Top Cybersecurity Jobs in New York City, NY

Own detection and response across endpoints, identity, cloud, SaaS, and AI systems. Build production-grade detections, threat models, response playbooks, and security automation; investigate and contain incidents; lead threat hunting, incident response, insider-risk investigations, and post-incident reviews. Collaborate across engineering, legal, corporate security, and people teams while improving detection coverage, response speed, and defenses against threats targeting AI companies.

Lead Legora's assurance and AI governance programs, owning SOC 2/ISO certifications, AI-agent assurance, enterprise risk register, policy lifecycle, and BCDR. Build unified controls mapped to multiple frameworks, work with auditors and customer security teams, and convert policies into automated checks alongside the AI GRC Engineer.

Build and operate an automated GRC platform: pipelines that collect evidence across cloud, IdP, HRIS, source control and CI/CD; implement a unified controls library; produce audit-ready evidence for AI certifications; translate policies into enforceable CI/CD checks and continuous monitoring; instrument control effectiveness; design agentic workflows for evidence analysis and audit response with human-in-the-loop.

Own and harden Legora's corporate security posture across identities, non-human and human accounts, SaaS, endpoints, and AI use. Build guardrails-as-code (Python/Terraform), enforce least-privilege and phishing-resistant MFA, govern LLM/agent usage, run DLP and access reviews, and automate remediation for risky OAuth grants and device risk.