Top Senior Cyber Security Jobs in Pittsburgh, PA

Monitors SIEM dashboards, correlates logs across security and cloud sources, investigates alerts, assesses threats, performs preliminary incident triage, tunes detection rules, documents findings, and escalates high-risk events. The analyst supports continuous monitoring, SOC playbooks, detection use cases, reporting, and coordination with incident response and engineering teams in a DoD-aligned environment.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Assesses and documents security controls for regulated university research, audits IT systems, identifies and closes risks, and manages compliance with CMMC, NIST 800-171, and HIPAA. The role develops policies, procedures, System Security Plans, training, and evidence; leads compliance projects and continuous monitoring; evaluates third-party risks; advises researchers and stakeholders; and supports security operations and incident response for research systems.

Supports cybersecurity and Risk Management Framework activities for C-17 training systems. Performs vulnerability assessments, compliance scans, audits, risk analyses, incident response, continuous monitoring, and accreditation documentation. Maintains security authorization packages, integrates controls into sustainment activities, provides secure configuration guidance, and coordinates with engineering, operations, government, and contractor stakeholders. Frequent travel to customer and site locations is required.

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

Conduct research on AI system robustness and vulnerabilities, reverse engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, advise government and industry, and mentor peers while advancing AI security practices.

Build and deploy machine-learning prototypes and tools for AI security; analyze large cybersecurity datasets; support AI red teaming and adversarial ML; collaborate with researchers to translate research into operational capabilities.

Conduct applied security research across network, system, software, and hardware layers; develop prototypes and analyses; advise US government stakeholders; perform exploit development, protocol and traffic analysis, and RF/SDR investigations.

Lead research on AI system robustness and vulnerabilities, reverse-engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, and advise government and industry stakeholders to advance AI security.

Lead applied security research into system and network behaviors, analyze deviations between expected and real-world implementations, develop prototypes (exploits, traffic analysis, extraction tools), and communicate findings to US Government stakeholders. Work includes forensics, incident response, and RF/SDR analysis.

Implement and support SailPoint IGA solutions (IdentityNow/IIQ), configure LCM workflows and connectors, create SoD rules, manage access provisioning/deprovisioning, remediate audit findings, train teammates, and support incident/problem resolution to meet IAM transformation objectives.

Lead a global engineering team to design, deploy, operate, and migrate physical security platforms (Genetec access control and video). Manage Genetec Security Center operations, legacy system cutovers, firmware/patching, incident management, API integrations, and onboarding of biometrics/video analytics. Partner with Network, Cybersecurity, Risk, Facilities, and stakeholders; define KPIs/OKRs and drive continuous improvement.

Lead architecture, development, and maintenance of SailPoint IdentityIQ solutions; troubleshoot and remediate production provisioning issues; onboard applications; define standards; provide technical leadership and mentor junior team members to deliver scalable IAM solutions.