Top Senior Cyber Security Jobs in NYC, NY

Lead identity and access security across a global portfolio, including authentication, authorization, non-human identities, PAM, JIT access, and Cloudflare ZTNA. Design Okta policies, integrate endpoint and SaaS security signals, manage identity governance and compliance, and automate security workflows using infrastructure-as-code, scripting, and AI tooling. Influence cross-functional teams, modernize access controls, and drive complex security initiatives to completion.

Architect and engineer multi-tenant SIEM, SOAR, EDR, telemetry, and cloud security platforms for managed security services. Build detection content, automate response workflows, optimize log ingestion, and secure customer connectivity. Lead technical discovery, onboarding, security assessments, remediation planning, escalations, solution design, and customer advisory engagements. Create architectures, runbooks, and documentation while shaping the MSSP technology strategy.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Own the technical win for cybersecurity sales opportunities by leading discovery, solution architecture, demos, workshops, POCs, and proof of value. Design ransomware-recovery, immutable and air-gapped vaulting, identity-resilience, and DSPM architectures. Develop executive-ready technical narratives, collaborate with specialist account executives and partners, understand customer technology environments, and provide field feedback to product teams. The role requires strong security presales architecture expertise, infrastructure knowledge, and the ability to communicate with technical and executive stakeholders.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Lead architecture and evolution of an enterprise vulnerability management platform. Design risk-based vulnerability management systems, automate remediation, integrate security scanning into development and infrastructure workflows, and apply AI/ML to vulnerability triage and remediation. Establish governance, analyze complex vulnerabilities, guide risk decisions, mentor engineers, and collaborate across IT, product, compliance, and operations teams.

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Lead and grow a security engineering team as a technical player-coach; implement security tooling and automation across corporate, infrastructure, and application layers; define data-driven security strategy, OKRs, and KPIs; manage compliance with frameworks (SOC2, CIS, GDPR); lead incident response and threat modeling; govern AI/ML security risk; and drive security culture and cross-functional education.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.

Senior Security Engineer responsible for application, cloud, and platform security across an enterprise SaaS environment. The role involves building security automation and agents, integrating risk-based reviews into development, conducting threat modeling and code reviews, improving detection and observability, remediating systemic risks, and supporting compliance initiatives. The engineer will partner closely with development teams and help secure AI-powered features, cloud infrastructure, APIs, and deployment mechanisms.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.