Open Philadelphia Cybersecurity jobs

Summary

Leads security architecture efforts across all cybersecurity domains for new technology implementations, major system changes and mergers/acquisitions at an insurance and financial-services company, and drives updates to security standards and policies in response to regulatory or business change. The role communicates risk to executive leadership, performs third-party and cloud security risk assessments, serves as subject-matter expert during incident response, and supports SOX, PCI and HIPAA/HITECH compliance. The position is remote-eligible from EST or CST US locations and is not eligible for visa sponsorship.

Summary

Senior program management role leading high-priority cyber security programs aimed at reducing Comcast's enterprise risk from frontier AI models and other emerging threats. The work drives cross-functional execution across cyber security, technology, product, operations and risk teams, covering vulnerability prioritization, WAF coverage, AI-enabled testing, automated patching, identity controls, telemetry and attack-surface reduction, with frequent executive-ready status reporting. It asks for 7+ years of program, project or technical delivery experience and is ineligible for visa sponsorship.

Summary

Senior cybersecurity engineering role on Comcast's CONNECT Cybersecurity and Privacy team, implementing and maturing controls across the applications, platforms, cloud services, infrastructure and network capabilities the organization builds and operates. The work spans secure development lifecycle practices, secure code review and application security assessments, cloud security, vulnerability management and privacy initiatives, plus embedding security into CI/CD pipelines and infrastructure as code and building automation and reporting that make risk visible. It asks for 8+ years of cybersecurity engineering, application security, cloud security or secure development experience.

Summary

Senior cybersecurity engineering role executing the tactical, hands-on elements of Constellation's security strategy, with a central focus on achieving North American Electric Reliability Corporation Critical Infrastructure Protection compliance across the utility's IT and power IT environments. The engineer implements system security measures for confidentiality, integrity, availability, authentication and non-repudiation, performs security reviews to identify gaps in security architecture, and helps develop security risk management plans. The role acts as a liaison to the security architect and to cloud and infrastructure operations teams, and works closely with physical security on new standards and remediation.

Summary

Senior cybersecurity engineering role executing the tactical, hands-on elements of Constellation's security strategy, with a central focus on achieving North American Electric Reliability Corporation Critical Infrastructure Protection compliance across the utility's IT and power IT environments. The engineer implements system security measures for confidentiality, integrity, availability, authentication and non-repudiation, performs security reviews to identify gaps in security architecture, and helps develop security risk management plans. The role acts as a liaison to the security architect and to cloud and infrastructure operations teams, and works closely with physical security on new standards and remediation.

Summary

Technical leadership for identity and access management at a university's central IT organization, covering the design, evolution, integration and support strategy of the IAM services the individual schools and centers build on top of. The group described supplies the foundational network, data, voice, video and enterprise application infrastructure for the university, so this is enterprise identity infrastructure and access governance rather than product software work.

Summary

Bank network security operations role focused on firewall policy hygiene: rule recertification and cleanup, identifying and remediating policies that violate standards, reviewing and implementing security change requests, and responding to audit findings. Built around next-generation firewall platforms (Fortinet, Check Point, Palo Alto) and policy analyzer tooling such as AlgoSec, Tufin or FireMon, with scripting only at a familiarity level. The posting states an ability to work off hours and weekends is required.

Summary

Lead engineer and primary technical owner of a Saviynt-based identity governance and administration platform, responsible for platform architecture, configuration and production readiness, joiner-mover-leaver lifecycle processes, access requests, certifications, provisioning logic and SaaS connectors and integrations. The role designs and enforces security controls including Conditional Access, Zero Trust principles and periodic access reviews, drives root-cause analysis and post-go-live stabilization, mentors junior engineers and shapes the long-term IGA roadmap. Seven or more years of IT experience with identity governance depth is required; candidates must be a US citizen or green card holder intending to naturalize, and must work full time on site within 50 miles of the employing Reserve Bank.

Summary

A broad security engineering leadership role: clarifying security requirements across multiple networks to enable multi-level security, triaging threats by risk assessment, and managing resources through disruptive events. Requires five-plus years of security engineering with extensive threat modeling, vulnerability discovery, and penetration testing experience, plus advanced programming ability.

Summary

Technical owner of the company identity and access management program, running Active Directory, Entra ID, Okta for workforce access and Auth0 plus AWS Cognito for customer access. The substance is identity engineering and access governance across SAML, OAuth 2.0, OIDC, SCIM, LDAP, and Kerberos, including SSO, MFA, conditional access, and privileged access management, with Zero Trust and healthcare compliance regimes such as HIPAA, SOC 2, HITRUST, and FedRAMP shaping requirements. Coding shows up as automation in Python, PowerShell, or Terraform rather than product development.

Summary

Senior cryptographic services engineering role owning the design and modernization of enterprise PKI, certificate lifecycle management and machine identity across on-premises, hybrid and cloud environments. The work is heavily automation-led - certificate issuance, renewal, deployment and governance workflows built with PowerShell, Python and REST APIs, plus integrations with ServiceNow, SailPoint, CyberArk, Splunk, Azure and AWS - and extends to crypto agility and post-quantum readiness. Seven or more years in PKI, cybersecurity or infrastructure engineering is expected, with Keyfactor, DigiCert, ADCS or Venafi experience and knowledge of HSMs, OCSP, CRL and code signing.

Summary

Hands-on enterprise PKI and certificate lifecycle management role working under senior PKI engineering leadership: automating certificate issuance, renewal, reporting and remediation, and building integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems. Also covers certificate discovery and ownership mapping, machine identity management, runbook documentation, and audit, compliance and risk evidence requests. Expects working knowledge of TLS, certificate authorities and basic cryptography plus PowerShell or Python scripting, with Keyfactor, DigiCert or Microsoft ADCS preferred.

Summary

A mid-level cyber incident response engineer at Cencora (AmerisourceBergen), based in Conshohocken PA or Frisco TX, performing log and forensic analysis, SIEM and EDR work with Splunk, CrowdStrike, and Wireshark, and developing playbooks and runbooks aligned to NIST and ISO 27035. Also provides guidance to junior analysts. A blue-team incident-response role at a pharmaceutical distributor.

Summary

Hands-on enterprise PKI and certificate lifecycle management role working under senior PKI engineering leadership: automating certificate issuance, renewal, reporting and remediation, and building integrations across ServiceNow, cloud platforms, monitoring tools and enterprise security systems. Also covers certificate discovery and ownership mapping, machine identity management, runbook documentation, and audit, compliance and risk evidence requests. Expects working knowledge of TLS, certificate authorities and basic cryptography plus PowerShell or Python scripting, with Keyfactor, DigiCert or Microsoft ADCS preferred.

Summary

Despite the infrastructure engineering title, this is a governance, risk and compliance role acting as the main point of contact between the network team and audit, risk and compliance groups. Day-to-day work is supporting internal and external audits, tracking security risks, vulnerabilities and audit findings against frameworks such as SOX, SOC, PCI, HIPAA and NIST, maintaining trackers in JIRA, and producing recurring compliance and risk reporting for leadership. The posting asks for three to five years in network, security or IT project work and treats Python or Ansible automation as a plus rather than a requirement.

Summary

This is an application security engineering role for Wawa. The person secures enterprise applications and cloud environments, partners with developers and product owners, applies DevSecOps practices, and works with Java, Go, React, React Native, Python, PowerShell, shell, JavaScript, TypeScript, NIST 800-53, CIS controls, OWASP, REST API security, SAST, DAST, SCA, IaC, cryptography and incident response.

Summary

Senior security architecture role dedicated to protecting AI and machine learning systems: securing training pipelines, models and inference against adversarial attacks, data poisoning and prompt injection, and building automated frameworks that continuously test AI security posture. It also carries governance weight, setting AI security standards against the OWASP LLM Top 10, MITRE ATLAS and the NIST AI Risk Management Framework and serving as technical advisor to the CISO and CTO. Asks for roughly 10 years in cybersecurity engineering with at least 2 focused on AI/ML or application security.

Summary

Identity and access management engineering role that mixes security architecture with genuine application development, designing AAA solutions using RADIUS, TACACS+, LDAP, TLS, EAP-TLS and Entra ID while building automation and full-stack tooling in Python, Perl, Node.js and React. The person also runs security assessments and risk analyses, investigates incidents and performs root cause analysis. The posting states the role requires flexibility to work variable schedules including nights and weekends.

Summary

A data security analyst on Clarivate's information security architecture team, focused on Microsoft Purview — configuring data classification, sensitivity labels, DLP policies, and managing data exposure risks introduced by Microsoft Copilot and AI features across Microsoft 365. The team is small (four security architects and one IAM analyst); the role requires 5+ years in cybersecurity and 1+ year of hands-on Purview or equivalent DLP tooling. Hybrid position in Philadelphia, PA or Overland Park, KS.

Summary

An information assurance and accreditation role rather than a build-focused engineering job: the ISSE runs the end-to-end Risk Management Framework process, manages NIST 800-53 and 800-171 control sets, and coordinates with security control assessors and authorizing officials to obtain and sustain Authority to Operate. Surrounding work covers vulnerability assessment and POA&M management, patch prioritization, contingency and disaster recovery planning, continuous monitoring, and security review of technical change requests on AWS and Azure platforms. An active TS/SCI and DoD 8570 IAT Level II certification such as Security+ or CySA+ are required.

Summary

Blockchain security-engineering role building a production digital-asset custody and wallet-orchestration platform at a large bank. Work spans secure key management with multi-party computation, programmable transaction policy engines, multi-chain wallet support across Ethereum, Bitcoin, Solana, and Polygon, and secure RESTful APIs using OAuth 2.0 and JWT. It requires strong Java or Python microservices experience plus hands-on blockchain and applied-cryptography knowledge.

Summary

Enterprise identity security role centered on Microsoft Entra ID conditional access, workload identities and Zero Trust enforcement, extended to authentication for APIs and AI agents through Agent IDs, workload identity federation and SPIFFE or SPIRE. Automation is done with PowerShell, Python, Microsoft Graph, Terraform and infrastructure as code rather than product software development. The scope spans Azure, AWS and GCP, with threat modeling and architecture governance reviews included.

Summary

Network platform security ownership role covering vulnerability remediation, software patch validation, secure configuration rollout and hardening across Cisco, Juniper, Arista, Nokia, F5 and Fortinet estates. The work is lab validation, compliance enforcement and standards authorship rather than software development, including audit readiness for PCI and SOC 2. The position can be based in West Chester or Philadelphia, Pennsylvania, or Mt. Laurel, New Jersey.

Summary

A security engineering role combining hands-on software development with cybersecurity, designing and building secure production code and security solutions for internal platform and application teams. Responsibilities include security testing and control validation within the SDLC, coding in Java and Golang, and using enterprise-authorized AI tooling to accelerate vulnerability assessment. Requires formal security-engineering training or certification plus applied coding experience at a large financial institution.

Summary

An information security governance and risk role defining and implementing technology controls and security policies, with a focus on technology asset governance, inventory, risk assessment, and control monitoring. The specialist applies cyber risk frameworks and control assessments, manages remediation and evidence-based reporting, and partners with risk, compliance, audit, and governance stakeholders. Professional certifications such as CISSP or CISA are preferred.

Summary

A data-security architecture role in State Street's Data and AI Security organization, leading enterprise data-at-rest discovery, classification, and risk reduction across cloud, SaaS, and structured/unstructured repositories. Centers on DSPM (Data Security Posture Management) platforms such as Varonis, BigID, and Microsoft Purview, plus governance frameworks for sensitive-data protection and AI adoption. Requires 7+ years in information/data security; certifications like CISSP or CCSP are preferred.

Summary

The lead-level version of Cencora's operational-technology security role: leading the design and continuous improvement of security controls for industrial and OT networks — segmentation, secure remote access, IDS/IPS, IAM and SIEM/EDR monitoring, plus third-party risk and incident response. A senior OT/industrial cybersecurity lead.

Summary

An identity and access management governance role ensuring compliance and oversight of IAM processes and tools at a bank, with a strong focus on SailPoint Identity Security Cloud. The analyst administers identity lifecycle, access certifications, and role management, leads user access reviews and attestations, enforces segregation-of-duties controls, and supports audits and regulatory examinations. The work is governance, administration, and compliance oriented rather than software development.

Summary

A cybersecurity incident-management leadership role running major incident response across a distributed, follow-the-sun, 24x7 CSOC model. Responsibilities include building the incident-management operating model, managing a team of incident coordinators and managers across regions, leading after-action reviews, and coordinating high-severity incidents with Legal, Privacy, and Communications. The role requires alignment with both U.S. and U.K. regulatory considerations.

Summary

A product-security engineering role focused on offensive security — web application penetration testing with Burp Suite and custom Bash and Python scripts, vulnerability scanning (Nuclei, Qualys, Nessus), and remediation. Also covers product-security incident response, managing the vulnerability lifecycle, and running bug bounty programs by coordinating with the researcher community. Includes building custom Python tools to detect vulnerabilities and securing AWS environments. Eligible for partial remote work.

Summary

A director-level leader of Comcast's cyber-defense function, scaling the Security Operations Center, incident-response team, threat hunting and threat-detection capabilities to handle multiple concurrent major incidents. It combines executive incident command with hands-on partnership with engineering teams to improve SIEM use cases, detections, pipelines and automation. This role is ineligible for visa sponsorship.

Summary

A quota-carrying pre-sales role despite the advisor title — driving security services and technology sales to meet quarterly and annual quota objectives, identifying cross-sell and upsell opportunities, and designing client security programs in partnership with account and domain teams. Remote, but hiring is limited to candidates in PA, MI, NJ, or DE.

Summary

A defensive-cybersecurity engineering and architecture role owning State Street's enterprise email-security strategy, protecting against phishing, business email compromise, account takeover, and malware. The work involves evaluating and deploying email-security platforms such as Defender for Office 365 and Proofpoint, designing controls around SPF, DKIM, and DMARC, and integrating with SIEM, SOAR, and threat-intelligence systems alongside the Cyber Defense Center. This is email-security architecture within Global Cyber Security rather than software development.

Summary

A client-facing IT audit and cybersecurity risk advisory role at a consulting and accounting firm, delivering risk, governance, internal audit, and compliance services with a HITRUST focus. The role sits within a Risk Advisory practice serving external clients rather than an internal security team. Work location arrangements are discussed per opportunity across several U.S. offices.

Summary

An entry-level information security role on a team that manages preventative network security controls such as firewalls, network access control lists, and web proxies. The associate monitors and manages these controls, investigates and troubleshoots issues, and supports connectivity to third parties and exchanges while developing scripting and automation skills. Aimed at new graduates with a technical degree and a grounding in networking and cybersecurity fundamentals.

Summary

Senior data-security architect responsible for designing and governing security architectures that protect the firm's data across cloud, on-premises, SaaS, analytics, and hybrid environments. The role centers on data classification, encryption, tokenization, masking, and cryptographic architecture — KMS, HSMs, PKI, secrets and certificate management — plus security-architecture reviews for data lakes, warehouses, and analytics platforms.

Summary

Defines and governs cloud security architecture across public cloud, private cloud, and SaaS environments for a global bank. The architect sets security standards and reference patterns, leads security reviews of cloud-native applications, containers, and Kubernetes platforms, and governs controls for identity, network security, data protection, encryption, logging, and automation. The work centers on embedding Zero Trust and secure-by-design principles with cloud engineering and application teams while keeping cloud adoption aligned with regulatory requirements.

Summary

Designs and governs security architecture for enterprise integrations, including APIs, messaging and event-streaming platforms, managed file transfer, and third-party connectivity. The architect runs security reviews of integration solutions across cloud, SaaS, and on-premises environments, sets requirements for API gateways, service-to-service communication, and machine identities, and provides expertise on authentication, encryption, tokenization, secrets management, and secure integration patterns.

Summary

Owns the enterprise identity and access management strategy, architecture, and governance across hybrid cloud, SaaS, and on-premises systems at a global bank. The architect designs identity services spanning governance, privileged access, authentication, federation, and directory services, and builds reference patterns for workforce, customer, third-party, and machine identities. Much of the role is partnering with engineering and cybersecurity teams to embed least-privilege, strong authentication, and Zero Trust controls into enterprise platforms.

Summary

A cloud security engineering role at Security Risk Advisors designing and maintaining security controls across a multi-cloud environment spanning Azure/Entra ID, GCP, and AWS — cloud IAM and zero-trust, CSPM/CWPP, misconfiguration and vulnerability monitoring (Defender for Cloud, Security Command Center, Security Hub), and embedding security into CI/CD and infrastructure-as-code. It also includes detection content for the firm's internal SOC; Philadelphia-based.

Summary

An offensive-security and red-team operator role in banking, executing adversarial operations against Windows Active Directory and enterprise authentication, building custom C2 and tooling in C#, Python, and PowerShell, and evading EDR and SIEM with strong OPSEC in a strictly scoped, regulated environment. It requires 7+ years of relevant experience, with red-team certifications such as CRTO, OSCP, or GXPN preferred, and includes report writing and technical walkthroughs.

Summary

An application security architect who designs and reviews secure architectures and runs threat modeling for enterprise apps, APIs, and cloud-native platforms, with a strong, distinctive focus on AI/ML security: LLM and agentic-AI risks, prompt injection, model misuse, and AI supply chain. The role sets appsec and AI-security standards and drives secure-by-design and DevSecOps across engineering teams.

Summary

A penetration-testing role on a publisher's offensive-security and Security Assurance team — hands-on testing of web apps, APIs, and cloud environments, plus peer review and triage of third-party assessment findings. A distinctive focus is GenAI security: testing LLM integrations and RAG pipelines for prompt injection, jailbreaking, and model-data leakage, aligned to the OWASP Top 10 for LLMs. Pitched as a growth role for a motivated tester, with a security certification preferred and OSCP a plus.

Summary

This is a hands-on SaaS security engineering role within State Street's Global Cyber Security team, leading deployment and integration of SaaS Security Posture Management (SSPM) and CASB tools like Obsidian Security to monitor and govern the company's SaaS application ecosystem. It focuses on identity-based and SaaS-to-SaaS threats (OAuth abuse, account takeover) and prefers 8+ years of information security experience, including 5+ years specifically with SSPM/CASB platforms, plus certifications such as CISSP or CCSP.

Summary

A principal-level cloud security engineer at a children's hospital, centered on information-security management, identity and access management, and risk management across cloud platforms in a clinical environment. The work spans network security, SIEM, RBAC, enterprise architecture, and stakeholder management in a healthcare setting with clinical applications and ERP systems.

Summary

Broad enterprise security engineering with a strong governance component — building security solutions across cloud, IAM, AI, and R&D environments while supporting risk assessments, audits, and adoption of frameworks like NIST and ISO 27001. Based in Conshohocken, PA, with openness to the company's locations in France; certifications such as CISSP or CCSP are preferred.

Summary

Despite the cybersecurity framing, this is a senior individual-contributor SALES role (Client Director) at a consulting company, not a delivery or engineering job. A former security practitioner sells the firm's cybersecurity and AI-security offerings to CISOs, CIOs, and CTOs within existing accounts, owning pipeline and closing deals rather than running projects. Asks for 12+ years in cybersecurity with a transition into sales; Philadelphia-routed.

Summary

Principal cybersecurity advisor (AI security) role at Optiv, operating as a client-facing, quota-carrying pre-sales advisor within a Center of Excellence: designing AI-focused security solutions, identifying AI security concerns, driving services pipeline and cross-sell, and advising client executives on AI security strategy and roadmaps. Fully remote within the continental US.

Summary

Executive leadership of an entire security-architecture organization at a global custody bank — reporting to the Deputy CISO, setting enterprise security baselines and design guardrails, standing up a Security Architecture Center of Excellence, and embedding secure-by-design and threat-modeling practices across cloud, application, data, and AI environments. An organizational strategy and governance mandate, not a hands-on engineering seat.

Summary

Senior security engineering role protecting cloud and application security across Azure and AWS, implementing controls spanning SAST/DAST/SCA, web application firewall, CSPM/CNAPP, bot mitigation, vulnerability management, and identity and access management for e-commerce and enterprise systems. Onsite in Philadelphia; uses Python and PowerShell scripting with tools like Snyk, BlackDuck, CrowdStrike, and Cloudflare.

Summary

Client-facing IT audit and cybersecurity risk advisory role at a national accounting and consulting firm, with a focus on HITRUST assessments. Work involves evaluating clients' IT and security controls and helping them meet compliance and risk-management requirements.

Summary

Hands-on application penetration testing (web and API) plus design and oversight of third-party network pentests at a heavily regulated bank, with evidence-based, regulator-ready reporting expectations. The role also leads AI/LLM-enabled testing techniques and assurance testing of enterprise AI deployments — prompt injection, model abuse, and data exposure risks.

Summary

A principal identity-and-access-management engineering role anchored on the SailPoint IdentityIQ platform, doing hands-on config and code across federation, directory services, MFA, and PAM while mentoring a small team. Requires 10+ years in IAM with deep SailPoint IdentityIQ expertise and Java/BeanShell proficiency. The JD states a pay range of $142,361-$213,542.

Summary

An executive Chief Information Security Officer (CISO) role owning security strategy across application security, infrastructure, IAM, security operations, compliance, and data privacy for a global automotive-services company. Reports security posture to the Board and executives, and leads AI governance guardrails plus business continuity and disaster recovery.

Summary

This is a cloud data and AI security architecture role for Carpenter Technology. The person owns security patterns for data ingestion, storage, processing, AI model deployment, IAM, encryption, segmentation, secrets management, and ITAR-sensitive data controls across the company's analytics and AI platform.

Summary

This is a new-grad security governance analyst role for Susquehanna International Group. The person supports cybersecurity GRC, security control assessments, third-party security assessments, policy and exception reviews, evidence gathering, remediation tracking, regulatory and internal-policy monitoring, and automation or tooling for governance workflows.

Summary

Not a cyber incident-response job — this coordinates enterprise business-continuity response to disruptions of any kind (third-party outages, facility and technology issues) at a regional bank, running situational-awareness calls, post-mortems, emergency action plans, and the emergency-notification tool. Requires 24x7 on-call availability and travel within the Greater Philadelphia footprint; ABCP or CBCP certification preferred.

Summary

This is an information security lead role for Proscia's Concentriq platform. The person manages vulnerability management, security governance, incident response, GRC, security policy development, developer-friendly security tooling, AI-assisted detection and response, customer security guidance, regulatory roadmap work such as ISO 27001, SOC 2 and HITRUST, and security standards for regulated healthcare software.

Summary

An identity and access management governance leadership role at a bank, setting standards across platforms like SailPoint, Entra ID, and CyberArk rather than doing hands-on administration. Focus areas include birthright access, role models, entitlement certification, and cloud privilege governance, plus emerging risks such as non-human and AI/service-account identities. It involves senior-leadership reporting and close work with Risk and Internal Audit.

Summary

A senior identity-infrastructure engineering role owning enterprise Active Directory architecture in a regulated bank, covering multi-domain and multi-forest designs, trusts, FSMO placement, and AD-integrated DNS. It pairs this with hybrid identity work in Microsoft Entra ID, including Entra Connect sync, conditional access, and hybrid join. There is heavy emphasis on AD security hardening, the tiered admin model, and privileged access controls.

Summary

A contract GRC analyst position within a CISO organization, leading security risk assessments for internal systems, vendors, and business processes and maintaining the technology/cybersecurity risk register. The work uses frameworks like NIST SP 800-30 and ISO 27005, involves policy governance and translating technical risk into business recommendations, and is explicitly a contract engagement.

Summary

A hands-on security-engineering leadership role at Chatham Financial, building and scaling the security function for its cloud-native financial-risk SaaS platform. As a player-coach you would lead a small, growing team while staying deeply technical — designing security controls across Azure infrastructure, containerized environments, and .NET applications, integrating security into CI/CD pipelines, managing third-party penetration testing, and maturing SOC 2-aligned controls and cloud posture management, including emerging AI/LLM risks. Best for an engineering-first security leader who wants to build and own a security program rather than just manage one; based in Kennett Square, Denver, or Charlotte.

Summary

A senior detection-and-response engineer at CSC, hands-on with Palo Alto Cortex XSIAM to build high-fidelity detections, threat-hunting queries in XQL, and automated response playbooks across endpoint, network, cloud, and identity telemetry. It sits at the intersection of platform engineering and threat expertise, partnering with SOC analysts and mapping detections to MITRE ATT&CK. It wants 5+ years in security operations, detection engineering, or SIEM/SOAR; hybrid/remote from Wilmington, DE.

Summary

A broad hands-on security operations role rather than a single specialty, administering Boomi's security platforms across endpoint protection, vulnerability management, identity, network security and logging or SIEM as the tooling changes. It also covers continuous monitoring for SOC 2, FedRAMP and ISO compliance, access reviews and least-privilege enforcement, runbook and procedure authoring, and security incident and alert response including participation in on-call rotations and after-hours escalations. The posting asks for six or more years in IT with at least three in a security-focused role.

Summary

A cloud security specialist at Customers Bank focused on Azure and Microsoft 365 security posture — implementing Microsoft Defender (CASB), managing DLP strategies, conducting cloud risk assessments, and ensuring compliance with ISO 27001, SOC 2, and NIST frameworks. The role spans multi-cloud environments (Azure primary, with AWS/GCP coverage) and requires hands-on configuration experience with Azure security tooling. U.S. work authorization without sponsorship required.

Summary

A director-level information-security leadership role at Phenom, leading and scaling its business-facing security function through a Security & Trust service-oriented model. The scope is broad security leadership — security assurance, vulnerability management and penetration testing, security architecture, risk-management frameworks, compliance (including FedRAMP and SaaS and product security), security-awareness training, and service delivery with KPI development. A fit for a security leader who can run security as a service to the business and scale trust-enablement programs at a SaaS company; based in Ambler, PA.

Summary

Despite the DevSecOps title, the description calls this a Senior Platform Engineer opening — infrastructure/DevOps work needing only a basic grounding in Kubernetes, AWS, containerization, and deployment pipelines. The real filter is the clearance: TS/SCI with full-scope polygraph.

Summary

An application security engineering role embedding security into a bank's software development and DevOps pipeline. The engineer scans and tests applications for vulnerabilities, joins code reviews to flag insecure code, automates security checks, and coaches engineering teams on secure coding. It also partners with incident response to remediate application-security findings.

Summary

DevSecOps engineering to deliver a complex software application into operations, expecting advanced Kubernetes, containerization, automated test, and deployment-pipeline skills and self-starter productivity. Requires TS/SCI with CI polygraph; relocation benefits and flexible scheduling are offered.

Summary

Called DevSecOps in the title but described as a Staff Platform Engineer, working on-site in King of Prussia, PA to deliver a complex software application into operations. Needs a basic grounding in Kubernetes, AWS, containerization, and deployment pipelines, plus a TS/SCI clearance with full-scope polygraph.

Summary

A Cybersecurity Operations Project Lead at UGI/AmeriGas (Philadelphia area) serving as the operational backbone of the Global Information Security Group - managing the non-payroll security budget, vendor engagement and renewals, process/SOP development, operational reporting, and the annual cyber-insurance renewal, with reporting aligned to the NIST CSF framework. It is a program/operations and financial-management role rather than hands-on security engineering (a cybersecurity-category posting). A fit for a security-program operations or project lead; the work is coordination and budget, not technical defense.

Summary

Information security advisory role at a healthcare system, partnering with technology teams to assess infrastructure, identify vulnerabilities, and lead complex security initiatives. It draws on security operations, threat analysis, risk mitigation, and incident response, with certifications such as CISSP, OSCP, or GPEN preferred.

Summary

A cybersecurity governance, risk, and compliance role leading the modernization and ongoing management of information security policies and standards on an enterprise security GRC team. The specialist develops audit-ready security requirements, aligns policies with enterprise risk, control, and regulatory expectations, and uses data and automation to improve governance at scale. Serves as a technical authority interfacing with stakeholders and external regulators on information security matters.

Summary

A cybersecurity governance, risk, and compliance role conducting security and fraud assessments and risk analyses while maintaining a portfolio of global security and fraud policies and standards. The specialist evaluates safeguards, develops and coordinates security policies and controls, and interfaces with compliance teams and external regulators. Requires in-depth knowledge of frameworks such as NIST CSF, NIST 800-53, CIS Controls, and ISO 27002, with certifications like CISSP or CISM preferred.

Summary

This is an application security integration engineering role for Vanguard. The person plans and implements cloud security technologies, designs and deploys cloud security systems, troubleshoots complex cloud security issues, supports production operations, develops auditing methodologies for cloud data protection, elevates security code through environments and mentors junior engineers.

Summary

A senior security-analyst role at IT Solutions Consulting, a Philadelphia-area managed IT provider, running Security-as-a-Service operations for client environments. Despite the comma-order title it is a hands-on cybersecurity seat: monitoring security alerts, performing endpoint forensics and incident response, conducting vulnerability assessments, and delivering security-awareness training. Requires roughly 10 years of experience and a Security+ or equivalent certification.