Top Cyber Security Jobs in NYC, NY

The OT Network Security Engineer supports 24/7 operations for the Bulk Electric System. Responsibilities include maintaining NERC/CIP compliance, configuring and managing network devices, securing SCADA infrastructure, troubleshooting network security issues, analyzing logs and events, responding to incidents, supporting development projects, and coordinating across teams. The role requires on-call participation, crisis management, strong communication, and experience in transmission utility or SCADA environments.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead secure architecture strategy across application, cloud, identity, edge, and AI security domains. Conduct threat modeling for complex services and LLM systems, define AI security practices, build security tooling, harden CI/CD and infrastructure-as-code environments, and manage AWS and WAF security controls. Serve as a technical escalation lead for security incidents, influence enterprise security strategy, represent security in executive architecture discussions, mentor senior engineers, and participate in 24/7 on-call support.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own account-level security strategies for defense, aerospace, intelligence, and critical infrastructure customers. Lead security architecture, solution design, demonstrations, workshops, pilots, technical validations, and customer decision processes. Guide secure AI adoption and deployment of Microsoft security solutions, including Sentinel, Defender, Entra, Purview, Security Copilot, Microsoft 365, and Azure security services. Coordinate Microsoft and customer stakeholders, drive adoption, reduce risk, and deliver measurable security outcomes.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Design, build, and maintain cloud-native security data and infrastructure platforms. Implement ETL/ELT pipelines, automate security controls with Terraform and Python, integrate log sources, and support detection, response, and compliance for federal environments.

Lead enterprise network segmentation projects using Guardicore Micro Segmentation across data center and cloud environments. Responsibilities include architecture design, project planning, installation, integration, configuration, policy deployment, documentation, customization, training, optimization, and troubleshooting. The role partners with customers, Support, and Engineering teams to deliver successful implementations and improve post-sales satisfaction.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Designs, implements, and optimizes enterprise, cloud, and operational security controls. Responsibilities include managing firewalls, SIEM, EDR, SOAR, IAM, vulnerability assessments, penetration testing, incident response, security monitoring, architecture documentation, compliance alignment, and remediation support. The role collaborates with IT, DevOps, and security teams to improve detection, response, resilience, and audit readiness.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Develop and lead enterprise security architecture across on-premises, cloud, and containerized environments. Establish security standards, roadmaps, hardening practices, and AI security controls; review architectures, guide implementations, evaluate security tools, and mitigate technology risks. Advise business and engineering stakeholders, oversee proof-of-concepts and integrations, monitor security effectiveness, and address emerging cyber threats through threat intelligence and strategic risk management.

Leads and supports offensive security consulting engagements, including network, web application, wireless, social engineering, red team, and purple team testing. Evaluates controls and security configurations, performs cybersecurity assessments, recommends remediation, and presents findings to technical and executive stakeholders. Supports client program execution, metrics, issue remediation, and continuous improvement. Mentors junior consultants and contributes to cybersecurity practice development, methodology innovation, and thought leadership.

Leads Ferguson’s enterprise Security Engineering function, including vulnerability management, DevSecOps, penetration testing, application and cloud security, endpoint and email protection, edge security, configuration management, and security tooling. Builds and develops technical teams, establishes roadmaps and metrics, prioritizes risk-based remediation, oversees vendors and service operations, and communicates security posture and investment needs to executives and technology partners.

Leads enterprise cybersecurity architecture for AI, cloud, hybrid, and on-premises environments. Designs secure AI architectures, cloud foundational controls, zero-trust identity models, API and data protections, and secure LLM, RAG, agent, and MCP integrations. Establishes governance, reusable security patterns, model-usage procedures, compliance controls, and audit readiness across AWS and Azure. Advises executives and technical teams, mentors security professionals, and drives secure cloud migrations while addressing AI/ML risks such as adversarial attacks, model poisoning, data drift, bias, and data leakage.

Build offensive, agentic capabilities and customer-facing features using LLMs; design and ship production Python backends; lead technical design discussions; propose and implement roadmap initiatives; translate ambiguous challenges into actionable plans; uphold code quality and engineering standards while working with a fast-moving security product team.

Lead engineering delivery for enterprise network security platforms (firewalls, IDS/IPS, SWG/proxy, NAC, SASE, cloud controls). Own architecture, lab validation, build, integration, rollout, automation (IaC, CI/CD, policy-as-code), governance, metrics, vendor/budget management, and cross-team collaboration to improve reliability and threat detection.

Lead development and execution of infrastructure security strategy and roadmap across on-prem, cloud, and hybrid environments. Establish standards, implement controls (servers, endpoints, network, cloud, containers), drive automation (IaC, policy-as-code), manage security tooling lifecycle, measure KPIs/KRIs, remediate risks, mentor engineers, and partner with cross-functional teams to enable secure technology delivery and incident response.

Lead and provide technical oversight for complex network and security implementations, manage engineering teams, run design workshops, support presales, ensure best practices and successful project delivery, and maintain strong client relationships while fostering team development.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.