Top Cyber Security Jobs in NYC, NY

Leads software engineering for secure, scalable security platforms in a regulated banking environment. Responsibilities include designing, developing, testing, debugging, and operating production systems; guiding engineers and vendors; governing AI-assisted development practices; validating AI outputs for security and performance; applying cloud-native technologies; and influencing architecture, technical operations, and engineering standards.

Architects and develops secure authentication, authorization, and identity management infrastructure. Builds software in Python or Go, modernizes legacy systems into cloud-native platforms, improves observability and documentation, evaluates security technologies, makes architectural decisions, leads cross-team initiatives, and mentors engineers while maintaining high security and reliability standards.

Develop and modernize secure authentication, authorization, identity management, and configuration infrastructure using Java, Go, or Python. Lead architecture decisions for cloud-native migrations, improve observability and reliability, mentor engineers, conduct code reviews, evaluate security technologies, and drive cross-team initiatives. Serve as a technical authority for security infrastructure while contributing to documentation, open source, and security posture improvements.

Leads the design, implementation, and evaluation of security controls for AI systems across AWS and corporate environments. Researches AI threats and vulnerabilities, develops security architecture and standards, supports AI governance, monitors systems, and participates in AI R&D initiatives. Provides technical guidance to engineering, product, IT, risk, and cyber defense teams while advancing AI-enabled security operations and risk management. The role also requires secure SDLC, DevSecOps, threat modeling, vulnerability management, cloud security, and automation expertise.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Leads technical pre-sales architecture for complex security solutions serving public-sector and commercial customers. Translates business, security, compliance, and technical requirements into solution designs, bills of materials, statements of work, estimates, pricing, assessments, and deployment plans. Conducts discovery sessions, architecture workshops, solution reviews, and customer presentations while partnering with sales, delivery teams, and security vendors. Mentors architects and sellers, supports regional customer activity, and travels throughout the Southeast as needed.

Secure CrowdStrike’s software supply chain and code-hosting environments by assessing GitHub organizations, open-source integrations, repositories, dependencies, and third-party packages. Implement repository guardrails, secret scanning, access controls, and automation; investigate supply-chain threats such as typosquatting and dependency confusion; promote secure coding and open-source compliance; and collaborate with engineering teams on security initiatives.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate automated infrastructure security capabilities across multi-cloud environments. Harden Linux hosts and containers, develop security controls with Terraform and production code, manage Kubernetes and cloud security platforms, implement monitoring and threat detection, and lead initiatives from threat modeling through reliable production deployment.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Lead enterprise security engineering across DLP, zero-trust networks, endpoint protection, SaaS posture management, email security, and network defense. Design secure architectures, baseline configurations, automation, threat signaling, and risk mitigation strategies. Administer security tools, conduct incident response and threat detection, analyze logs, and support digital forensics. Partner with IT, infrastructure, risk, compliance, and engineering teams while mentoring staff and establishing cybersecurity best practices.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Establishes a security engineering practice, develops production Go code, and secures cloud and container infrastructure across multiple providers. Responsibilities include access controls, network defenses, credential handling, workload isolation, audit logging, application security, and secure coding. The engineer also builds security capabilities for external users and advises client technical teams on platform security requirements.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.

Develop and maintain Java-based security services for Citi’s digital assets platform, including cryptographic libraries, key management, signing workflows, HSM integrations, and MPC-based wallet infrastructure. Establish secure distributed-system patterns, conduct threat modeling and design reviews, integrate security testing into CI/CD, and provide technical leadership for cryptographic decisions, vulnerability triage, and security incidents.

Leads ABM’s enterprise AI security strategy, governance, tooling, and security-by-design initiatives across internal AI/ML systems and third-party vendors. Builds and manages an AI security team, directs threat modeling, assessments, red teaming, incident response, and risk mitigation, and partners with executive, engineering, data science, legal, privacy, risk, and operations stakeholders. The role requires deep expertise in cybersecurity, generative AI, LLMs, agentic systems, cloud platforms, AI governance, and regulatory compliance.

Build and operate secure AI platforms, agent workflows, and reusable automation patterns. Embed security into SDLC and PDLC through threat modeling, scanning, secrets detection, supply-chain controls, and automated reviews. Develop AWS identity, network, access, and infrastructure guardrails, including zero-trust and privileged-access automation. Own production services, monitoring, incident response, and on-call support while partnering with teams across the company to enable secure self-service workflows.