Top Cyber Security Jobs in Philadelphia, PA

Lead software security for Cisco’s IT and Enterprise Operations portfolio. The role owns security posture, threat modeling, secure architecture reviews, AI and LLM security, risk-based remediation, security metrics, and release risk reporting. It partners with engineering, product, and IT leadership to drive security outcomes without direct authority, coordinate security subject-matter experts, and reduce security debt across cloud-native applications and enterprise platforms.

Designs, implements, and maintains security controls across Azure, GCP, and AWS environments. Manages cloud IAM, security posture, vulnerability remediation, policies, guardrails, and infrastructure security. Partners with engineering and DevOps teams on CI/CD and infrastructure-as-code security, conducts assessments, supports cloud incident response, develops SOC detection content, and documents security architectures. Requires three or more years of cloud security experience across at least two major cloud platforms.

Build and operate cloud security controls across AWS, Azure, GovCloud, and secondary platforms. Responsibilities include IAM, encryption, secrets management, preventive and detective controls, PHI protection, logging pipelines, Terraform and CI/CD automation, remediation, application and vendor design reviews, and audit evidence for HITRUST, HIPAA, SOC 2, FedRAMP, and internal assessments.

Lead cybersecurity detection and response operations, including complex incident handling, alert triage, SIEM rule authoring and tuning, threat hunting, playbook development, and response automation. Mentor SOC analysts, establish documentation and escalation standards, conduct post-incident reviews, and drive remediation and detection strategy improvements. Present technical findings to executives and influence cross-functional security outcomes.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Drive commercial data security sales across Central and East regions by partnering with account teams, customers, channel partners, and sales engineers. Lead discovery through close, expand existing accounts, identify new opportunities, advise executives on cloud, SaaS, insider risk, regulatory, and AI security challenges, conduct demonstrations and proof-of-value programs, develop account plans, enable sellers, and manage pipeline forecasting in Salesforce.

Leads consultative cybersecurity solution sales for managed customers, driving pipeline, business-value selling, strategic opportunities, partner collaboration, forecasting, and deal execution. Advises business decision-makers on security solutions, cloud platforms, competitors, and digital transformation strategies. Builds customer and partner relationships, develops joint proposals, mentors junior sellers, organizes security discussions and events, and shares cybersecurity best practices while coordinating internal teams to deliver customer outcomes.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Providers. Reviews cloud architectures, authorization packages, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests. Leads architecture interviews, identifies technical and documentation gaps, advises government stakeholders on risk and compliance, supports continuous monitoring, and guides vendors on FedRAMP, NIST, FISMA, RMF, and agency requirements.

Designs, implements, and maintains enterprise security solutions; operates EDR, SIEM, web application firewall, and vulnerability-scanning tools; advances Zero Trust maturity; integrates security into DevSecOps, CI/CD, and infrastructure-as-code processes; addresses vulnerabilities and security gaps; develops security performance dashboards; and validates system designs against requirements.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Supports enterprise cybersecurity and GRC programs through third-party risk assessments, security testing coordination, corrective action tracking, policy development, compliance support, incident response planning, disaster recovery exercises, and enforcement of technical and administrative controls. Partners with engineering, operations, managed security providers, and internal stakeholders to strengthen security posture across cloud and hybrid environments.

Manage and lead engineering teams building endpoint security software: define and execute roadmaps, oversee SDLC and ISMS compliance, remove blockers, drive secure coding, coordinate with product and architects, recruit and develop staff, and manage budgets and operations.

Leads cybersecurity execution across Danaher’s global Life Sciences operating companies. Owns cyber strategy implementation, risk and vulnerability management, security architecture, assurance, certifications, data and application security, product security coordination, M&A cyber integration, and OT/manufacturing security. Builds globally distributed security teams, manages matrixed stakeholders, supports regulated environments, and oversees cyber PMO performance. The role is based in Washington, D.C., remote/hybrid, and requires 25–30% international travel.

Build and deploy highly reliable endpoint security agents for Windows, macOS, and Linux. Lead technical execution, system design, architecture documentation, code quality, performance, and reliability initiatives. Mentor engineers and collaborate with Product, Security, and DevOps teams. The role requires strong systems programming, operating system internals, cybersecurity, threat detection, security data processing, and technical leadership experience.

Own the full lifecycle of enterprise cybersecurity accounts, from deployment planning and integrations through adoption, renewal, and expansion. Serve as the primary technical contact for security, engineering, and IT stakeholders. Guide vulnerability management workflows, cloud and scanning-tool integrations, remediation prioritization, and compliance reporting. Translate customer feedback into product improvements and create scalable onboarding playbooks.

Supports application security and information systems for a large healthcare organization. Analyzes user requirements, develops and implements system solutions, manages moderately complex projects, coordinates project teams, establishes system procedures, and provides guidance to less experienced staff. Collaborates with internal teams, vendors, and stakeholders across multiple facilities. Epic accreditation or certification is required, along with industry experience and a related bachelor's degree.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.