Top Cyber Security Jobs in Pittsburgh, PA

Own Fetch’s information security function, including vulnerability management, application security, incident response, forensics, security architecture, GRC, compliance, third-party risk, AI governance, and security awareness. Serve as incident commander and senior technical authority, mature the security program, lead audits and executive reporting, manage security risks, and hire and develop the Security Engineering team.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.

Conduct AI security research to discover vulnerabilities, evaluate defenses, reverse-engineer malicious code, develop analysis tools and datasets, co-author proposals, and present findings to government, industry, and academic audiences.

Conduct research on AI system robustness and vulnerabilities, reverse engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, advise government and industry, and mentor peers while advancing AI security practices.

Build and deploy machine-learning prototypes and tools for AI security; analyze large cybersecurity datasets; support AI red teaming and adversarial ML; collaborate with researchers to translate research into operational capabilities.

Perform AI security research: find and analyze AI system vulnerabilities, evaluate defenses, reverse engineer malicious code, develop tools/datasets, publish results, brief DoD and industry stakeholders, and apply AI to cybersecurity research.

Conduct applied security research across network, system, software, and hardware layers; develop prototypes and analyses; advise US government stakeholders; perform exploit development, protocol and traffic analysis, and RF/SDR investigations.

Lead research on AI system robustness and vulnerabilities, reverse-engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, and advise government and industry stakeholders to advance AI security.

Lead applied security research into system and network behaviors, analyze deviations between expected and real-world implementations, develop prototypes (exploits, traffic analysis, extraction tools), and communicate findings to US Government stakeholders. Work includes forensics, incident response, and RF/SDR analysis.

Conduct applied security research across network, system, and hardware layers; develop prototypes and exploit analyses; analyze protocols, RF/SDR, and software; produce concise reports and advise U.S. government stakeholders. Occasional travel (10%) and ability to obtain Department of War security clearance required.

Implement and support SailPoint IGA solutions (IdentityNow/IIQ), configure LCM workflows and connectors, create SoD rules, manage access provisioning/deprovisioning, remediate audit findings, train teammates, and support incident/problem resolution to meet IAM transformation objectives.

Lead a global engineering team to design, deploy, operate, and migrate physical security platforms (Genetec access control and video). Manage Genetec Security Center operations, legacy system cutovers, firmware/patching, incident management, API integrations, and onboarding of biometrics/video analytics. Partner with Network, Cybersecurity, Risk, Facilities, and stakeholders; define KPIs/OKRs and drive continuous improvement.

Lead architecture, development, and maintenance of SailPoint IdentityIQ solutions; troubleshoot and remediate production provisioning issues; onboard applications; define standards; provide technical leadership and mentor junior team members to deliver scalable IAM solutions.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.

Lead cloud security engineering to implement and scale cloud-native controls, integrate AI into security workflows, drive CSPM/CNAPP maturity (Wiz), enforce policy-as-code and IaC patterns, embed security into CI/CD and platform engineering, and partner with stakeholders on standards, remediation, and governance.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead and mentor the Cyber Operations team, evaluate and implement security tools, manage SIEM/IDS/IPS, perform vulnerability assessment and mitigation, develop SOPs, support FISMA and DISA STIG compliance, and assist with audits and continuity/disaster recovery planning.

Implement and manage security tools (vulnerability scanners, log management), patch and configure OS/applications, support incident management, communicate with customers and remote teams, and protect confidential information while prioritizing tasks and troubleshooting security issues.

Perform security operations tasks including implementing vulnerability scanners, managing log/SEIM systems (Splunk/Elasticsearch), patching and configuring Windows and Linux systems, supporting incident management, applying IT security best practices, and communicating with customers and remote teams to resolve security issues.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.