Open Philadelphia Cybersecurity jobs

Summary

This is an identity and access management engineering role for Customers Bank. The person implements and operates IAM platforms, integrates applications, creates and manages user access, and supports identity controls across cloud and on-prem environments; the bank says sponsorship is not available.

Summary

This is a cloud data and AI security architecture role for Carpenter Technology. The person owns security patterns for data ingestion, storage, processing, AI model deployment, IAM, encryption, segmentation, secrets management, and ITAR-sensitive data controls across the company's analytics and AI platform.

Summary

This is a DevSecOps engineering role in Best Egg's cloud infrastructure and application delivery organization. The person leads security engineering across CI/CD pipelines, cloud infrastructure, and runtime controls, with ownership for reducing recurring security issues and improving reliability and risk posture.

Summary

This is a new-grad security governance analyst role for Susquehanna International Group. The person supports cybersecurity GRC, security control assessments, third-party security assessments, policy and exception reviews, evidence gathering, remediation tracking, regulatory and internal-policy monitoring, and automation or tooling for governance workflows.

Summary

This is a DevSecOps engineering role on General Dynamics Mission Systems' AIOps team. The person builds secure automation, AI-powered infrastructure, agentic AI workflows, MCP servers, GitLab CI pipelines, AKS deployments, Terraform and Ansible automation, Azure Policy and RBAC controls, hardened clusters, and SAST/DAST-integrated delivery workflows.

Summary

A mid-level cyber incident response engineer at Cencora (AmerisourceBergen), based in Conshohocken PA or Frisco TX, performing log and forensic analysis, SIEM and EDR work with Splunk, CrowdStrike, and Wireshark, and developing playbooks and runbooks aligned to NIST and ISO 27035. Also provides guidance to junior analysts. A blue-team incident-response role at a pharmaceutical distributor.

Summary

This is an information security lead role for Proscia's Concentriq platform. The person manages vulnerability management, security governance, incident response, GRC, security policy development, developer-friendly security tooling, AI-assisted detection and response, customer security guidance, regulatory roadmap work such as ISO 27001, SOC 2 and HITRUST, and security standards for regulated healthcare software.

Summary

This is an application security engineering role for Wawa. The person secures enterprise applications and cloud environments, partners with developers and product owners, applies DevSecOps practices, and works with Java, Go, React, React Native, Python, PowerShell, shell, JavaScript, TypeScript, NIST 800-53, CIS controls, OWASP, REST API security, SAST, DAST, SCA, IaC, cryptography and incident response.

Summary

A hands-on security-engineering leadership role at Chatham Financial, building and scaling the security function for its cloud-native financial-risk SaaS platform. As a player-coach you would lead a small, growing team while staying deeply technical — designing security controls across Azure infrastructure, containerized environments, and .NET applications, integrating security into CI/CD pipelines, managing third-party penetration testing, and maturing SOC 2-aligned controls and cloud posture management, including emerging AI/LLM risks. Best for an engineering-first security leader who wants to build and own a security program rather than just manage one; based in Kennett Square, Denver, or Charlotte.

Summary

This is a senior cloud and application security engineering role for Five Below. The person secures Azure and AWS environments, web applications, APIs, WAF and bot-mitigation layers, CI/CD pipelines, containers, microservices, SIEM tooling, CrowdStrike, Snyk, GitHub Security, and vulnerability-management workflows.

Summary

A broad security-operations role at integration-platform company Boomi, owning security tooling across the enterprise and keeping its posture current in a fast-moving cloud environment. The work spans multiple domains — endpoint protection, vulnerability management, identity, network security, and logging/SIEM — plus continuous compliance monitoring for SOC 2, FedRAMP, and ISO, incident response with on-call rotations, and least-privilege access reviews. A fit for a generalist security engineer (6+ years in IT, 3+ in security, ideally CISSP or CISM) who thrives on breadth and context-switching across multi-cloud environments; US remote.

Summary

A director-level information-security leadership role at Phenom, leading and scaling its business-facing security function through a Security & Trust service-oriented model. The scope is broad security leadership — security assurance, vulnerability management and penetration testing, security architecture, risk-management frameworks, compliance (including FedRAMP and SaaS and product security), security-awareness training, and service delivery with KPI development. A fit for a security leader who can run security as a service to the business and scale trust-enablement programs at a SaaS company; based in Ambler, PA.

Summary

A manager and product-owner role at Children's Hospital of Philadelphia leading the strategy and lifecycle of its identity and access management platforms, including identity governance, privileged access, and authentication (Microsoft Entra ID, CyberArk, Oracle Identity Manager). It combines IAM domain depth with product ownership and stakeholder and vendor management in a pediatric-healthcare setting.

Summary

A principal cybersecurity engineering role inside Federal Reserve Financial Services, securing the national payments platforms (FedNow, Fedwire, FedACH, FedLine, Check Services). It is payments-security engineering at principal level rather than app development; posted across multiple districts.

Summary

This is a network security architecture role for Crown Holdings' global corporate, OT, data-center, and cloud environments. The person designs and drives a zero-trust network segmentation strategy, remote-access security, regional network controls, and secure configuration standards; the role is office-based in Yardley or Wantage.

Summary

This is a principal security engineering role for RunPod's GPU cloud platform. The person secures customer workload isolation, identifies vulnerabilities, designs and implements fixes, applies offensive and defensive security experience, partners with software engineering teams, and helps build secure infrastructure for AI and machine-learning cloud workloads.

Summary

This is an Elasticsearch lead engineering role for Vanguard's SIEM platform. The person designs, builds and operates Elasticsearch architecture at scale, drives security-event ingestion pipeline strategy, supports fast and reliable threat detection and investigation, maintains data-center and security infrastructure, resolves hardware and software issues, and partners with security analysts.

Summary

This is a cloud security specialist role for Vanguard focused on IAM and cloud controls. The person manages the cloud IAM technical product roadmap, designs preventive and detective controls, governance automation and identity-based policies, embeds IAM controls into CI/CD pipelines, owns backlog and technical specifications, and partners with engineering, architecture and security teams on multi-cloud security solutions.

Summary

This is an application security integration engineering role for Vanguard. The person plans and implements cloud security technologies, designs and deploys cloud security systems, troubleshoots complex cloud security issues, supports production operations, develops auditing methodologies for cloud data protection, elevates security code through environments and mentors junior engineers.