Top Cyber Security Jobs in Pittsburgh, PA

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Leads security operations and engineering strategy, manages a 2–3-person team, and remains hands-on with WAF, DLP, AI security, automation, vulnerability management, incident response, cloud security, purple teaming, SIEM, and detection engineering. Partners with executives and cross-functional leaders, oversees vendors and tooling, reports risk metrics, and develops team capabilities and security roadmaps.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead and grow a team of Security and IT technical program managers and own the cyber security and IT program portfolio. Drive prioritization, resourcing, and delivery of cross-functional security initiatives, translate strategy into roadmaps, manage risks and dependencies, and standardize playbooks and metrics.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.

Lead and perform HITRUST Gap, Readiness, and Validated Assessments. Define scope, test controls, validate evidence in MyCSF, produce readiness and validated reports, advise clients on remediation, and ensure compliance with HITRUST methodology and related frameworks.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Leads global security strategy across manufacturing plant OT/ICS, connected medical products, and application security. Oversees FDA medical device cybersecurity compliance, OT/ICS frameworks, DevSecOps, CI/CD security, and application security tooling. Builds and develops global security teams, partners with executives and operating companies, maintains enterprise risk frameworks, reports security posture to leadership and committees, and travels internationally to manufacturing, R&D, and plant locations.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

The fellowship provides military spouses and separating service members with cybersecurity training and hands-on experience through projects and vendor training, aimed at enhancing their security skills.

Customer-facing role to drive security transformation on Azure and Microsoft 365. Architect, design, and implement cloud security, identity, threat protection, and information protection solutions; run design sessions, perform hands-on evaluations (Defender, Sentinel, AAD, Intune), troubleshoot implementations, and influence product and engineering teams to improve customer security posture and adoption.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Conduct application security assessments, identify and validate vulnerabilities, perform dynamic testing and static code reviews, and recommend remediation strategies. Collaborate with development teams to improve application security, use tools such as Burp Suite, and stay current with application security methodologies, web vulnerabilities, and exploitation techniques.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Manages information security risks, vendor and third-party risk reviews, mitigation plans, policy exceptions, and compliance reporting. Partners with stakeholders and Enterprise Risk Management to maintain risk policies within tolerance. Serves as a technical expert, supports risk awareness and accountability, monitors security controls, and contributes to operational goals. The role requires expertise in IT audit, security monitoring, access management, encryption, networking, incident response, SOX compliance, and project management.