Top Cyber Security Jobs in Philadelphia, PA

Conducts penetration testing, adversary simulations, red team and purple team exercises across on-premises, cloud, and hybrid environments. Identifies and documents vulnerabilities, validates exploitation, maps attack techniques, and recommends remediation. Partners with detection, engineering, incident response, vulnerability management, infrastructure, and cloud teams to improve security controls. Supports offensive security tooling, automation, repeatable testing methods, and playbooks in a highly regulated pharmaceutical environment.

Designs and implements secure AWS infrastructure, integrating development, operations, and security practices. Automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, implements security controls, manages incident remediation, and supports CI/CD through Jenkins and GitLab. The role also uses Python, CrowdStrike, and Palo Alto Networks while collaborating with clients and technical teams to improve cybersecurity, reliability, and infrastructure performance.

Leads client-facing enterprise and cloud security engagements across IaaS, PaaS, and SaaS environments. Responsibilities include cloud security architecture, control design, risk assessments, vulnerability testing, security reviews, threat monitoring, and coordinating network, endpoint, identity, and cloud infrastructure safeguards. The role translates technical findings into business-aligned recommendations, directs teams through complex challenges, coaches team members, and prioritizes critical risks for client decision-making.

Designs and implements secure AWS infrastructure, integrates development, operations, and security practices, automates infrastructure with CloudFormation and Terraform, conducts vulnerability assessments, manages incident remediation, and deploys solutions through Jenkins and GitLab. The role also requires collaboration with clients and technical teams, cybersecurity tool expertise, analytical problem-solving, and leadership in complex environments.

Secure Runpod’s customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews, vulnerability remediation, DevSecOps pipelines, application-layer defenses, security training, compliance support, and bug bounty triage. The role combines software development with application security across Python, Go, and JavaScript/TypeScript systems, focusing on secure-by-design practices and automated security controls.

Build and maintain application security tooling, automation, libraries, and custom Semgrep or CodeQL rules. Integrate secure development controls into SDLC workflows, conduct targeted code reviews, support vulnerability remediation, and advise engineering, product, GRC, and AI/ML teams across web, mobile, and desktop products. The role also contributes to threat modeling, security education, penetration-test and bug-bounty response, and potentially security on-call rotations.

Leads end-to-end delivery of AI security solutions for enterprise public-sector customers. Deploys and optimizes Zscaler AI Guard, AI Protect, and SPLX across cloud and Kubernetes environments; designs networking and firewall connectivity; performs automated AI red-teaming, vulnerability probing, and lab replication. Acts as a trusted technical advisor, produces documentation and demos, advocates customer needs, and supports product development. Requires expertise in LLMs, cloud networking, APIs, containers, and security, plus U.S. citizenship, clearance eligibility, and travel up to 40%.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead infrastructure security and DevSecOps strategy across AWS environments. Implement cloud security controls for identity, networking, encryption, secrets, logging, IaC, CI/CD, containers, and software supply chains. Partner with AppSec and InfoSec on testing, audits, vulnerability prioritization, incident response, remediation, and risk management. This player-coach role also develops the security practice, influences cross-functional teams, and may hire and manage engineers.

Serve as an embedded security partner to business, product, data, and technology teams. Assess architectures, conduct threat reviews, develop secure-by-design patterns, guide SaaS and vendor selection, and translate security requirements into practical controls. Support identity, infrastructure, AI workflows, data strategy, M&A integrations, and automated guardrails while enabling teams through training and collaboration.

Designs, deploys, and operates IAM controls across cloud and on-premises infrastructure. The role secures human, service, workload, and AI-agent identities through authentication, authorization, least privilege, lifecycle automation, policy guardrails, monitoring, and incident response. Responsibilities include implementing IAM integrations, access reviews, threat modeling, security automation, and reliable on-call operations while partnering with infrastructure, platform, and incident response teams.

Design, deploy, and operate security controls for Dropbox’s AI and agentic infrastructure across cloud, Kubernetes, data stores, and on-premise systems. Secure authentication, authorization, networking, AI tools, and non-human workloads while addressing prompt injection, poisoning, supply-chain, and MCP risks. Lead security initiatives, harden infrastructure, automate policy and security operations, and collaborate cross-functionally to protect customer data. Participate in on-call rotations as required.

Supports federal security certification and authorization activities, coordinates assessments with independent assessors, validates control evidence, drives remediation and continuous monitoring, and evaluates security incidents for federal reporting obligations. The role also develops scalable compliance processes for cloud services and authorized boundaries, collaborating with technical and nontechnical stakeholders. It requires expertise in NIST 800-53, FedRAMP, DoD Cloud Computing SRG, CNSSI 1253, and federal cloud security compliance.

Leads information security strategy and execution for the Federal Reserve System’s District IT and Corporate Services portfolio. Advises senior technology and business leaders, manages cybersecurity risk and tolerance, develops resilient security practices, and partners across a matrixed organization to deliver secure technology services. Builds high-performing, AI-savvy teams, drives change and innovation, manages stakeholders and external partners, and aligns security initiatives with business objectives and system standards.

Leads information security strategy and execution for the Federal Reserve’s Central Bank Services portfolio, including Markets, Credit Risk Management, and Reserves. Advises senior business and technology leaders, manages cybersecurity risk and resilience, partners across a matrixed organization, develops security strategies, builds AI-savvy teams, drives change and innovation, and ensures secure, reliable technology delivery aligned with business objectives and System standards.

Leads information security strategy and execution for Federal Reserve System IT Operations and Policy portfolios. Advises the System CISO and business and technology leaders, manages cybersecurity risk and resilience, develops secure technology practices, and partners across infrastructure, architecture, data, innovation, and IT business teams. Builds AI-savvy security teams, drives organizational change, strengthens governance, and ensures secure, reliable technology delivery across a geographically dispersed enterprise.

Design, build, and operate secure, reliable cloud software platforms and distributed systems. Develop backend APIs, data ingestion pipelines, workflows, automation, and agentic pipelines. Lead architecture, implementation, testing, deployment, observability, and production support while writing high-quality Python code. Provide technical leadership, mentor engineers, document systems, and evaluate cloud-native, AI, and workflow technologies.

Drives growth of CDW’s security portfolio among state and local government customers. Builds executive relationships with CIOs and CISOs, leads security opportunities from discovery through close, and positions broad security solutions across identity, cloud, risk, compliance, threat management, and secure infrastructure. Partners with sales teams, solution architects, delivery teams, vendors, and public-sector stakeholders to develop integrated solutions, manage procurement cycles, coordinate events, and maintain accurate forecasts. Regional travel is required as needed.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.

Monitor and triage security alerts, support incident response and vulnerability remediation, review logs, tune SIEM detections, and maintain security documentation. The role contributes to risk assessments, control improvements, automation, dashboards, and operational playbooks while collaborating with internal teams. It requires familiarity with EDR, SIEM/SOAR, CSPM, vulnerability management, firewalls, cloud environments, networking, operating systems, security frameworks, and common attack techniques.

Leads enterprise data protection and AI security strategy, architecture, and execution. Builds and manages security engineering teams; oversees Microsoft Purview classification, labeling, DLP, endpoint protection, insider risk, and DSPM. Defines security controls for generative AI, LLMs, agents, and AI-enabled SaaS; guides AI governance and vendor assessments. Partners with Security Operations and Incident Response to address data exfiltration, insider threats, and AI-related incidents while meeting regulatory and contractual obligations.

Leads SentiLink’s security governance, risk, compliance, assurance, and third-party risk programs. Owns FedRAMP, SOC 2, PCI DSS, audits, continuous monitoring, security policies, customer assessments, and risk remediation. Manages and develops security professionals, evaluates technical risks and controls in an AWS environment, improves program maturity, and partners with engineering, legal, auditors, regulators, and business stakeholders to reduce organizational risk.

Own and coordinate cross-functional fraud and abuse prevention programs across Trust and Safety, Security, Engineering, Product, Legal, and Finance. Translate abuse trends into prioritized defenses, business cases, metrics, and implementation plans. Partner on payment fraud, chargebacks, account verification, AI-based risk detection, and incident escalation. Drive initiatives to completion without direct authority while balancing fraud risk with legitimate-user experience.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads customer-facing security assurance for enterprise accounts, addressing security questionnaires, risk assessments, RFPs, and contractual requirements. Reviews security and privacy clauses, negotiates risk-based terms with Legal, Sales, Product, and Procurement, and develops security content, playbooks, training, and Trust Center resources. Advises customers on compliance frameworks, cloud and SaaS security, and DevSecOps practices while supporting revenue growth, roadmap decisions, process improvement, and team mentorship.