Top Cyber Security Jobs in Pittsburgh, PA

Investigate and respond to security incidents through alert monitoring, digital forensics, log and network analysis, evidence preservation, threat containment, and recovery recommendations. The engineer collaborates with technical and non-technical stakeholders, supports vulnerability management and security assessments, improves detection systems, develops automation, documents findings, and participates in a 24x7 on-call rotation.

Performs cybersecurity risk assessments, governance reviews, and technical evaluations for water and wastewater utilities. Documents IT, OT, ICS, SCADA, and network environments; analyzes monitoring and vulnerability results; develops policies, remediation recommendations, risk profiles, and client reports. The role supports client workshops, field investigations, project execution, and implementation of cybersecurity improvements while communicating technical risks to stakeholders. It requires cybersecurity and OT/ICS expertise, relevant certifications, occasional travel, and fieldwork at utility sites.

Assesses and documents security controls for regulated university research, audits IT systems, identifies and closes risks, and manages compliance with CMMC, NIST 800-171, and HIPAA. The role develops policies, procedures, System Security Plans, training, and evidence; leads compliance projects and continuous monitoring; evaluates third-party risks; advises researchers and stakeholders; and supports security operations and incident response for research systems.

Lead the Application Security Practice, overseeing team performance and business growth while delivering high-quality security consulting services and fostering innovation through AI integration and research contributions.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Supports cybersecurity and Risk Management Framework activities for C-17 training systems. Performs vulnerability assessments, compliance scans, audits, risk analyses, incident response, continuous monitoring, and accreditation documentation. Maintains security authorization packages, integrates controls into sustainment activities, provides secure configuration guidance, and coordinates with engineering, operations, government, and contractor stakeholders. Frequent travel to customer and site locations is required.

Administer enterprise security technologies, cloud and infrastructure platforms, Linux systems, networks, identity controls, and endpoint deployments. Monitor and respond to incidents, manage vulnerabilities, maintain secure configurations, and support CMMC compliance. Troubleshoot complex infrastructure issues, document technical evidence, and collaborate with IT teams on cybersecurity, reliability, risk mitigation, and continuous improvement.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

The Network Security Architect will assess network security, guide teams, enhance security policies, design network solutions, and mentor engineers while aligning with a Zero Trust Strategy.

Conduct AI security research to discover vulnerabilities, evaluate defenses, reverse-engineer malicious code, develop analysis tools and datasets, co-author proposals, and present findings to government, industry, and academic audiences.

Conduct research on AI system robustness and vulnerabilities, reverse engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, advise government and industry, and mentor peers while advancing AI security practices.

Build and deploy machine-learning prototypes and tools for AI security; analyze large cybersecurity datasets; support AI red teaming and adversarial ML; collaborate with researchers to translate research into operational capabilities.

Perform AI security research: find and analyze AI system vulnerabilities, evaluate defenses, reverse engineer malicious code, develop tools/datasets, publish results, brief DoD and industry stakeholders, and apply AI to cybersecurity research.

Research network threats and develop detection methods using netflow, application metadata, EDR and cloud telemetry. Implement and transition detection capabilities into the NetSA tool suite, publish findings, provide partner-specific training, and analyze large-scale network telemetry to inform security insights.

Conduct applied security research across network, system, software, and hardware layers; develop prototypes and analyses; advise US government stakeholders; perform exploit development, protocol and traffic analysis, and RF/SDR investigations.

Develop and deploy ML-based prototypes and tools for AI security, analyze large cybersecurity datasets, support adversarial ML and AI red teaming, collaborate with researchers and stakeholders, and translate research into operational capabilities while applying software engineering best practices.

Lead research on AI system robustness and vulnerabilities, reverse-engineer malicious code, develop analysis methods and tools, evaluate defenses, publish findings, and advise government and industry stakeholders to advance AI security.

Lead applied security research into system and network behaviors, analyze deviations between expected and real-world implementations, develop prototypes (exploits, traffic analysis, extraction tools), and communicate findings to US Government stakeholders. Work includes forensics, incident response, and RF/SDR analysis.

Research network threats and develop detection methods tailored to partner environments; build and transition detection capabilities into the NetSA tool suite; analyze large-scale netflow, application metadata, host/EDR and cloud telemetry; document findings, produce publications, and provide customer-specific training and support.

Conduct applied security research across network, system, and hardware layers; develop prototypes and exploit analyses; analyze protocols, RF/SDR, and software; produce concise reports and advise U.S. government stakeholders. Occasional travel (10%) and ability to obtain Department of War security clearance required.