Top Cyber Security Jobs in Philadelphia, PA

Leads enterprise security architecture strategy, governance, standards, and multi-year roadmaps. Establishes Zero Trust architectures, security guardrails, reference architectures, review processes, and regulatory control mappings across cloud, identity, data, network, application, AI, and OT/IoT domains. Partners with enterprise architecture, technology, legal, privacy, and compliance teams; supports transformations, acquisitions, and divestitures; drives automation, risk assessment, metrics, and audit readiness. Leads global security architects, defines operating models and career paths, and reports enterprise risk posture to executives.

Support clients on regulatory compliance and cybersecurity risk by conducting risk assessments, implementing frameworks (ISO 27001, NIST CSF), performing audits, developing compliance programs, analyzing data for recommendations, and preparing regulatory documentation while collaborating with teams and building client relationships.

Lead Workday security and compliance initiatives: analyze client needs, implement security controls and compliance programs, oversee integrations, train clients, mentor teams, and manage project quality to mitigate risk and protect sensitive data.

Lead client engagements to design and implement security, controls, and compliance within Oracle applications. Manage teams, perform audits, develop governance frameworks, advise on regulatory compliance, and mentor staff to mitigate operational risk and protect sensitive data.

Lead design and implementation of cloud, container, and application security across CSPs (IaaS/PaaS/SaaS). Manage client relationships and teams, apply DevSecOps practices, perform risk assessments and vulnerability testing, configure policy frameworks (CNAPP), and provide secure coding/cloud security training and mentorship to drive secure delivery and continuous improvement.

Lead design and implementation of cloud security strategies across IaaS, PaaS, and SaaS. Conduct risk assessments, implement IaC and automated enforcement, integrate security scanning into CI/CD, mentor junior staff, build client relationships, and deliver practical solutions to complex cloud security problems while maintaining professional standards.

Leads enterprise Identity and Access Management architecture, strategy, standards, roadmaps, and governance. Designs scalable identity solutions across cloud, hybrid, and on-premises environments, covering IGA, PAM, SSO, MFA, federation, and access governance. Partners with cybersecurity, infrastructure, application, cloud, compliance, and business teams to support Zero Trust objectives and regulatory requirements. Evaluates IAM technologies and vendors, guides architecture reviews, mentors technical staff, and advises senior leadership on identity modernization and security transformation.

Design and implement secure AWS-based systems, integrate DevSecOps practices, manage security incidents, run vulnerability assessments, and support CI/CD using CloudFormation, Terraform, GitHub, and Jenkins while collaborating with clients and cross-functional teams.

Information Security Interns will support strategic security projects, policy and standards implementation, process tracking, documentation, and ad hoc initiatives. They will collaborate with experienced security professionals, participate in workshops, analyze security tools, and help safeguard the organization’s digital environment. The role requires on-site work in Conshohocken, Pennsylvania, or Carrollton, Texas.

Lead technical discovery, design, demos, and proof-of-value engagements for enterprise security, identity, and exposure management. Advise customers and Sales on integrations, validate solutions, create customer-facing documentation, run trainings, and support events while driving technical wins and measurable business outcomes.

Lead and execute network security for Comcast platforms by owning security posture, vulnerability remediation, patch validation, secure configuration rollout, compliance support, and vendor engagement. Validate and harden software and configurations in lab environments, support audit readiness, implement access controls and secure monitoring, and coordinate cross-functional remediation and incident response activities.

Lead and scale Comcast's SOC, incident response, threat hunting, and detection capabilities. Serve as senior incident commander, build operating models and runbooks, partner with engineering to improve tools and pipelines, drive detection lifecycle and continuous improvement, manage vendors, report to executives, and develop metrics for readiness and performance.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Consult on Oracle application security and compliance: analyze client requirements, implement security controls, perform compliance audits, develop policies, guide regulatory adherence, train and manage junior staff, and help clients mitigate risks and protect sensitive data.

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.