Top Senior Cyber Security Jobs in NYC, NY

Leads the design, implementation, and evaluation of security controls for AI systems across AWS and corporate environments. Researches AI threats and vulnerabilities, develops security architecture and standards, supports AI governance, monitors systems, and participates in AI R&D initiatives. Provides technical guidance to engineering, product, IT, risk, and cyber defense teams while advancing AI-enabled security operations and risk management. The role also requires secure SDLC, DevSecOps, threat modeling, vulnerability management, cloud security, and automation expertise.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Leads cybersecurity engineering and architecture reviews across applications, cloud platforms, APIs, integrations, and third-party solutions. Performs threat modeling, secure design reviews, vulnerability analysis, and risk assessments; recommends mitigations and architecture improvements; partners with engineering, product, vendors, and senior stakeholders during remediation and incidents. Promotes AI-assisted security validation, automation, secure-by-design practices, and cybersecurity communities of practice.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Owns the vision, roadmap, backlog, and delivery of cryptographic services and data protection cybersecurity products. Translates customer and business needs into engineering objectives, user stories, acceptance criteria, and prioritized features. Partners with product, engineering, architecture, and cross-functional teams in Agile and SAFe ceremonies. Uses expertise in PKI, encryption, cloud security, risk management, analytics, resilience, and emerging technologies such as post-quantum cryptography to improve cybersecurity capabilities.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Leads Fastly’s Platform Security organization, defining multi-year technical strategy and roadmaps for foundational infrastructure, secrets, identity, PKI, and trust services. Manages engineering teams and principal-level contributors, drives reliability and security best practices across the organization, establishes metrics and accountability, and communicates strategy and risk to executives. Requires deep experience with distributed systems, infrastructure as code, Linux, cloud and on-premises environments, and security technologies. Coding is not expected, but strong technical expertise is essential.

Lead and mature Plenful’s company-wide security program across application, cloud, infrastructure, security operations, incident response, compliance, and customer trust. Manage a small team, establish security roadmaps and controls, partner with engineers on vulnerability remediation and secure development, strengthen AWS and AI/ML security, oversee SOC 2, HIPAA, and HITRUST initiatives, and communicate security risks to executives, customers, auditors, and cross-functional stakeholders.

Build and maintain scalable security platforms, automation, APIs, detections, and internal tooling for a cloud-native SaaS environment. Secure AI applications, LLM services, identities, SaaS platforms, cloud infrastructure, and APIs. Develop controls against prompt injection, data leakage, model misuse, and excessive permissions while supporting vulnerability management, incident response, threat modeling, and security operations.

Designs, deploys, and secures AI agents for enterprise risk and security operations. The role manages AI governance, Microsoft security and compliance controls, data protection, DLP, insider risk, access controls, monitoring, incident response, and SIEM/XDR integrations. It also leads security architecture, automation, AI risk evaluation, cross-functional initiatives, and mentoring while supporting secure adoption of Microsoft Copilot and Azure AI platforms.

Design and harden Nova’s cloud and future on-premise platform security, including tenant isolation, identity, access policies, secrets, keys, networks, and secure execution sandboxes. Lead red-team testing of authentication, AI agents, privilege boundaries, prompt injection, and sandbox escapes. Own SAP identity integrations, internal security standards, compliance readiness, and customer security partnerships. Research offensive and defensive AI security, contribute to product development, and represent Nova in the SAP security community.

Lead penetration testing, adversary emulation, assume-breach, and AI red-teaming engagements. Identify exploitable weaknesses, validate security controls and detection capabilities, and provide prioritized remediation guidance. Conduct testing across networks, applications, APIs, cloud, and infrastructure while mapping activity to threat frameworks. Communicate findings to technical and executive audiences, advise clients, develop methodologies and tooling, automate testing, and mentor junior team members.

Designs and builds endpoint security platforms for FanDuel’s global device fleet. Responsibilities include threat modeling, architecture, production software development, infrastructure-as-code, GitOps policy deployment, security monitoring, detection pipelines, incident investigation, and risk reduction. The role partners across security and enterprise technology, mentors junior engineers, and advances zero-trust maturity through automation and secure device baselines.

Serves as a senior technical authority for Splunk security solutions across the Americas Service Provider market. Advises CISOs and technical leaders, designs SIEM and security operations architectures, leads complex technical sales engagements, supports competitive displacement, mentors field teams, and provides customer and market insights to product and engineering organizations.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Secure and operate AI platforms, gateways, agents, and tool integrations across their lifecycle. Build security automation, privileged access controls, network and endpoint protections, logging and telemetry pipelines, SIEM integrations, dashboards, alerts, and monitoring. Review integrations for security risks, enforce authentication, authorization, guardrails, and usage governance, and support firewall, SASE/ZTNA, WAF, identity, and infrastructure security engineering.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.