Top Senior Cyber Security Jobs in Pittsburgh, PA

Lead the secure design and assessment of GenAI and Agentic systems. Collaborate with teams to implement security controls in AI projects and ensure compliance with security policies.

Provide physical security intelligence and investigations supporting executive protection, crisis management, insider threat, and threat monitoring. Produce intelligence products, conduct background and travel threat assessments, analyze tactical alerts, brief leadership, and partner with security teams to mitigate risks and respond to emerging events.

The Security Expert leads IAM governance in a cloud environment, ensuring compliance with SOX, managing access controls, and supporting audits.

Design, build, and maintain enterprise cryptographic programs and tooling including KMS, HSMs, PKI, tokenization, and cryptographic inventory. Lead post-quantum migration planning, ensure compliance with PCI/FIPS/NIST, produce implementation and operational documentation, support production environments, and collaborate with stakeholders to operationalize cryptographic controls and metrics.

Design, implement, and manage Microsoft Entra ID/Azure AD identity and access solutions. Build Conditional Access and MFA/passwordless strategies, manage PIM and Azure RBAC, conduct role/access governance and reviews, troubleshoot authentication issues, and collaborate with security, infrastructure, and app teams to enforce least-privilege and compliance.

Lead customer trust and security governance: oversee contract reviews, security questionnaires, and escalations; partner with Legal, Sales, Product, and Procurement; develop templates, policies, playbooks, metrics, and awareness programs; and apply automation and AI to scale workflows and reporting.

The Sr. Infrastructure Security Engineer is responsible for protecting patient data, enhancing cloud infrastructure security, and collaborating with engineering teams to implement effective security practices.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Run day-to-day marketing for AppSec, AI/ML Security, and Research & Engineering practices: produce technical content, own social and event presence, run demand-generation campaigns, enable sales, build analytics and attribution, and coordinate cross-practice coverage with engineering and GTM teams.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Lead Zapiers security strategy for an AI-native SaaS platform. Own App and Infrastructure Security, Detection & Response, GRC, risk management, incident response, bug bounty triage, and enterprise security enablement. Partner with Product, Engineering, Legal, and GTM to embed secure-by-default design, shape AI-specific controls, support enterprise deals, and build a high-performing security engineering organization.

Lead security architecture for enterprise systems: define standards, review designs, govern adoption, advise engineering on cloud and emerging technologies, detect design gaps, and improve security practices across AWS and AI domains while balancing risk and business needs.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and optimize ML models, develop automation playbooks and Falcon API integrations, troubleshoot AI-related issues, support incident response and threat hunting, and deliver customer workshops and collateral. Up to 25% travel.

Act as the technical presales lead for AI agent and cloud identity security across North America: scope engagements, design and run POCs and architectures across AWS/Azure/GCP, secure non-human and machine identities, create repeatable technical assets, and partner with account teams to close deals.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

The Senior Product Security Engineer will manage security intelligence across platforms, identify vulnerabilities, improve developer tools, and assist incident response teams, focusing on security and fraud in application design.