Top Cyber Security Jobs in Pittsburgh, PA

Implement and support SailPoint IGA solutions (IdentityNow/IIQ), configure LCM workflows and connectors, create SoD rules, manage access provisioning/deprovisioning, remediate audit findings, train teammates, and support incident/problem resolution to meet IAM transformation objectives.

Lead a global engineering team to design, deploy, operate, and migrate physical security platforms (Genetec access control and video). Manage Genetec Security Center operations, legacy system cutovers, firmware/patching, incident management, API integrations, and onboarding of biometrics/video analytics. Partner with Network, Cybersecurity, Risk, Facilities, and stakeholders; define KPIs/OKRs and drive continuous improvement.

Senior individual-contributor responsible for operating and engineering enterprise vulnerability management and cloud security posture platforms. Own platform health, scanning, asset discovery, integrations, automation, monitoring, incident response, remediation enablement, and vendor management while mentoring engineers and improving reliability, coverage, and compliance.

Lead architecture, development, and maintenance of SailPoint IdentityIQ solutions; troubleshoot and remediate production provisioning issues; onboard applications; define standards; provide technical leadership and mentor junior team members to deliver scalable IAM solutions.

Lead enterprise cloud security architecture and strategy across public cloud platforms, drive AI-enabled security use cases, define security reference architectures and guardrails, partner with engineering, DevSecOps, risk and compliance, and operationalize secure cloud adoption with automation, posture management, and container/Kubernetes and CI/CD security practices.

Engineer, configure, and support endpoint security across workstations, laptops, and servers. Drive policy, architecture, detection rules, tool deployment, tuning, and remediation coordination. Provide posture visibility, risk escalation, and contribute to strategic roadmap and tool selection.

Lead secure software and cryptography engineering for crypto and tokenized asset custody. Implement and audit cryptographic code (C/C++, Go, Rust), perform threat modeling and crypto-focused code reviews, integrate with blockchain nodes/APIs, and design secure storage, networking, and deployment solutions using TEEs, HSMs, and containerized cloud environments.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.

Lead development and operation of AI security governance across the enterprise: review AI use cases, evaluate model and infrastructure security, define controls, document standards, and partner with architects, engineering, risk, and business teams to ensure compliant, secure AI deployments.

Lead cloud security engineering to implement and scale cloud-native controls, integrate AI into security workflows, drive CSPM/CNAPP maturity (Wiz), enforce policy-as-code and IaC patterns, embed security into CI/CD and platform engineering, and partner with stakeholders on standards, remediation, and governance.

Implement, configure, monitor, and support enterprise cybersecurity controls across cloud and on‑prem environments. Maintain EDR, DLP, CSPM/CWP, container and network security, integrate logs into SIEM, perform threat detection and incident response, conduct security reviews, and produce security policies and documentation. Partner with DevOps and business units to reduce cloud security risks and ensure compliance with cloud security frameworks.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead and mentor the Cyber Operations team, evaluate and implement security tools, manage SIEM/IDS/IPS, perform vulnerability assessment and mitigation, develop SOPs, support FISMA and DISA STIG compliance, and assist with audits and continuity/disaster recovery planning.

Implement and manage security tools (vulnerability scanners, log management), patch and configure OS/applications, support incident management, communicate with customers and remote teams, and protect confidential information while prioritizing tasks and troubleshooting security issues.

Perform security operations tasks including implementing vulnerability scanners, managing log/SEIM systems (Splunk/Elasticsearch), patching and configuring Windows and Linux systems, supporting incident management, applying IT security best practices, and communicating with customers and remote teams to resolve security issues.

Lead a global endpoint security team delivering engineering, operations, and service for endpoint protection platforms. Own lifecycle management, incident escalation, vendor relationships, metrics, process improvement, and cross-team collaboration to improve detection, response, and enterprise risk posture.

Lead and execute Oracle ERP security and controls engagements including security assessments, role design, GRC implementations, access management, segregation of duties reviews, and managed security services. Work with clients to perform ITGC/security audits, implement automated controls, develop remediation, and support Oracle implementations and ongoing security operations.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.

Act as primary technical advisor in enterprise SLED sales cycles: run technical discovery, lead architecture-level conversations, deliver demos, own Proof of Value outcomes, and drive customer satisfaction for email and identity-focused security solutions.

Lead implementations of Proofpoint Information Protection to meet information protection and compliance objectives. Engage enterprise customers, configure Email/Cloud/Endpoint DLP, conduct DLP and data exfiltration investigations, build playbooks, mentor team members, and document best practices while coordinating cross-functional teams to ensure successful project outcomes.

Design, deploy, and manage security, networking, and cloud solutions for clients. Configure and operate security tooling, support incident response, develop SIEM detection, handle network administration, mentor junior engineers, and lead small-to-medium projects while ensuring continued operational performance and compliance.