluecoat Proxy SG; schedule changes, apply patches, monitor systems, resolve incidents, perform troubleshooting and initial incident response, escalate as needed, maintain documentation, follow change management and SLAs, and participate in 24/7 on-call rotations.

Manage and maintain Cisco ASA firewalls, Cisco IPS, and Blue Coat Proxy SG; troubleshoot network/security incidents; schedule changes and apply patches; monitor systems, perform initial incident resolution, maintain documentation, support 24/7 on-call rotations, and help develop compliance controls and assessments.

Lead application security reviews and SDLC engagement across North America, advise on secure design and remediation, apply secure coding and broad cybersecurity expertise (pen testing, vulnerability management, IAM, network/cloud security), evaluate AI risks, and partner with technology and business leaders to embed security throughout development and production.

Manage and secure DPH IT operations: monitor logs and network traffic, administer security systems (firewalls, IDS, antivirus), remediate vulnerabilities, review penetration tests, conduct forensics and audits, document processes, lead security projects, and coordinate with OIT and stakeholders.

Provide technical security advisory and operational security for information systems, manage day-to-day security operations, perform vulnerability and risk assessments, support Certification & Accreditation, produce SSPs/C&A documentation and SOPs, and evaluate/manage security solutions and changes for classified processing.

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.

Senior Tier-3 NOC engineer serving as final technical escalation for major network incidents. Leads RCA, incident recovery, and architecture guidance across multi-vendor environments. Expert in Palo Alto and Zscaler security platforms, packet analysis, automation/IaC, and enterprise routing/segmentation. Mentors junior staff, coordinates vendor escalations, and shapes operational standards to improve stability and observability.

Manage full lifecycle RMF/DIACAP Assessment & Authorization (A&A) activities to support DoC systems' Authorization to Operate (ATO). Conduct security assessments per NIST 800-53, maintain risk registries, support vulnerability scanning and patch management (HBSS/ACAS/IAVM), produce A&A documentation in eMASS, and advise on mitigation strategies and configuration management.

Lead modernization of a global Third-Party Risk Management (TPRM) program by shifting from questionnaire-centric assessments to a data-driven model using technical validation, automation, continuous monitoring, and AI. Partner with Procurement, Legal, Privacy, and Supply Chain to standardize contracts and controls, maintain centralized third-party inventories, report risks to senior leadership, and build a high-performing TPRM team while overseeing advanced technical assessments for critical suppliers.

Lead ISSE activities for SAP and DoD systems across the system lifecycle: define and integrate security requirements, architect secure solutions, perform RMF/JSIG risk analysis and authorization support, direct security assessments, SIEM/integration work, incident response, tooling/SR G/STIG development, and mentor/lead security engineering and C&A analysts while supporting SAP/SCI program operations.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.