Top Cyber Security Jobs in Pittsburgh, PA

Design, deploy, and manage security, networking, and cloud solutions for clients. Configure and operate security tooling, support incident response, develop SIEM detection, handle network administration, mentor junior engineers, and lead small-to-medium projects while ensuring continued operational performance and compliance.

Support and secure Solventum’s Core Speech products through security patching, application coding, production deployments, maintenance, monitoring, alerting, capacity planning, and reliability improvements. Participate in an off-hours support rotation, respond to production alerts, and collaborate on projects improving system performance and architecture. The role is remote within the United States with occasional travel to Pittsburgh, Pennsylvania.

Manage and perform red and purple team engagements, external/internal penetration tests, wireless/web/mobile/embedded assessments, ransomware readiness and social engineering. Develop tools, incorporate threat intelligence, present findings to technical and executive audiences, and mentor and expand offensive security capabilities. Occasional travel (~10%).

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Leads security operations and engineering strategy, manages a 2–3-person team, and remains hands-on with WAF, DLP, AI security, automation, vulnerability management, incident response, cloud security, purple teaming, SIEM, and detection engineering. Partners with executives and cross-functional leaders, oversees vendors and tooling, reports risk metrics, and develops team capabilities and security roadmaps.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

Lead and run engagement systems for Microsoft Security field communities: design community strategy, communications, events, and feedback loops; collaborate with cross-functional teams to drive adoption of Security priorities; measure community health and impact; support planning, readiness, and change management for security field managers and individual contributors.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead and grow a team of Security and IT technical program managers and own the cyber security and IT program portfolio. Drive prioritization, resourcing, and delivery of cross-functional security initiatives, translate strategy into roadmaps, manage risks and dependencies, and standardize playbooks and metrics.

Supports cloud security operations through threat monitoring, vulnerability and incident analysis, compliance and governance activities, threat intelligence research, security hardening, incident triage, log analysis, and escalation. The trainee collaborates with Product, Engineering, Operations, and Support teams to apply cloud-native security practices, zero trust principles, and security frameworks while gaining mentorship and practical cybersecurity experience.

Conduct vulnerability assessments and penetration tests across web and mobile applications, cloud infrastructure, SaaS applications, network devices, and open-source projects. Develop and test DAST scanner rules, communicate with clients about remediation, guide vulnerability fixes, and maintain the vulnerability management system.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.

Lead and perform HITRUST Gap, Readiness, and Validated Assessments. Define scope, test controls, validate evidence in MyCSF, produce readiness and validated reports, advise clients on remediation, and ensure compliance with HITRUST methodology and related frameworks.

Develop, implement, and maintain cybersecurity policies and data classification aligned with NIST CSF, FedRAMP High, IL5 and other standards; support ATO processes, manage compliance documentation and audits, train employees on security/privacy, and troubleshoot policy implementation for GovCloud environments.

Leads global security strategy across manufacturing plant OT/ICS, connected medical products, and application security. Oversees FDA medical device cybersecurity compliance, OT/ICS frameworks, DevSecOps, CI/CD security, and application security tooling. Builds and develops global security teams, partners with executives and operating companies, maintains enterprise risk frameworks, reports security posture to leadership and committees, and travels internationally to manufacturing, R&D, and plant locations.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Lead deep technical security reviews of products and platforms, produce prioritized remediation roadmaps, build security tools and automations, integrate guardrails and automated checks, partner with product teams to implement and validate fixes, and use threat intelligence and telemetry to convert attack paths into controls and detections.

Designs and governs enterprise identity security architectures using ServiceNow and Veza. Integrates identity governance, authorization visibility, CMDB, IRM, SecOps, and external identity platforms across hybrid and multi-cloud environments. Establishes least-privilege, zero-trust, compliance, and identity governance frameworks for human and non-human identities. Leads architecture workshops, solution reviews, client advisory discussions, delivery oversight, troubleshooting, proposals, and technical mentoring.

Leads the architecture, implementation, integration, automation, testing, and optimization of ServiceNow and Veza identity security solutions. Advises clients on identity governance, authorization visibility, access analytics, compliance, and cybersecurity strategy. Conducts workshops, demonstrations, training, troubleshooting, and technical delivery from discovery through deployment. Develops scripts, applications, dashboards, and workflows while mentoring junior staff and supporting proposals, estimates, and sales opportunities.

Leads identity security and IAM implementation projects for enterprise clients using ServiceNow and Veza. Manages client engagement, requirements workshops, solution design, delivery timelines, risks, and distributed teams. Oversees identity governance, access certification, lifecycle management, provisioning, and authorization visibility implementations. Coordinates integrations with cybersecurity programs, mentors consultants, ensures solution quality, supports process improvements, and assists sales pursuits. The role also develops governance strategies for human and non-human identities, including service accounts, APIs, machine identities, and AI agents.

Supports implementation, configuration, integration, testing, deployment, and optimization of identity security solutions using ServiceNow and Veza. Responsibilities include identity governance, access certification, authorization visibility, workflow automation, dashboards, troubleshooting, client workshops, documentation, product demonstrations, and cybersecurity program integration. The role also supports proposals, training content, client relationships, and identity security program development. Travel may reach 50% based on client needs.