Top Cyber Security Jobs in Pittsburgh, PA

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Build and operate Dave’s technology governance program covering cyber risk, IT controls, change and incident management, business continuity, policies, and audit readiness. Own control inventories, risk registers, exceptions, assurance programs, and remediation accountability across SOX ITGC, PCI, SOC 2, and related frameworks. Partner with Security, IT, Engineering, Data, Internal Audit, Legal, and external assessors to establish practical controls, escalate material risks, and improve governance through automation and AI while maintaining appropriate oversight.

Leads cybersecurity consulting engagements for large, complex organizations, overseeing project delivery, client relationships, security strategy, governance, risk management, proposals, statements of work, and business development. Provides thought leadership, advises senior stakeholders, guides cybersecurity solutions and emerging-threat initiatives, supports sales growth, and mentors junior team members. Travel up to 25% is required.

Lead Slate’s company-wide cybersecurity program across corporate IT, cloud, applications, vehicle systems, manufacturing OT, enterprise platforms, privacy, compliance, security operations, and supply-chain risk. Set strategy, governance, budgets, and risk priorities; mature audit readiness; build and lead the security team; establish vehicle and OT security programs; oversee identity, incident response, threat intelligence, vendor risk, and secure development; and communicate security posture to executives and the board.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Perform advanced security monitoring, threat hunting, incident investigation, and triage across endpoint, server, and network environments. Analyze SIEM and endpoint data, identify indicators of attack and compromise, map customer use cases to MITRE ATT&CK, scope incidents, provide recommendations, maintain documentation, and participate in an after-hours incident-controller rotation.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Lead enterprise-wide security compliance and regulatory authorization initiatives across global cloud environments. Architect unified control frameworks, map controls to federal, defense, international, and commercial standards, manage audits and assessments, coordinate evidence and remediation, and communicate compliance risks to executives, government stakeholders, assessors, and defense agencies. Drive continuous monitoring and recurring audit readiness across multiple compliance lifecycles.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Monitor, investigate, triage, and respond to security events across customer environments. The analyst examines endpoint, network, identity, cloud, and log telemetry; supports incident containment and remediation; documents investigations; communicates with customers; escalates high-risk incidents; and improves detection, automation, and security operations processes.

Build and maintain custom security tools, middleware, automation, APIs, integrations, dashboards, and security workflows. Integrate identity, endpoint, SIEM, SaaS, and other security platforms using APIs, cloud services, containers, and CI/CD. Translate security policies into secure, code-driven solutions while supporting SOAR, continuous monitoring, compliance, and cross-functional collaboration.

Lead the creation and growth of a new OT/IoT cybersecurity practice, owning its P&L, offerings, pricing, partnerships, hiring, delivery quality, and go-to-market strategy. Serve as a senior technical SME and trusted advisor for client assessments, regulatory compliance, executive workshops, roadmaps, and security engagements. Shape and close consulting opportunities, develop methodologies and deliverables, manage teams, and advise organizations on ICS/SCADA, segmentation, monitoring, IT/OT convergence, and AI-related risks.

Leads Security Operations Center activities, including incident response, complex threat investigations, detection engineering, SIEM development, security tooling, log pipeline management, vulnerability remediation, risk analysis, automation, and operational reporting. Serves as the senior escalation point and incident coordinator, leading containment and eradication while collaborating with technical and business stakeholders. The role is fully remote within approved states and may require extended or non-business hours during crises.

Own Hightouch’s application security posture as the first dedicated security hire. Secure multi-tenant systems, sub-tenant access controls, distributed architecture, internet-facing APIs, and multi-region, multi-cloud infrastructure. Lead threat modeling, compute isolation, rate limiting, abuse detection, authorization, privacy controls, and security program initiatives. The role is highly hands-on, emphasizing code-level fixes, architecture influence, roadmap ownership, and collaboration with engineering teams.

Leads governance, risk, and compliance engagements for clients, including vCISO accounts. Develops security roadmaps, conducts maturity and risk assessments, governs incident response and policies, supports audit readiness, advises on budgets, delivers executive communications, and mentors security advisory staff.

Lead customer-facing application security engagements, including architecture reviews, threat modeling, secure code reviews, penetration testing, and cloud security assessments. Translate technical risks into actionable remediation guidance, communicate findings to technical and executive stakeholders, develop assessment methodologies and automation, define secure development standards, research emerging threats, and mentor consultants while helping build Salesforce’s Professional Services Security Assurance practice.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Leads regulatory and security compliance for evaluating agentic AI vendors within a CMS Fraud Prevention Services authorization boundary. Assesses vendor security postures, authors control inheritance, boundary, data-flow, SSP, POA&M, PIA/SORN, and compliance artifacts, and coordinates with CMS security stakeholders. Advises on AI-specific risks involving data retention, prompt logging, PHI, tool authorization, and RBAC. Requires extensive federal compliance experience, AWS security knowledge, HIPAA/FISMA expertise, and the ability to obtain Public Trust clearance.