Top Cyber Security Jobs in Pittsburgh, PA

Develop and lead Gainsight’s information security strategy, policies, and procedures. Manage security leadership, architecture, identity management, compliance, risk assessments, vulnerability testing, and threat mitigation. Ensure adherence to GDPR, HIPAA, ISO 27001, SOC 2, and related standards. Present security posture, metrics, and recommendations to executive leadership while collaborating with Engineering, IT, and Security teams in a SaaS environment.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.

Evaluates and monitors information security, privacy, and AI-related controls; coordinates internal and external audit engagements; maintains control evidence; performs risk-based monitoring; supports incident response and operational security; and ensures compliance with applicable laws, standards, frameworks, and regulations. The role also promotes secure-by-design and privacy-by-design practices across organizational strategies, technologies, and projects.

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Conduct AI security research to discover vulnerabilities, evaluate defenses, reverse-engineer malicious code, develop analysis tools and datasets, co-author proposals, and present findings to government, industry, and academic audiences.

Conduct research on AI system robustness and vulnerabilities, reverse engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, advise government and industry, and mentor peers while advancing AI security practices.

Perform AI security research: find and analyze AI system vulnerabilities, evaluate defenses, reverse engineer malicious code, develop tools/datasets, publish results, brief DoD and industry stakeholders, and apply AI to cybersecurity research.

Build and deploy machine-learning prototypes and tools for AI security; analyze large cybersecurity datasets; support AI red teaming and adversarial ML; collaborate with researchers to translate research into operational capabilities.

Research network threats and develop detection methods using netflow, application metadata, EDR and cloud telemetry. Implement and transition detection capabilities into the NetSA tool suite, publish findings, provide partner-specific training, and analyze large-scale network telemetry to inform security insights.

Conduct applied security research across network, system, software, and hardware layers; develop prototypes and analyses; advise US government stakeholders; perform exploit development, protocol and traffic analysis, and RF/SDR investigations.

Develop and deploy ML-based prototypes and tools for AI security, analyze large cybersecurity datasets, support adversarial ML and AI red teaming, collaborate with researchers and stakeholders, and translate research into operational capabilities while applying software engineering best practices.

Lead research on AI system robustness and vulnerabilities, reverse-engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, and advise government and industry stakeholders to advance AI security.

Lead applied security research into system and network behaviors, analyze deviations between expected and real-world implementations, develop prototypes (exploits, traffic analysis, extraction tools), and communicate findings to US Government stakeholders. Work includes forensics, incident response, and RF/SDR analysis.

Research network threats and develop detection methods tailored to partner environments; build and transition detection capabilities into the NetSA tool suite; analyze large-scale netflow, application metadata, host/EDR and cloud telemetry; document findings, produce publications, and provide customer-specific training and support.

Conduct applied security research across network, system, and hardware layers; develop prototypes and exploit analyses; analyze protocols, RF/SDR, and software; produce concise reports and advise U.S. government stakeholders. Occasional travel (10%) and ability to obtain Department of War security clearance required.

Implement and support SailPoint IGA solutions (IdentityNow/IIQ), configure LCM workflows and connectors, create SoD rules, manage access provisioning/deprovisioning, remediate audit findings, train teammates, and support incident/problem resolution to meet IAM transformation objectives.

Lead a global engineering team to design, deploy, operate, and migrate physical security platforms (Genetec access control and video). Manage Genetec Security Center operations, legacy system cutovers, firmware/patching, incident management, API integrations, and onboarding of biometrics/video analytics. Partner with Network, Cybersecurity, Risk, Facilities, and stakeholders; define KPIs/OKRs and drive continuous improvement.

Senior individual-contributor responsible for operating and engineering enterprise vulnerability management and cloud security posture platforms. Own platform health, scanning, asset discovery, integrations, automation, monitoring, incident response, remediation enablement, and vendor management while mentoring engineers and improving reliability, coverage, and compliance.

Lead enterprise cloud security architecture and strategy across public cloud platforms, drive AI-enabled security use cases, define security reference architectures and guardrails, partner with engineering, DevSecOps, risk and compliance, and operationalize secure cloud adoption with automation, posture management, and container/Kubernetes and CI/CD security practices.

Lead architecture, development, and maintenance of SailPoint IdentityIQ solutions; troubleshoot and remediate production provisioning issues; onboard applications; define standards; provide technical leadership and mentor junior team members to deliver scalable IAM solutions.

Lead secure software and cryptography engineering for crypto and tokenized asset custody. Implement and audit cryptographic code (C/C++, Go, Rust), perform threat modeling and crypto-focused code reviews, integrate with blockchain nodes/APIs, and design secure storage, networking, and deployment solutions using TEEs, HSMs, and containerized cloud environments.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.