Top Cyber Security Jobs in Philadelphia, PA

Leads product and platform security for Federal Reserve Financial Services, overseeing security architecture, secure development lifecycles, threat modeling, DevSecOps, security testing, risk management, and cloud security. Advises product, engineering, architecture, and executive stakeholders; establishes security standards and reference architectures; evaluates security technologies; and leads, mentors, and develops the security team. The role also represents security interests across Federal Reserve System forums and requires occasional travel and national security clearance eligibility.

Leads cloud security advisory engagements across IaaS, PaaS, and SaaS environments. Develops security strategies, architectures, controls, monitoring, and incident response processes; directs risk assessments and vulnerability testing; advises executive clients; drives business development and thought leadership; and mentors security leaders and teams.

Leads cloud security engagements across IaaS, PaaS, and SaaS environments. Designs security architecture and controls, conducts risk assessments and vulnerability testing, manages monitoring and incident response, tracks remediation, and develops technical deliverables. The manager coaches team members, oversees project quality and timelines, addresses stakeholder issues, and identifies opportunities to improve cloud security through automation and emerging technologies.

Owns Cleo’s application and product security strategy across SaaS and customer-hosted products. Responsibilities include maturing the SSDLC, threat modeling, security scanning, vulnerability triage, penetration testing, coordinated disclosure, CVE management, product security controls, customer-facing advisories, and NIST CSF evidence. The role also leads security enablement, roadmap prioritization, AI security reviews, and hands-on exploit reproduction and patch validation while guiding engineers and security partners.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Lead Toast’s product and platform security organization, overseeing security platform engineering, application and cloud security, secure development practices, offensive security, vulnerability management, hardware security, and developer enablement. Partner with product and engineering leaders to establish secure defaults and scalable guardrails while reducing developer friction. Manage and grow a multi-team security engineering organization, expand security champions and tooling adoption, and align security posture with business and product priorities.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Manages a product and application security team, develops secure coding programs, integrates security scanning into CI/CD pipelines, analyzes vulnerabilities, supports incident response, conducts threat modeling and security assessments, and mentors engineering teams on secure software development and cloud security practices.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Leads Enterprise Security services, setting and enforcing security standards across identity, endpoints, business applications, cloud infrastructure, networking, IoT, and automation. Partners with IT, SOC, vulnerability management, governance, and threat operations teams to secure applications, monitor environments, manage EDR policies, remediate vulnerabilities, assess risks, and maintain compliance. Also drives AI security initiatives and uses AI tools to improve enterprise security capabilities and team efficiency.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Designs and implements security measures across IaaS, PaaS, and SaaS environments. Conducts risk assessments, vulnerability testing, audits, forensic investigations, and incident response. Collaborates with cloud service providers, develops security architectures and frameworks, monitors for breaches, manages cloud resources, and supports compliance. The role also involves client relationship management, solving complex cybersecurity challenges, and advancing cloud security strategies.

Coordinates information security human risk programs, including training deployments, simulated phishing campaigns, onboarding, targeted learning, awareness communications, metrics, and audit-ready documentation. Drafts behavior-focused educational materials, tracks initiative milestones and risks, reviews campaign results, identifies process improvements, and collaborates with Information Security, HR, Legal, Communications, and business stakeholders.

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Partners with Sales to advise enterprise customers on cybersecurity, identity, access, asset visibility, exposure management, and risk solutions. Leads technical discovery, solution design, demonstrations, proof-of-value engagements, customer validation, training, and executive discussions. Requires strong cybersecurity and enterprise networking expertise, customer-facing pre-sales experience, and the ability to connect technical capabilities to business outcomes. Supports complex sales cycles, collaborates cross-functionally, and travels approximately 25–50%.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Leads cybersecurity threat intelligence and vulnerability management initiatives, analyzing threats, deploying intrusion detection and network security platforms, and developing proactive defenses. Manages client projects, including planning, budgeting, execution, and delivery, while mentoring teams and resolving stakeholder issues. Partners with leadership to maintain quality and timelines, conducts security research, and promotes innovation across cybersecurity practices.

Consult on Oracle application security and compliance: analyze client requirements, implement security controls, perform compliance audits, develop policies, guide regulatory adherence, train and manage junior staff, and help clients mitigate risks and protect sensitive data.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead client engagements to design and implement secure network architectures (Zero Trust, SASE/SSE, segmentation, OT security). Manage teams, mentor staff, oversee enterprise network security configurations, and ensure project delivery and quality. Collaborate with clients to align security strategies with business objectives and drive innovation in network security practices.

Lead client engagements to design and implement security, controls, and compliance within Oracle applications. Manage teams, perform audits, develop governance frameworks, advise on regulatory compliance, and mentor staff to mitigate operational risk and protect sensitive data.