Top Senior Cyber Security Jobs in NYC, NY

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Provides customer-facing presales cybersecurity expertise focused on OT and IoT environments. Advises executives, security teams, and procurement stakeholders; develops security services, sales collateral, use cases, system and network diagrams, and lab demonstrations. Educates sales teams, stays current on security technologies and trends, and supports consultative solution engagements involving industrial protocols, asset visibility, traffic analysis, segmentation, cloud security, and security frameworks.

Lead the technical presales process for Proofpoint’s data security and insider risk solutions. Partner with sales teams, conduct technical discovery, design security architectures, and manage proof-of-concept and production evaluations. Present solutions to customers, support deployments and training, collaborate with Professional Services, Engineering, Product Management, and Support, and provide customer insights to improve products. The role also develops internal documentation, training, and repeatable sales engineering processes.

Owns and strengthens the security posture of cloud-based SaaS and Microsoft 365 environments. Responsibilities include vulnerability management, incident response, cloud and endpoint hardening, identity and data protection, secure configuration, monitoring, compliance evidence, customer security reviews, and risk management aligned with HITRUST, HIPAA, NIST, and related frameworks.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Designs and implements scalable trust and identity infrastructure, including secrets management, PKI, authentication, and access control services. The role defines architecture, leads technically complex initiatives, improves engineering standards and reliability, and partners across Product, Security, Compliance, and Engineering. It requires strong systems engineering experience with Linux, networking, distributed systems, modern programming languages, and infrastructure tooling. Occasional on-call nights and weekends may be required.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Lead enterprise security architecture across cloud, application, infrastructure, identity, data, and third-party environments. Develop security principles, standards, patterns, and controls; review designs; conduct threat modeling and risk assessments; guide secure-by-design implementations; and advise technical and business stakeholders. The role also supports regulatory compliance, evaluates security technologies, and strengthens organizational security practices.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Leads IAM architecture and hands-on proof-of-concept development for AI workloads, conversational agents, agent runtimes, tools, APIs, and MCP integrations. Designs OAuth/OIDC, delegation, token exchange, gateway enforcement, non-human identity, secrets management, entitlement, and lifecycle patterns. Partners with AI, platform, IAM, and security teams to establish zero-trust, compliant, production-ready standards; troubleshoots integrations, automates onboarding, supports CI/CD and IaC, documents controls, and mentors engineers.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Secure Compass’s enterprise technology environment across endpoints, SaaS, identity, networks, AI applications, and infrastructure. The role modernizes endpoint management, develops Terraform and GitOps automation, manages AI and MCP security controls, assesses third-party risk, supports detection and response, and conducts threat modeling and security assessments. The engineer also guides development teams, improves compliance and auditability, and helps protect a distributed workforce.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Lead identity and access security across a global portfolio, including authentication, authorization, non-human identities, PAM, JIT access, and Cloudflare ZTNA. Design Okta policies, integrate endpoint and SaaS security signals, manage identity governance and compliance, and automate security workflows using infrastructure-as-code, scripting, and AI tooling. Influence cross-functional teams, modernize access controls, and drive complex security initiatives to completion.