Top Cyber Security Jobs in Pittsburgh, PA

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Leads complex insider-threat investigations across endpoint, network, cloud, identity, and related data sources. Directs technical incident response, evidence collection, containment, stakeholder communications, and case resolution. Serves as an incident commander or technical lead for significant events, develops scalable investigative automation, and prototypes scripts and capabilities for cybersecurity, digital forensics, eDiscovery, and employee-investigation workflows. Also conducts security assessments, analyzes logs, recommends corrective actions, and develops security policies and controls.

Lead and manage the enterprise vulnerability management function, coordinate enterprise responses to newly published vulnerabilities, assess and prioritize remediation, communicate risk and remediation status to senior leadership, and drive rapid, risk‑based decisions and ownership across development, infrastructure, and platform teams.

Manage and lead an overnight SOC team to evaluate, respond to, and mitigate security alerts from SIEM and security tools (EDR, NGFW, IDS/IPS, WAF, NAC). Tune SIEM to reduce false positives, extract IOCs, perform sandboxing, scope incidents, document playbooks, support audits and policy development, and ensure operational security effectiveness.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Monitors, evaluates, investigates, and mitigates cybersecurity alerts and incidents within a SOC. Uses SIEM, EDR, firewalls, IDS/IPS, antivirus, WAF, NAC, and sandboxing technologies; tunes SIEM events to reduce false positives; extracts indicators of compromise; scopes events; recommends remediation; supports security assessments, controls, vulnerability mitigation, data loss prevention, documentation, and operational security activities.

The Security Analyst will monitor security alerts, mitigate risks, conduct assessments, improve security posture, and provide incident response within the SOC.

Perform technical security evaluations, investigate incidents and data loss, review logs, recommend corrective actions, and support security posture improvements with forensic analysis and controls review.

Lead the secure design and assessment of GenAI and Agentic systems. Collaborate with teams to implement security controls in AI projects and ensure compliance with security policies.

Monitor, investigate, and remediate security alerts from SIEM and related security tools (EDR, NGFW, IDS/IPS, WAF, NAC). Tune detections, extract IOCs, sandbox malware, scope events, and perform operational SOC support to improve the organizations security posture.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Leads enterprise application security through secure code reviews, threat modeling, architecture assessments, CI/CD security controls, secure coding standards, API protections, WAF tuning, and software supply chain security. Partners with engineering, DevOps, platform, and SRE teams to remediate risks, automate controls, secure AI-enabled applications, and improve organization-wide security practices. Serves as a principal technical advisor and mentor while defining scalable guardrails, playbooks, metrics, and reference architectures.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Deliver generative AI-enabled source code review and application security engagements. Coordinate with leadership, organize resources, refine and present assessment findings, document recommendations, and mentor junior red team members. Support penetration testing projects, including external and web application testing, while managing engagement delivery and improving security assessment technologies and workflows.

Secure CrowdStrike’s software supply chain, open-source dependencies, GitHub organizations, repositories, and source-code environments. Assess risks, implement repository guardrails and secret scanning, investigate malicious packages and dependency threats, automate security checks, and guide engineering teams on secure coding and open-source compliance. The role also contributes to cross-team security initiatives, CI/CD and cloud security integrations, monitoring, and AI-enabled vulnerability triage.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.