Top Cyber Security Jobs in Pittsburgh, PA

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead large-scale collection and analysis of deep and dark web data, build and maintain production-grade automated collection systems (LLM-integrated), operate Docker/cloud-based pipelines and APIs, respond to collection failures and incidents, perform threat actor research, and apply OPSEC tradecraft while collaborating globally.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Lead OSINT and engagement-driven investigations into Russian-language eCrime actors across surface, deep, and dark web. Collect actionable intelligence, produce contextual internal reports, collaborate with analytic teams, employ secure virtual OPSEC tradecraft, and leverage AI to accelerate research and decision-making under tight deadlines.

Lead and scale enterprise security engineering capabilities: define roadmap, drive secure platform and application development, manage large teams, influence security strategy, and partner across IT and business to deliver cloud security, automation, and platform modernization initiatives.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Lead the Application Security Practice, overseeing team performance and business growth while delivering high-quality security consulting services and fostering innovation through AI integration and research contributions.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Perform technical security evaluations, investigate incidents and data loss, review logs, recommend corrective actions, and support security posture improvements with forensic analysis and controls review.

Lead and scale enterprise WIAM governance: define policy and control standards, centralize governance, drive risk-to-control traceability, prioritize remediation, monitor KPIs and audit readiness, advise senior stakeholders, and mentor staff to strengthen control effectiveness and regulatory compliance.

The Security Analyst evaluates security alerts, mitigates risks, and supports operational activities in the SOC, enhancing the organization's security posture.

The Security Analyst will monitor security alerts, mitigate risks, conduct assessments, improve security posture, and provide incident response within the SOC.

Lead the secure design and assessment of GenAI and Agentic systems. Collaborate with teams to implement security controls in AI projects and ensure compliance with security policies.