Top Cyber Security Jobs in Pittsburgh, PA

Provide application security expertise: perform threat modeling and security assessments, guide development teams on remediating OWASP/API vulnerabilities, design and implement authentication and secure software solutions, integrate SAST/DAST/RASP into CI/CD, advise on SDLC security improvements, develop security policies, and liaise with stakeholders to reduce risk.

Develop, test, and deploy software solutions with a focus on network security. Monitor and review proxy logs, troubleshoot connectivity and access issues, enforce Zero Trust and least-privilege principles, and work with Zscaler, SWG, SSL/TLS inspection, MFA, and conditional access to secure web traffic and identity-centric controls.

Monitor, investigate, and remediate security alerts from SIEM and related security tools (EDR, NGFW, IDS/IPS, WAF, NAC). Tune detections, extract IOCs, sandbox malware, scope events, and perform operational SOC support to improve the organizations security posture.

Design, build, and maintain enterprise cryptographic programs and tooling including KMS, HSMs, PKI, tokenization, and cryptographic inventory. Lead post-quantum migration planning, ensure compliance with PCI/FIPS/NIST, produce implementation and operational documentation, support production environments, and collaborate with stakeholders to operationalize cryptographic controls and metrics.

Lead and manage the enterprise vulnerability management function, coordinate enterprise responses to newly published vulnerabilities, assess and prioritize remediation, communicate risk and remediation status to senior leadership, and drive rapid, risk‑based decisions and ownership across development, infrastructure, and platform teams.

Perform application security engineering and manual code/security reviews throughout the SDLC. Triage and remediate web application vulnerabilities, validate compensating controls, support incident response, and coach engineering teams on secure coding practices.

Provide subject-matter expertise in information security: evaluate threats, perform assessments, investigate incidents, implement controls, develop policies and procedures, mentor staff, and align security controls to enterprise frameworks.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Run day-to-day marketing for AppSec, AI/ML Security, and Research & Engineering practices: produce technical content, own social and event presence, run demand-generation campaigns, enable sales, build analytics and attribution, and coordinate cross-practice coverage with engineering and GTM teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

The Security Specialist is responsible for implementing and managing Akamai security controls, monitoring traffic for threats, tuning policies, and collaborating with security teams for incident response.

Lead security architecture for enterprise systems: define standards, review designs, govern adoption, advise engineering on cloud and emerging technologies, detect design gaps, and improve security practices across AWS and AI domains while balancing risk and business needs.

Design, implement, and operationally support enterprise security platforms across cloud, endpoint, identity, network, and SaaS. Lead detection, telemetry, vulnerability management, automation, and incident escalation. Partner with stakeholders to deliver secure, scalable services, improve security posture and Zero Trust objectives, and mentor engineers while maintaining documentation, KPIs, and on-call support.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead competitive intelligence for CrowdStrike's cloud security portfolio, analyzing competitors' technical capabilities and market positioning. Provide deal support, win/loss analysis, and actionable guidance to Product, Sales, and senior leadership. Develop competitive materials, readiness plans, and recommendations to influence product strategy and GTM. Work autonomously and collaborate cross-functionally globally.

Assess Falcon environments, recommend and document security remediations, troubleshoot incidents with support and internal teams, produce service reports, and ensure customers meet Falcon Complete standards and SLAs.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Assess and harden CrowdStrikes software supply chain by securing open-source dependencies, GitHub organizations, and repository configurations. Build and maintain detection and automation tooling, investigate malicious packages and vulnerabilities, and collaborate across teams to improve SDLC security, code integrity, and artifact verification.

Build and maintain Premonition, an internal platform for managing, deploying, and monitoring agentic LLM pipelines. Develop composable agents, tools, APIs, orchestration, and infrastructure on AWS/EKS. Optimize high-performance data layers (Iceberg/Delta/Hudi), embedded engines (DuckDB, LanceDB), and ensure observability, safety, and secure integration with SOC, IR, and threat-hunting workflows.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Designs, implements, and maintains enterprise Data Loss Prevention controls and policies. Administers Symantec DLP and Microsoft Purview, conducts data discovery/classification and insider-threat investigations, configures EDM rules, supports endpoint DLP, and collaborates with Security Operations, Legal, HR, and Compliance on incident response, governance, and reporting.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.