Top Senior Cyber Security Jobs in Pittsburgh, PA

Monitor, evaluate, respond to, and mitigate security alerts from SIEM and IDS/IPS; tune SIEM to reduce false positives; improve network visibility; perform intrusion detection/prevention subject-matter tasks; conduct security assessments and investigations; develop security policies and support operational security functions.

Lead security architecture for enterprise systems: define standards, review designs, govern adoption, advise engineering on cloud and emerging technologies, detect design gaps, and improve security practices across AWS and AI domains while balancing risk and business needs.

Manage and lead an overnight SOC team to evaluate, respond to, and mitigate security alerts from SIEM and security tools (EDR, NGFW, IDS/IPS, WAF, NAC). Tune SIEM to reduce false positives, extract IOCs, perform sandboxing, scope incidents, document playbooks, support audits and policy development, and ensure operational security effectiveness.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Lead product strategy and roadmap for mobile and online banking security. Own authentication, MFA, device trust, session management, and access recovery across iOS, Android, and web. Coordinate cross-functional delivery with Cybersecurity, Fraud, Risk, Compliance, and Technology. Drive execution, governance, metrics, and regulatory support while mentoring product managers to reduce fraud risk and improve customer trust at scale.

Serve as a senior embedded cybersecurity consultant across the customer lifecycle: secure technical wins in pre-sales, run POVs, advise C-level and technical stakeholders, design cyber skills programs and crisis simulations, drive platform adoption and roadmaps, operationalize Immersive One with metrics and EBRs, and act as the customer liaison to sales, product, and engineering to improve cyber workforce resilience.

The Security Specialist manages the workforce identity access management product and backlog, collaborates with engineering teams, supports delivery planning, and ensures compliance with security protocols while acting as a liaison to business stakeholders.

Design and implement multitenant workload and network isolation for bare-metal and virtualized GPU infrastructure. Harden Linux kernel and container runtimes, perform threat modeling and penetration testing, write low-level security code (C/Go/Rust), mitigate GPU and PCIe security risks, and lead incident response and forensic work for ephemeral container environments.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead large-scale collection and analysis of deep and dark web data, build and maintain production-grade automated collection systems (LLM-integrated), operate Docker/cloud-based pipelines and APIs, respond to collection failures and incidents, perform threat actor research, and apply OPSEC tradecraft while collaborating globally.

Lead and deliver generative-AI enabled source code review application security engagements, coordinate stakeholders, mentor junior red team members, document recommendations, and perform/manager penetration and web application tests.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Lead OSINT and engagement-driven investigations into Russian-language eCrime actors across surface, deep, and dark web. Collect actionable intelligence, produce contextual internal reports, collaborate with analytic teams, employ secure virtual OPSEC tradecraft, and leverage AI to accelerate research and decision-making under tight deadlines.

Lead and scale enterprise security engineering capabilities: define roadmap, drive secure platform and application development, manage large teams, influence security strategy, and partner across IT and business to deliver cloud security, automation, and platform modernization initiatives.