Top Cyber Security Jobs in NYC, NY

Designs and implements defensible network security infrastructure for New York City government agencies. Responsibilities include reviewing security architecture, identifying gaps, developing risk management plans, building and testing cyber defense systems, implementing continuous monitoring, administering security tools, automating controls, integrating security procedures, coordinating with technical teams, and supporting cybersecurity vendor procurement. The role operates within a 24/7 environment and may require nights, evenings, or weekends.

Supports the security of industrial control and operational technology systems used in critical municipal infrastructure. Responsibilities include implementing security controls, configuring segmented networks and firewalls, supporting incident response, conducting risk and vulnerability assessments, maintaining documentation and asset inventories, providing technical guidance, and contributing to ICS security training. The role is based in Brooklyn and may require nights, weekends, or other shifts in a 24/7 operation.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Lead the design and implementation of Aalyria’s security platform, including identity, authentication, authorization, PKI, workload identity, secrets, key management, audit evidence, and security standards. Build systems that operate securely in commercial, government, classified, and disconnected environments. Set technical direction across teams, mentor engineers, threat-model distributed systems, and operate production services through upgrades, maintenance, and incidents.

Designs, implements, and maintains enterprise security solutions across networks, endpoints, email, identity, and data protection. Responsibilities include firewall and VPN management, threat detection, incident response, vulnerability management, security audits, penetration testing, SOC 2 compliance, phishing response, SIEM monitoring, threat hunting, and security assessments. The role also supports Azure security, third-party risk questionnaires, technical design reviews, and off-hours security operations.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Owns Blueberry’s day-to-day security operations, including vulnerability management and remediation across GCP and Python/Django applications. Maintains detection, logging, monitoring, incident readiness, backups, endpoint security, network controls, access management, and IT administration. The role requires production Python experience, Linux administration, cloud experience, and hands-on familiarity with security tools and controls.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Leads Fastly’s Platform Security organization, defining multi-year technical strategy and roadmaps for foundational infrastructure, secrets, identity, PKI, and trust services. Manages engineering teams and principal-level contributors, drives reliability and security best practices across the organization, establishes metrics and accountability, and communicates strategy and risk to executives. Requires deep experience with distributed systems, infrastructure as code, Linux, cloud and on-premises environments, and security technologies. Coding is not expected, but strong technical expertise is essential.

Lead and mature Plenful’s company-wide security program across application, cloud, infrastructure, security operations, incident response, compliance, and customer trust. Manage a small team, establish security roadmaps and controls, partner with engineers on vulnerability remediation and secure development, strengthen AWS and AI/ML security, oversee SOC 2, HIPAA, and HITRUST initiatives, and communicate security risks to executives, customers, auditors, and cross-functional stakeholders.

Build and maintain scalable security platforms, automation, APIs, detections, and internal tooling for a cloud-native SaaS environment. Secure AI applications, LLM services, identities, SaaS platforms, cloud infrastructure, and APIs. Develop controls against prompt injection, data leakage, model misuse, and excessive permissions while supporting vulnerability management, incident response, threat modeling, and security operations.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Designs, deploys, and secures AI agents for enterprise risk and security operations. The role manages AI governance, Microsoft security and compliance controls, data protection, DLP, insider risk, access controls, monitoring, incident response, and SIEM/XDR integrations. It also leads security architecture, automation, AI risk evaluation, cross-functional initiatives, and mentoring while supporting secure adoption of Microsoft Copilot and Azure AI platforms.

Design and implement security across infrastructure, applications, data, and AI systems. Own authentication, authorization, tenant isolation, secure log ingestion and querying, and AI security risk mitigation. Lead security incident response and postmortems, establish practical security practices, and partner with engineering to integrate security into development. The role requires application or infrastructure security experience, knowledge of OWASP vulnerabilities, and experience securing distributed systems and APIs.

Own security architecture and DevSecOps for SaaS, cloud, and AI applications. Lead vulnerability management, application security, red-team and adversarial testing, multi-tenant isolation, identity and data protection, compliance controls, and AI security. Partner with engineering, platform, SRE, data, and governance teams; participate in incident response, mentor engineers, and communicate enterprise risk to executives. The role requires hands-on coding and leadership across regulated, multi-cloud environments.

Build and lead Qualitate’s security program as its first dedicated security engineer. Secure AWS or GCP infrastructure, implement logging, monitoring, detection, access controls, encryption, and vulnerability remediation, and review application architecture. Lead ISO 27001 certification, automate compliance evidence, respond to incidents, address penetration-test findings, secure LLM-based systems, and develop production security tooling while partnering with engineering, compliance, and legal.

Design and harden Nova’s cloud and future on-premise platform security, including tenant isolation, identity, access policies, secrets, keys, networks, and secure execution sandboxes. Lead red-team testing of authentication, AI agents, privilege boundaries, prompt injection, and sandbox escapes. Own SAP identity integrations, internal security standards, compliance readiness, and customer security partnerships. Research offensive and defensive AI security, contribute to product development, and represent Nova in the SAP security community.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Designs and builds endpoint security platforms for FanDuel’s global device fleet. Responsibilities include threat modeling, architecture, production software development, infrastructure-as-code, GitOps policy deployment, security monitoring, detection pipelines, incident investigation, and risk reduction. The role partners across security and enterprise technology, mentors junior engineers, and advances zero-trust maturity through automation and secure device baselines.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Leads technical security sales engagements for K-12 and community college customers through demonstrations, workshops, whiteboarding, hackathons, and proofs of concept. Designs secure cloud and hybrid architectures, resolves technical blockers, advises on Zero Trust, XDR, AI security, and compliance, and supports production deployments. Builds relationships with developers, platform leaders, partners, and customer success teams while promoting Microsoft security, cloud, and AI solutions.