Top Senior Cyber Security Jobs in Pittsburgh, PA

Design, build, and maintain enterprise cryptographic programs and tooling including KMS, HSMs, PKI, tokenization, and cryptographic inventory. Lead post-quantum migration planning, ensure compliance with PCI/FIPS/NIST, produce implementation and operational documentation, support production environments, and collaborate with stakeholders to operationalize cryptographic controls and metrics.

Lead and manage the enterprise vulnerability management function, coordinate enterprise responses to newly published vulnerabilities, assess and prioritize remediation, communicate risk and remediation status to senior leadership, and drive rapid, risk‑based decisions and ownership across development, infrastructure, and platform teams.

Provide subject-matter expertise in information security: evaluate threats, perform assessments, investigate incidents, implement controls, develop policies and procedures, mentor staff, and align security controls to enterprise frameworks.

Lead security architecture for enterprise systems: define standards, review designs, govern adoption, advise engineering on cloud and emerging technologies, detect design gaps, and improve security practices across AWS and AI domains while balancing risk and business needs.

Build and maintain Premonition, an internal platform for managing, deploying, and monitoring agentic LLM pipelines. Develop composable agents, tools, APIs, orchestration, and infrastructure on AWS/EKS. Optimize high-performance data layers (Iceberg/Delta/Hudi), embedded engines (DuckDB, LanceDB), and ensure observability, safety, and secure integration with SOC, IR, and threat-hunting workflows.

Ensure Rubrik products meet security standards by integrating AppSec into the SDLC, performing automated and manual assessments, threat modeling, hardening applications and deployments, tracking AppSec metrics, and producing security guidance for engineering and operations teams.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Act as the technical presales lead for AI agent and cloud identity security across North America: scope engagements, design and run POCs and architectures across AWS/Azure/GCP, secure non-human and machine identities, create repeatable technical assets, and partner with account teams to close deals.

Lead and perform security evaluations, assessments, investigations, and mitigation activities across information and physical security domains. Advise stakeholders, develop policies and controls, review logs, coordinate DLP and remediation efforts, and mentor staff to align area controls with enterprise security framework.

The Senior Security Engineer will design secure development lifecycles, integrate security tools, lead remediation of security issues, and mentor teammates, ensuring systems resilience and security across DraftKings.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and troubleshoot AI-driven detection models, automation playbooks, API integrations, and threat-hunting for customers. Provide training, mentorship, and customer-facing collateral while optimizing detection efficacy and integrating Falcon into customers' security workflows.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

As a Sr. Product Security Engineer, you will focus on network security, identifying gaps, architecting solutions, and leading cross-functional security initiatives.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Perform SAST and manual code security testing to identify and validate vulnerabilities, triage and report findings, assist developers with remediation, onboard teams to the SAST platform, and evaluate/enhance SAST tooling and CI/CD scan orchestration to shift security left.

Lead product marketing for the North America region: drive product launches, craft positioning and content, build competitive intelligence, enable sales with demos and materials, coordinate analyst and event messaging, and create demand-generating thought leadership.

Lead and grow a security engineering team to design and operate cloud-native security controls, drive DevSecOps practices, conduct threat modeling and incident response, partner cross-functionally on security roadmaps, and ensure compliance with frameworks (NIST, SOC 2, ISO, etc.). Responsible for vulnerability management, identity and access controls, observability/SIEM, and security automation.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead and scale enterprise security engineering capabilities: define roadmap, drive secure platform and application development, manage large teams, influence security strategy, and partner across IT and business to deliver cloud security, automation, and platform modernization initiatives.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.