Top Senior Cyber Security Jobs in NYC, NY

Build and lead platform trust and safety security initiatives, including user security features, risk-scoring algorithms, threat detection, incident response, and front-end and back-end development. Drive the technical roadmap, mentor software and security engineers, create security metrics, collaborate across engineering, product, and design teams, and address abuse in modern SaaS applications.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Leads cybersecurity product strategy and roadmaps for enterprise network security services. Evaluates threats, risks, technologies, and build-versus-buy options; manages RFI/RFP processes; translates security objectives into product backlogs and engineering requirements; defines metrics and value propositions; advises executives; and mentors teams. The role partners extensively with engineering, operations, developers, and business stakeholders to deliver scalable security capabilities.

Build security infrastructure for Datadog’s CI/CD systems, including trusted build provenance, secure secret delivery, access controls, and real-time policy enforcement. Design highly performant, reliable systems operating in the critical path of software delivery, partner with platform and infrastructure teams, guide adoption, mentor junior engineers, and participate in incident response. The role focuses on protecting software supply chains while maintaining developer experience and high throughput.

Own and implement Sandbar’s backend security, including encryption, key management, confidential computing, identity, secrets, supply-chain security, incident response, compliance, and data-handling controls. Build features in Python real-time services, conduct threat modeling and design reviews, and guide secure engineering practices. The role requires deep cloud security, applied cryptography, production incident response, and backend ownership, with confidential computing and mobile or device security experience preferred.

Secure and harden AWS and GCP infrastructure, manage vulnerabilities, implement compliance controls, maintain audit evidence, improve Kubernetes and CI/CD security, support reliability and incident response, and develop automation for security and infrastructure workflows. The role also contributes to application security, code reviews, production troubleshooting, detection, and FedRAMP readiness.

Leads multiple engineering teams delivering customer-facing cybersecurity products. Sets technical direction and strategy, partners with Product Management, mentors engineering managers and engineers, establishes performance metrics, manages cross-organizational projects, hires engineering talent, and drives continuous improvement while fostering an empathetic, results-oriented engineering culture.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Designs, implements, and oversees security architectures for federal systems, including zero-trust and cloud environments. Leads secure system design, control integration, detection and response architecture, and alignment with NIST and FISMA requirements. Collaborates with SOC analysts, incident responders, engineers, and leadership to build resilient, scalable security operations environments.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Lead the technical presales process for Proofpoint’s data security and insider risk solutions. Partner with sales teams, conduct technical discovery, design security architectures, and manage proof-of-concept and production evaluations. Present solutions to customers, support deployments and training, collaborate with Professional Services, Engineering, Product Management, and Support, and provide customer insights to improve products. The role also develops internal documentation, training, and repeatable sales engineering processes.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Implements and operates data security controls across cloud analytics platforms, databases, data lakes, storage, and pipelines. Responsibilities include encryption, key and secrets management, least-privilege access, data classification, masking, tokenization, database hardening, secure integrations, entitlement reviews, automation, telemetry, compliance evidence, threat modeling, documentation, and technical support. The role collaborates with security, data, governance, engineering, and IT teams while working remotely.