Open Pittsburgh Cybersecurity jobs

Summary

A senior infrastructure engineering role supporting PNC's enterprise-scale email platform, centred on monitoring and maintaining Proofpoint systems. The work includes email flow and SMTP configuration, the sender authentication layer of SPF and DMARC, leading technical projects, documenting process and change, and responding to email-borne security events.

Summary

A workforce identity and access management role at PNC, responsible for running and evolving the enterprise identity governance and administration capability: identity lifecycle, access request management, role and entitlement management, and access governance. The platform work sits on IGA products such as SailPoint, Oracle Identity Manager and Saviynt, delivered in an agile kanban model with engineering and business partners.

Summary

A security operations centre analyst role at PNC, triaging and responding to security alerts, supporting SIEM and endpoint detection and response operations, and assisting with incident response and risk mitigation. This is an overnight shift position, Saturday through Tuesday from 10pm to 8am Eastern.

Summary

A security operations centre analyst role at PNC, evaluating and responding to security alerts, supporting security incident and event management, and assisting with risk mitigation across the bank's security technologies. This is an overnight shift position, Tuesday through Friday from 10pm to 8am Eastern.

Summary

Application security engineering role identifying and mitigating application security risks across the software development lifecycle. The work involves evaluating vulnerabilities, guiding remediation, and working with development teams on secure coding for Java and .NET applications.

Summary

A cloud security engineering role at PNC, partnering with platform and business teams to strengthen security controls across Azure and AWS and to build the dashboards that report on them. The work centres on Azure Defender, Prisma Cloud and Cortex Cloud in a CNAPP context, and extends into access control, network security, disaster recovery planning, control-owner and RCSA responsibilities, and vendor management.

Summary

Senior incident responder on Eaton's cyber security incident response team, investigating, containing and remediating threats across on-premises, hybrid and multi-cloud estates as well as operational technology environments. Beyond response the role builds detection engineering, SOAR playbooks and agentic AI automation to scale the security operations center, and runs proactive threat hunting against emerging indicators of compromise. The position includes 24/7/365 on-call rotation coverage.

Summary

A hands-on security engineering role on the Enterprise Cyber Security team at Latitude, a Ford subsidiary developing a hands-free ADAS platform, acting as technical lead for securing the high-performance computing and virtualization environments plus data center and network infrastructure. The work is design and build rather than monitoring: reviewing existing and new architecture for design flaws, running threat and risk assessments and proofs of concept, advocating stronger controls, and developing automation and orchestration for the security aspects of cloud and virtualized deployments. It also includes reporting on security posture through dashboards and metrics, and mentoring and knowledge transfer to other engineers.

Summary

A security analyst role in PNC's Forensic Investigations organization, conducting digital forensic investigations and technical evaluations across the bank, analyzing security data, and supporting incident response and risk mitigation. Suited to candidates with a background in digital forensics and information security.

Summary

Application security role providing technical evaluation in threat modeling and vulnerability remediation, guiding development teams toward secure software. Hands-on scope includes OWASP, API security, secure design, SAST, DAST, RASP, penetration testing, and CI/CD pipeline security across AWS, Azure, and GCP. Specialist position embedded with development teams rather than a general SOC role.

Summary

Security operations center analyst role detecting, investigating, and mitigating threats using SIEM and EDR tooling. Core work covers incident response, threat detection, security event management, and endpoint detection and response within PNC's technology organization. The posting specifies a fixed Tuesday-through-Saturday, 7am to 3:30pm EST shift.

Summary

A security architecture role at a bank, designing security solutions and controls across cloud and on-premises environments. Work covers security frameworks such as NIST and ISO 27001, encryption, identity, network security, and intrusion detection and prevention rather than application development.

Summary

A security engineering and operations role at an AI company, responsible for securing both internal infrastructure and the systems used to deliver security products across cloud, endpoints, applications, and AI workloads. Day-to-day work spans deploying and managing EDR/XDR, SIEM, vulnerability management, and identity platforms, monitoring and responding to incidents, coordinating penetration testing, and supporting compliance against frameworks such as NIST CSF, CIS Controls, or ISO 27001. Automation with Python, Ansible, or Terraform and experience securing cloud-native or AI environments are valued.

Summary

This is a security-engineering role focused on container and host-based network micro-segmentation (Illumio), including hands-on implementation with application teams, maintaining security tooling, and participating in day-to-day Cyber Security Operations Center monitoring and incident response. It is a security-operations and network-segmentation specialty rather than software development. The employer states it will not sponsor work visas, so applicants must already be authorized to work in the US.

Summary

A penetration-testing role on a publisher's offensive-security and Security Assurance team — hands-on testing of web apps, APIs, and cloud environments, plus peer review and triage of third-party assessment findings. A distinctive focus is GenAI security: testing LLM integrations and RAG pipelines for prompt injection, jailbreaking, and model-data leakage, aligned to the OWASP Top 10 for LLMs. Pitched as a growth role for a motivated tester, with a security certification preferred and OSCP a plus.

Summary

Technical manager leading CERT's Cyber Risk Management applied-research agenda in support of US federal and defense priorities. Sets technical vision, scopes and plans projects, manages budgets, finances, and staff, generates new work with business development, and delivers interdisciplinary cyber-risk research and solutions directly to government sponsors.

Summary

This role designs and operates enterprise data-loss-prevention controls using Symantec DLP and Microsoft Purview, handles data classification/labeling and insider-threat investigations, and supports regulatory compliance for PNC. Despite the generic 'Security Specialist' title, this is a senior data-protection/DLP engineering position based in Cleveland or Pittsburgh.

Summary

Senior researcher on CERT's Network Situational Awareness team leading network-threat research and detection development from netflow, application-layer metadata, and host-based (EDR) and cloud telemetry, and transitioning it into the NetSA security tool suite, publications, and partner training. The most senior level of the network-security research family.

Summary

Researcher on CERT's Network Situational Awareness team researching network threats and building detection methods from netflow, application-layer metadata, and expanding host-based (EDR) and cloud telemetry. Transitions the research into the NetSA security tool suite, publications, and customer-specific training. An experienced level of the network-security research family.

Summary

Entry-level researcher on CERT's Network Situational Awareness team studying network threats and building detection methods from netflow, application-layer metadata, and expanding host-based (EDR) and cloud telemetry. Develops detection capabilities and feature requests for the NetSA security tool suite and helps partners better understand and defend their data.

Summary

A senior principal role focused on secure software delivery at a bank — CI/CD, DevSecOps, and notably secrets management in support of an enterprise-scale remediation effort. The work mixes JavaScript and Go development with shell scripting, Linux and Windows administration, containerization on Kubernetes/OpenShift, and incident response and application support duties. For an engineer who wants platform-security and automation ownership at the top individual-contributor rungs.

Summary

Senior engineer at the SEI applying statistics, mathematics, risk analysis, systems engineering, and economics to quantify and manage cyber risk for government and industry mission partners. Builds and evaluates risk models, conducts security assessments and threat modeling, and develops products and transition plans intended to shape national cybersecurity strategy.

Summary

Senior engineer on CERT's Cyber Risk and Resilience Directorate (Cybersecurity Assurance Team), building the frameworks, models, tools, and technical guidance that help government, military, and industry partners measure and reduce operational and technical risk to mission-critical services. Consults directly with mission partners, standardizes cybersecurity assessments, and develops security-measurement approaches, including for AI and agentic systems.

Summary

Engineer on CERT's Cyber Risk and Resilience Directorate (Cybersecurity Assurance Team), developing the frameworks, tools, practices, and measurement methods that help industry, government, and military partners manage operational and technical risk to mission-critical services. Consults with mission partners, standardizes cybersecurity assessments, and applies security-measurement approaches to emerging technology including AI-enabled systems.

Summary

Software and machine-learning engineer on CERT's AI security team building ML-based prototypes, products, and tools to solve and automate AI-security problems. Work includes AI red teaming, counter-AI applications, adversarial machine learning, and security analysis of AI systems, using CERT's cyber datasets alongside AI and security researchers and university faculty.

Summary

A senior director and IAM engineering leader role in BNY Mellon's Information Security Division: architecting and deploying SailPoint IdentityIQ/ISC identity-lifecycle solutions, establishing security and governance controls aligned to financial regulations (SOC1, SOX, FFIEC, GLBA), defining the IAM strategy and roadmap, and leading a team of SailPoint and full-stack engineers. It wants 15+ years in IAM software engineering including 5+ with SailPoint, plus Java, REST/SOAP and AD/LDAP/SSO integration experience; Pittsburgh.

Summary

A senior security architect role at a financial institution, leading the design and governance of cloud and AI security. The work covers security architecture and standards, risk assessment, access control, AI security governance, network and physical security, and disaster recovery planning. The excerpt is short and reads mostly as a skills list.

Summary

Enterprise security architecture role defining Aurora's security strategy, reference architectures, and technical standards across endpoint, network, and infrastructure security, vulnerability management, data protection, and PKI using Zero Trust principles. A security-architecture position rather than software development, partnering with GRC, IAM, and cloud and product security teams.

Summary

A project-management role running high-volume commercial cyber-breach responses — coordinating digital-forensics and incident-response teams, on-site recovery, clients, and legal counsel through crisis engagements. It is crisis program management in a DFIR context rather than hands-on forensics; wants an incident-response or forensics background plus 3+ years of project management.

Summary

Security Engineer (Cryptographic Engineer for Post-Quantum Cryptography) at PNC — advances post-quantum cryptography, PKI, key management, hardware security modules, and cloud-security work tied to PCI, FIPS, and NIST guidance. Specialist role inside a bank's information-security organization.

Summary

Senior researcher on CERT's Security Operations team providing technical guidance to Security Operations Centers, national cyber centers, and incident-response teams, and prototyping methods to measure and improve defensive cyber operations for US government and international partners. Also designs and delivers training and engagement programs for incident-response and SOC teams.

Summary

An IT security analyst/engineer at the Pittsburgh Supercomputing Center handling security operations on high-performance research computing systems. Note the hard constraint: no STEM-OPT sponsorship, so candidates must hold a green card or be a permanent resident or US citizen. Pittsburgh.

Summary

A SOC security-analyst role at PNC using SIEM and EDR to investigate incidents and mitigate risk, on a fixed Tuesday through Saturday, 3:00pm to 11:30pm EST shift. It is a hands-on security-operations seat, the weekend-coverage counterpart to the Sun-Thu posting.

Summary

A SOC security-analyst role at PNC investigating incidents with SIEM and EDR and mitigating risk. Note the fixed shift: Sunday through Thursday, 3:00pm to 11:30pm EST, a hands-on security-operations seat best for analysts open to evening hours.

Summary

Pittsburgh Security Engineer (Cloud Security Controls) — protect PNC's public-cloud workloads across Azure and AWS using automation, compliance tooling, and CI/CD-integrated security controls. Python/PowerShell/Bash plus SQL and Git. Senior IC who also mentors junior staff.

Summary

Senior AI Security Software Engineer in SEI's CERT Division — same template as J2024469 at the senior grade. Develops AI-security TTPs, designs large-scale AI-security research experiments, runs AI red teaming, and develops counter-AI applications. Mentors junior engineers and contributes to thought leadership.

Summary

AI Security Software Engineer in SEI's CERT Division — work at the intersection of AI security and the national-security mission. Researches and develops the tactics, techniques, and procedures for AI security; designs experiments for large-scale AI-security research, runs AI red teaming, and explores counter-AI applications. Generative AI, data visualization, adversarial ML all in scope.

Summary

Enterprise security engineering role (explicitly not security-operations-only) that both architects and codes Aurora's internal security controls, telemetry and detection infrastructure (log pipelines, SIEM integrations, alerting), and automation protecting endpoints, identities, internal systems, and SaaS. It emphasizes building security platforms and integrations, shifting security left with IT/Infra/Engineering, and includes an on-call rotation; the JD stresses equal comfort in a code editor and a security console.

Summary

NEW YORK based (not Pittsburgh — this role posts to the same BNY Workday tenant but the office is NYC) cyber security engineer in BNY's Digital Assets Technology team. Build crypto custody and tokenized assets infrastructure with cryptographers — secure coding in C/C++, Go or Rust, threat modeling, side-channel-attack resistance, blockchain integrations. 12+ years of high-volume/low-latency platform experience required.

Summary

Researcher on CERT's Security Operations team developing methods and guidance for Security Operations Centers, national cyber centers, and computer security incident response teams. Partners with federal agencies and international organizations to prototype ways to measure and improve defensive cyber operations, and helps design and deliver incident-response and SOC training programs.

Summary

Entry-level researcher on CERT's Security Operations team supporting technical guidance for Security Operations Centers, national cyber centers, and incident-response teams, and helping prototype methods to measure and improve defensive cyber operations for US government and international partners.

Summary

A senior IT security analyst role in American Eagle's Security Operations group, configuring and operating cybersecurity controls (EDR, identity protection, DLP, next-gen firewalls, container and application security, CSPM/CWP) across the retailer's cloud environments. This is hands-on security engineering and monitoring with about five years of enterprise cloud experience expected, plus some off-hours support. Pittsburgh; a fit for a cloud-security practitioner.

Summary

A senior cloud security engineer on Aurora's security team — IAM/policy, security boundaries, Kubernetes/cloud hardening, and detection/response automation across AWS/Azure/GCP. Wants 5+ years of progressive security-engineering experience.

Summary

An application-security engineering role at a Pittsburgh fintech, working hands-on with developers to build security into the SDLC through code review, SAST/DAST, threat modeling, CI/CD hardening and vulnerability management, including AI/LLM security tooling. It is pitched as a growth role for a developer moving into security or an early-career security engineer (2+ years). Fully on-site, 5 days a week in Pittsburgh.