Top Cyber Security Jobs in Pittsburgh, PA

Perform application security engineering and manual code/security reviews throughout the SDLC. Triage and remediate web application vulnerabilities, validate compensating controls, support incident response, and coach engineering teams on secure coding practices.

Lead security architecture for enterprise systems: define standards, review designs, govern adoption, advise engineering on cloud and emerging technologies, detect design gaps, and improve security practices across AWS and AI domains while balancing risk and business needs.

Manage and lead an overnight SOC team to evaluate, respond to, and mitigate security alerts from SIEM and security tools (EDR, NGFW, IDS/IPS, WAF, NAC). Tune SIEM to reduce false positives, extract IOCs, perform sandboxing, scope incidents, document playbooks, support audits and policy development, and ensure operational security effectiveness.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Lead product strategy and roadmap for mobile and online banking security. Own authentication, MFA, device trust, session management, and access recovery across iOS, Android, and web. Coordinate cross-functional delivery with Cybersecurity, Fraud, Risk, Compliance, and Technology. Drive execution, governance, metrics, and regulatory support while mentoring product managers to reduce fraud risk and improve customer trust at scale.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The Security Specialist manages the workforce identity access management product and backlog, collaborates with engineering teams, supports delivery planning, and ensures compliance with security protocols while acting as a liaison to business stakeholders.

The AI Security Consultant will enhance security programs, secure AI systems, engage in technical analysis, and report findings. They will also contribute to thought leadership while ensuring high-quality service delivery.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead product strategy and execution for security, compliance, and public-sector capabilities in MongoDB Atlas for Government. Translate FedRAMP/DoD/NIST requirements into roadmaps, drive multi-team programs, align senior stakeholders, enable audit readiness, and support market expansion and GTM for regulated industries.

Monitor, investigate, and remediate security alerts from SIEM and related tools (EDR, NGFWs, IDS/IPS, WAF, NAC). Tune SIEM to reduce false positives, extract IOCs, sandbox malicious samples, scope incidents, and provide operational SOC support to improve the organization's security posture.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

This intern role in Federal Security Operations focuses on cybersecurity, project tracking, and maintaining relationships with customer stakeholders in a mission-driven environment.

Lead GameChanger's Information Security and Technology organization, owning strategy, roadmaps, and teams across product/cloud/AI security, security operations, GRC, vulnerability management, and internal IT. Partner with engineering, product, legal, and parent-company security to manage risk, incident response, and secure adoption of AI while supporting a remote-first workforce.

Triage, investigate, and remediate security alerts from the Huntress platform. Perform forensic review of EDR telemetry, malware analysis, and cloud/M365 investigations. Escalate incidents, contribute to detection engineering, and support SOC operations and partner outcomes.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.