Top Senior Cyber Security Jobs in Pittsburgh, PA

Lead security operations and incident response engineering across hybrid cloud environments. Conduct deep-dive investigations, digital forensics, threat modeling, detection engineering, SIEM tuning, threat intelligence review, and automated remediation. Develop incident response playbooks, maintain investigation documentation, apply MITRE ATT&CK, and support incident command and SOC process optimization.

Designs, deploys, and optimizes enterprise network security solutions for clients. Leads firewall, SD-WAN, segmentation, secure access, identity, and SASE implementations; resolves critical incidents; performs security assessments; advises technical and executive stakeholders; collaborates across cloud and infrastructure teams; and mentors junior engineers.

Lead identity and access management implementations for federal and enterprise customers. Responsibilities include IAM solution design, architecture, deployment, integration, testing, troubleshooting, documentation, customer workshops, and knowledge transfer. The consultant provides technical leadership, advises stakeholders on authentication and identity governance, collaborates across project teams, and mentors junior consultants. The role requires extensive IAM consulting experience, strong security technology knowledge, active Top Secret clearance with full-scope polygraph, and customer-facing technical leadership.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

Leads Qualys’ federal product security and compliance programs, overseeing FedRAMP Moderate and High authorizations and preparing for DoD IL4/IL5 authorizations. Manages federal security personnel, continuous monitoring, POA&M processes, audits, incident response, boundary controls, and executive risk reporting. Partners with engineering, DevOps, SRE, and R&D teams to ensure SaaS products meet federal security requirements.

Designs and builds secure AWS infrastructure for a regulated SaaS platform. Responsibilities include cloud security architecture, IAM, networking, containers, encryption, logging, monitoring, automated guardrails, risk remediation, reference architectures, and engineering mentorship. The role partners with application security and infrastructure teams to secure AWS environments across design and production, supporting compliance for financial services customers.

Design and lead the application security program centered on Wiz. Automate security throughout the SDLC, including code, dependency, secrets, container, infrastructure-as-code, and release scanning. Establish threat modeling, secure design reviews, and guardrails for AI-assisted development. Improve developer adoption by delivering accurate findings within existing tools, while mentoring the AppSec team and partnering with cloud and AI security architects.

Serves as the primary ISSO for classified, air-gapped federal cloud environments. Manages ATO/RMF documentation, NIST 800-53 controls, DISA STIG compliance, Tenable.sc and Nessus vulnerability scanning, offline content updates, remediation tracking, audit readiness, incident response, and continuous monitoring. Partners with cloud and infrastructure teams to improve secure configurations and automate vulnerability and compliance workflows.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.

Owns and strengthens the security posture of cloud-based SaaS and Microsoft 365 environments. Responsibilities include vulnerability management, incident response, cloud and endpoint hardening, identity and data protection, secure configuration, monitoring, compliance evidence, customer security reviews, and risk management aligned with HITRUST, HIPAA, NIST, and related frameworks.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Information Security Engineer responsible for Azure cloud security projects, vulnerability remediation, security operations, AI security governance, vendor risk assessments, architecture reviews, and quarterly access reviews. The role partners with development and architecture teams, evaluates AI agents and MCP servers, participates in CrowdStrike-based on-call operations, and supports post-quantum cryptography readiness. Candidates should have at least five years of security or cloud security experience and be comfortable working independently across varied security initiatives.

Own the strategy, roadmap, delivery, and lifecycle of enterprise data security products. Lead data governance, discovery, classification, DLP, access governance, compliance, and secure-by-design capabilities. Manage backlogs, Agile delivery, KPIs, stakeholder communication, and risk reduction outcomes while integrating AI to improve security workflows and productivity.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.