Top Cyber Security Jobs in Pittsburgh, PA

Lead the secure design and assessment of GenAI and Agentic systems. Collaborate with teams to implement security controls in AI projects and ensure compliance with security policies.

Provide application security expertise: perform threat modeling and security assessments, guide development teams on remediating OWASP/API vulnerabilities, design and implement authentication and secure software solutions, integrate SAST/DAST/RASP into CI/CD, advise on SDLC security improvements, develop security policies, and liaise with stakeholders to reduce risk.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead planning, deployment, tuning, and operational support of CrowdStrike Falcon's AI/ML detection and response capabilities. Implement and troubleshoot AI-driven detection models, automation playbooks, API integrations, and threat-hunting for customers. Provide training, mentorship, and customer-facing collateral while optimizing detection efficacy and integrating Falcon into customers' security workflows.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Network Security Architect will assess network security, guide teams, enhance security policies, design network solutions, and mentor engineers while aligning with a Zero Trust Strategy.

Monitor, investigate, and remediate security alerts from SIEM and related security tools (EDR, NGFW, IDS/IPS, WAF, NAC). Tune detections, extract IOCs, sandbox malware, scope events, and perform operational SOC support to improve the organizations security posture.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Lead technical marketing for Falcon Secure Access by creating demos, labs, workshops, and technical content that translate secure access, browser security, Zero Trust, and AI security capabilities into market-facing messaging, sales enablement, and go-to-market strategy. Collaborate cross-functionally to drive adoption and competitive differentiation.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

As a Security Engineer, you will conduct security assessments, develop security tools, perform architecture reviews, and collaborate on advanced security research.

Lead and scale an AI Security incubation team to drive technical GTM, recruit and mentor principal AI security specialists, build repeatable POVs and sales playbooks, advise C-level customers on secure AI deployments (RAG, agents, prompt workflows), and channel field insights into product and engineering roadmaps while supporting high-value deals.

The Staff Cloud Security Engineer will secure cloud infrastructure for Huntress, focusing on product security, risk management, and compliance for a SaaS platform. Responsibilities include collaborating with DevOps, managing vulnerabilities, threat modeling, and developing incident response strategies.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead and mentor a small IT security engineering team to deploy and operate enterprise-grade Zero Trust security across networks, endpoints, applications, and cloud. Drive Customer Zero initiatives, manage cross-functional security projects, optimize policies (SSL decryption, segmentation, access control), and serve as an internal subject-matter expert.

Design, build, and architect IAM-focused security software, APIs, and automation. Integrate security into CI/CD and cloud-native environments, perform code reviews and threat modeling, monitor security events, support incident response, and collaborate with infra/app teams to embed identity best practices.