Top Cybersecurity Jobs in New York City, NY

Architects, deploys, and operates secure, resilient cloud infrastructure across AWS, Azure, and VMware. Provides cloud security direction, implements IAM and configuration management, monitors threats, manages vulnerabilities and remediation, supports incident response, ensures regulatory compliance, and advises application and infrastructure teams. The role also oversees cloud vendors, security assessments, hardening, encryption, and secure application delivery in regulated banking or insurance environments.

Build and evaluate AI security solutions across cloud and third-party platforms. Develop prototypes, test security capabilities, assess vendor claims, identify technical risks, and create reusable security patterns. Focus on agentic AI security, including identity, authorization, MCP, policy enforcement, tool access, and agent communication. Apply software development, AI applications, cloud platforms, APIs, security testing, and technical documentation skills while researching emerging technologies and communicating recommendations.

Investigates fraud alerts, referrals, suspected fraudulent activity, account takeover, and identity concerns. Reviews evidence, validates client activity, manages cases, documents findings, dispositions alerts, secures compromised accounts, and supports transaction reversals. The role also analyzes fraud trends, identifies control gaps, recommends process improvements, communicates with affected clients and business partners, and escalates significant issues. Candidates need analytical, communication, organizational, and decision-making skills, financial services or fraud experience, and proficiency with Microsoft Excel and Word.

Leads third-party and supply chain exposure management, including continuous monitoring, cyber and financial risk signals, incident response, fourth- and nth-party dependency analysis, concentration risk, and technology risk deep dives. The role develops executive exposure insights, establishes escalation and mitigation mechanisms, oversees critical third parties, and coordinates risk reduction across Technology, Cybersecurity, and business stakeholders.

Support annual cybersecurity compliance certifications, regulatory examinations, reporting, and information requests. Maintain requirement and evidence trackers, coordinate stakeholders and control owners, review documentation for accuracy and completeness, organize repositories, manage executive DocuSign approvals, and support SEC and FINRA compliance reporting. Identify process improvements and assess cybersecurity controls and technology risk evidence. The role requires strong organization, project management, communication, analytical, and stakeholder management skills.

Leads the enterprise cybersecurity incident response function as senior incident commander and people leader. Directs containment, eradication, recovery, investigations, evidence handling, regulatory notifications, executive communications, crisis coordination, and post-incident improvement. Establishes incident response governance, playbooks, metrics, readiness objectives, and audit processes while coordinating security, technology, legal, compliance, business, vendors, and executive stakeholders. Builds and manages a multidisciplinary response team and maintains continuous coverage for high-impact incidents.

Leads enterprise authentication engineering strategy, architecture, delivery, reliability, and user experience across workforce, applications, APIs, cloud, hybrid environments, non-human identities, and AI agents. Oversees federation, SSO, MFA, passkeys, authorization, PKI, workload identity, and continuous authentication. Directly manages authentication engineers, including hiring, staffing, performance management, technical guidance, and career development. Represents Cybersecurity in governance forums and drives secure, scalable authentication modernization.

Design and implement application security controls for AI applications, agentic systems, and Vertex AI platform services. Build guardrails against prompt injection, unsafe tool invocation, data exfiltration, and model abuse. Integrate security into CI/CD, software development lifecycles, infrastructure-as-code, and cloud environments. Partner with AI, MLOps, cloud engineering, data science, and model risk teams while developing Python automation, detection capabilities, and reusable security standards.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

The IAM Engineer will design, engineer, and maintain IAM solutions across all domains, supporting both on-premises and cloud environments, while automating identity lifecycle management processes and ensuring compliance.