Pennsylvania

Cybersecurity Jobs in Pennsylvania

81 jobs found

Include remote jobs

Today

Lead Specialist, Channel Sales- Cloud & Application Security -C_MAT

Deloitte Philadelphia, PA

Philadelphia, PA

Today

$100k - $198k/yr Full time Channel Sales Data Security Information Security

Apply Now

Job Description

Support Deloitte’s Cloud & Application Security channel motion by leading alliance co-sell execution, partner pipeline growth, and CRM-driven visibility within the CMAT Growth Platforms Team.

Responsibilities

Alliance positioning: Shape Deloitte’s presence through alliance and technology relationships by tailoring messaging, materials, and differentiators to each opportunity.
Partner-enabled pipeline support: Build and maintain a partner-enabled pipeline by identifying leads, qualifying opportunities, and managing active partner contact relationships.
Stakeholder coordination: Coordinate communications, follow-ups, and next steps across Deloitte stakeholders and alliance partners to support decision-making and momentum.
Seller enablement: Create and support enablement sessions, playcards, guides, and quick-reference resources to improve co-sell execution.
CRM and forecast discipline: Keep pipeline and CRM records accurate and current to strengthen reporting, forecasting, and governance visibility.
Planning and governance: Support planning sessions including agendas, materials, logistics, action tracking, and risk management for alliance activities.
Events and executive meetings: Support conferences, webinars, executive meetings, and coordinate related follow-up actions.
Insight sharing: Customize and distribute thought leadership and market content to reinforce positioning, offers, and pursuit messaging.

Requirements

Required education or equivalent experience.
4+ years of experience in alliance sales, channel sales, business development, sales support, go-to-market execution, or account coordination.
4+ years supporting partner-enabled pipeline development, lead qualification, co-sell coordination, and CRM/pipeline reporting hygiene.
2+ years developing or tailoring client-facing messaging, sales collateral, or partner enablement materials (playcards, guides, session materials).
2+ years coordinating cross-functional stakeholders, planning sessions, governance activities, or executive/partner events.
Bachelor’s degree required, or equivalent professional experience defined as an additional 4+ years of relevant work experience in lieu of a degree.
Ability to travel 20% on average.
Must be legally authorized to work in the United States without employer sponsorship, now or at any time in the future.

Preferred

1+ years with co-sell tools, deal registration platforms, partner portals, or CRM/reporting systems (including Salesforce dashboards and pipeline hygiene checks).
1+ years supporting account-based marketing, campaign follow-up, or content localization for alliance or partner audiences.
1+ years coordinating event logistics, executive briefing centers, or proposal and oral-presentation support.
1+ years using Excel or business intelligence/reporting tools for pipeline analysis.
Experience working across two or more alliance, partner, or technology ecosystems in a co-sell or channel-influenced sales context.

Skills

Strong stakeholder coordination and follow-through across alliance, sales, marketing, and specialist teams.
Sound judgment for tailoring messaging and curating insights that improve market positioning and pursuit outcomes.
Ability to manage multiple planning, governance, and event workstreams with attention to detail and consistency.

Tools & Technologies

Salesforce
Excel

Location: Philadelphia, PA (onsite)

Compensation: USD 100,400 - 197,900 per year

Minimum experience: 2 years

View full job page →

Today

Application Security Engineer

Wolfe, LLC Pittsburgh, PA

Pittsburgh, PA

Today

$120k - $130k/yr Full time Application Security Cloud Platforms Information Security

Apply Now

Job Description

Wolfe, LLC is seeking an on-site Application Security Engineer in Pittsburgh, PA to work closely with developers and the security team. In this role, you will help strengthen application security through vulnerability management, dependency risk reduction, secure code review, and improvements to automated security tooling in CI/CD.

You will own key parts of the security workflow, from triaging findings through remediation against defined SLAs, while also supporting offensive security efforts such as red team exercises and penetration testing under guidance.

What You’ll Do

Run the vulnerability management program day-to-day by triaging, prioritizing, routing, and tracking findings from Dependabot, SCA, SAST, DAST, and container scans through remediation against defined SLAs.
Own dependency and open-source risk by managing Dependabot alerts and pull requests across repositories, partnering with developers to upgrade, patch, or mitigate vulnerable libraries without breaking builds.
Support the Head of Offensive Security in red team exercises and penetration tests, including reconnaissance and hands-on testing under guidance, and produce write-ups with clear reproduction steps and fixes.
Conduct code reviews and collaborate directly in developers’ repositories and CI/CD pipelines (including GitHub or AWS) to identify and remediate vulnerabilities early across application code, containers, and infrastructure as code.
Integrate and improve automated security tooling (such as Snyk, Semgrep, Dependabot, or Cycode) in CI/CD and automate findings triage and reporting.
Apply and promote secure coding standards aligned to OWASP and the SANS CWE Top 25, and contribute to measuring DevSecOps maturity using frameworks such as DSOMM or BSIMM.

Requirements

4-5 years of experience in software development and security engineering, including hands-on coding experience.
Experience reviewing and fixing code in one or more languages, with comfort working directly in developers’ repositories.
Hands-on experience with vulnerability and dependency management, including Dependabot, SCA, and tracking findings to remediation against SLAs.
Working familiarity with offensive security concepts and tooling such as penetration testing, OWASP Top 10, and SANS CWE Top 25, with eagerness to grow red-team skills hands-on with support to earn certifications.
Familiarity with CI/CD pipelines (GitHub or AWS), infrastructure as code (Terraform/Ansible), and containerized services on AWS.
Ability and willingness to work five days onsite in Pittsburgh and collaborate closely with developers and the security team.

Technologies

Dependabot, SCA, SAST, DAST, Snyk, Semgrep, Cycode
OWASP, OWASP Top 10, SANS CWE Top 25
DSOMM, BSIMM
GitHub, AWS, Terraform, Ansible

Impact

Clear the backlog of open Dependabot and dependency vulnerabilities to SLA across priority repositories, partnering with developers to merge or mitigate fixes, with weekly reporting on open findings and remediation KPIs.
Integrate or meaningfully improve at least one automated security tool (SCA/Dependabot, SAST, DAST, or container scanning) in the production CI/CD pipeline, supporting a documented triage-to-remediation workflow.
Participate hands-on in at least one red team or penetration-test engagement alongside the Head of Offensive Security, delivering documented findings with reproduction steps and remediation guidance.
Establish a working cadence with development teams by embedding in two dev pods’ review and release processes so security findings are triaged and fixed as part of normal delivery.

Compensation and Benefits

Pay: $120,000.00 - $130,000.00 per year

Restricted Stock Units (RSUs)
Profit Share
Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of premium)
Short-Term Disability Insurance (Wolfe pays 100% of premium)
Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
PTO (vacation and sick time)
Corporate Holidays and Floating Holidays
401(k)
Employee recognition program
Charitable Donation to a charity of your choice yearly
Employee Referral Bonus
Tuition Reimbursement
Internal Training and Information sessions
Family Picnic, Holiday Party, and other outings
Internal Culture Club

View full job page →

Today

Cybersecurity Engineer

Robotics Technologies Pittsburgh, PA

Pittsburgh, PA

Today

$77 - $77/hr Full time Aerospace Cybersecurity Application Security Cybersecurity Engineering

Apply Now

Job Description

Robotics Technologies is seeking a Cybersecurity Engineer to support aerospace and avionics cybersecurity activities in Pittsburgh, Pennsylvania. This onsite role focuses on leading technical security efforts across embedded systems, secure development practices, and validation testing, with engagement across customer and federal contractor environments.

Key Responsibilities

Lead cybersecurity activities for aerospace and avionics programs.
Perform threat modeling, risk assessments, and security architecture reviews.
Support secure software development and related protections, including code signing, cryptography, secure boot, and secure firmware update processes.
Conduct cybersecurity testing, vulnerability assessments, and penetration testing.
Define cybersecurity measures for aerospace embedded systems, controllers, and aircraft platform use.
Support compliance with aerospace and federal cybersecurity requirements.
Review customer requirements, RFIs/RFQs, and contribute to proposal development.
Interface with customers, federal contractors, and internal engineering teams.
Support lab-based testing and occasional on-site assessments at customer and aircraft locations.

Required Qualifications

10+ years of cybersecurity engineering experience.
5+ years of aerospace cybersecurity experience.
Aerospace threat modeling and risk assessment experience.
Embedded systems security experience.
Cryptography and code signing knowledge.
Vulnerability management experience.
Secure Development Lifecycle (SDLC) experience.
Hardware security and root-of-trust concepts.
Knowledge of DO-326A / ED-202A.
Knowledge of DO-356A.
Familiarity with the NIST Cybersecurity Framework.
Experience with FIPS 140-3.
Experience supporting ITAR-controlled and/or federal aerospace programs.

Additional Requirements

Ability to work from the Pittsburgh cybersecurity lab.
Willingness to travel as required for customer engagements and field testing.
Strong communication skills to lead technical discussions and customer interactions.

Preferred Qualifications

Experience supporting FAA, DoD, defense, or commercial aerospace programs.
Knowledge of aircraft control systems, avionics, and aerospace hardware security architectures.

Skills and Technologies

DO-326A, ED-202A, DO-356A
NIST Cybersecurity Framework
FIPS 140-3
Secure Development Lifecycle (SDLC)
Cryptography, code signing, secure boot, secure firmware update processes
Root-of-trust, vulnerability management
Penetration testing, threat modeling, risk assessments, security architecture reviews

Location: Pittsburgh, PA (onsite)

Compensation: USD 77 per hour

Experience: 10 years minimum

View full job page →

Today

Associate Director Cybersecurity Architecture - Quantum Security

Deloitte Mechanicsburg, PA

Mechanicsburg, PA

Today

$137k - $282k/yr Full time Crypto Bom Cryptographic Agility Cryptography

Apply Now

Job Description

Lead Deloitte’s enterprise quantum-security architecture and PQC migration planning for regulated, business-critical environments.

Responsibilities

Define and execute the enterprise quantum-security strategy and a multi-year PQC migration roadmap aligned to business objectives, regulatory requirements, and enterprise risk appetite.
Advise executive leadership on quantum risk, regulatory drivers, investment needs, and migration progress through senior-leader briefings and governance forums.
Own enterprise cryptographic discovery and inventory across applications, infrastructure, networks, PKI, IoT/OT, cloud, and vendor-managed systems, and establish crypto-bill-of-materials (CBOM) practices.
Prioritize remediation by data sensitivity, data shelf life, and exposure to harvest-now-decrypt-later attacks; oversee remediation planning and execution.
Direct design and implementation of NIST-standardized PQC algorithms and hybrid approaches across TLS, VPN, code signing, PKI and certificate management, HSMs, key management, and firmware signing.
Co-sponsor proof-of-concept testing, performance benchmarking, and interoperability validation; drive cryptographic agility to support algorithm replacement with minimal re-engineering.
Ensure program alignment with NIST guidance including FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE publications, plus NSA CNSA 2.0 timelines and applicable federal directives and FIPS 140-3 validated module requirements.
Establish and lead cryptographic governance including policies, standards, and risk-based decision frameworks; embed quantum-risk considerations into enterprise risk, third-party risk, procurement, and architecture review processes.
Act as a liaison to major technology vendors, cloud providers, and HSM and PKI vendors; evaluate vendor roadmaps and hold suppliers accountable for PQC readiness in contracts.
Represent Deloitte in industry working groups and standards forums, including NIST NCCoE, PQC Alliance, and sector ISACs; engage clients and regulators as a thought leader.
Manage the program budget, resourcing, and delivery milestones to support risk reduction, regulatory compliance, and business priorities.
Lead and develop a team of cryptography, PKI, and security architecture professionals; build organizational quantum-security competency through training, reference architectures, and playbooks.

Requirements

Ability to work independently and collaborate as part of a team.
Effective written and verbal communication skills.
Meticulous attention to detail and quality of work product.
Ability to build and sustain professional relationships.
Ability to lead projects or workstreams.
Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
Strong interpersonal skills and professional demeanor.
Ability to meet deadlines.
Ability to mentor and provide clear guidance to others.
Bachelor’s degree (or equivalent) in Information Technology, Computer Science, or Engineering.
Minimum 10 years of experience in cybersecurity, including experience defining and executing enterprise security or cryptographic strategies aligned to business objectives, regulatory requirements, and risk appetite.
Minimum 4 years supporting highly regulated environments (federal, defense, audit and financial services, or critical infrastructure).
Minimum 2 years of people and/or process management experience.
Ability to travel 10% on average.
Must be legally authorized to work in the United States without employer sponsorship.

Preferred

Advanced degree (master’s or higher) in Information Security, Computer Science, Mathematics, Engineering, or related field.
Strong working knowledge of post-quantum cryptography and migration challenges (key and signature sizes, performance, hybrid modes).
Deep knowledge of standards and guidance, including NIST FIPS 203/204/205, FN-DSA, NIST IR 8547, SP 800-208, and NCCoE migration publications.
Deep knowledge of NSA CNSA 2.0, NSM-10, and OMB M-23-02.
Deep understanding of FIPS 140-3 / CMVP, Zero Trust architecture, and federal mandates.
Deep understanding of PKI, TLS, key management, HSMs, and secure software and firmware signing.
Experience leading an enterprise cryptographic inventory or large-scale crypto-migration program.
Proven ability to influence senior stakeholders and drive enterprise-wide change in matrixed environments; translate technical risk into business terms.
Experience engaging vendors, industry consortia, and standards bodies; record of speaking, publishing, or standards participation preferred.
Industry certifications such as CISSP, CISM, CCSP, CISA, GIAC, or equivalent experience.

Technologies

ML-KEM, ML-DSA, SLH-DSA
TLS, VPN
PKI, IoT/OT, CBOM (crypto-bill-of-materials), HSMs
NIST FIPS 203, NIST FIPS 204, NIST FIPS 205
FN-DSA, NIST IR 8547, SP 800-208
NSA CNSA 2.0, FIPS 140-3, NCCoE
Zero Trust architecture, CMVP, NSM-10, OMB M-23-02
PKI and certificate management, code signing, key management, firmware signing

Location

Mechanicsburg, PA (onsite)

Compensation

USD 137,400 - 282,100 per yearly
Eligible for a discretionary annual incentive program (subject to rules)

View full job page →

1d ago

Cybersecurity Compliance Facilitator

AllSTEM Connections New Freedom, PA

New Freedom, PA

1d ago

$33 - $65/hr Full time En 62443 Iec 62443 Industrial Automation

Apply Now

Job Description

AllSTEM Connections is hiring a Cybersecurity Compliance Facilitator to support regulatory and internal compliance efforts and cyber resilience for embedded software.

Responsibilities

Assist with development and upkeep of the cyber resilience project plan and schedule for embedded software and associated hardware interfaces.
Create, manage, and track the security backlog, ensuring traceability and on-time delivery of security activities and required artifacts.
Participate in and facilitate cross-functional planning sessions and reviews with security, engineering, product, and leadership stakeholders.
Develop and manage project metrics and dashboards covering security activities and delivery of security milestones.
Support teams in meeting cybersecurity compliance requirements while minimizing impact to delivery velocity.
Provide administrative and technical support to senior security leads and engineering managers; coordinate action items and track remediation progress.

Requirements

Bachelor's degree in Computer Science or Cybersecurity.
2+ years of professional cybersecurity experience, including knowledge of secure SDLC practices.
Recent experience supporting cybersecurity compliance programs, or familiarity with IEC 62443/EN 62443 for cybersecurity in industrial automation and control systems (IACS).
Strong organizational and communication skills, with the ability to collaborate across cross-functional teams in a fast-paced environment.
Knowledge of Secure Software Development Lifecycle activities, including SBOM and Threat Modeling, plus experience with SDElements.

Relevant Technologies

IEC 62443
EN 62443
SBOM
Threat Modeling
SDElements

Benefits

Dental insurance
Vision insurance

Work Location

In person
New Freedom, PA

Pay

$33.00 - $65.00 per hour

View full job page →

3d ago

Platform Security Engineer

Chatham Financial Kennett Square, PA

Kennett Square, PA

3d ago

Full time Application Security Cloud Platforms Cloud Security

Apply Now

Job Description

Chatham Financial is hiring a Platform Security Engineer to evolve the security platform function for a cloud-native financial risk and advisory SaaS business. This onsite role in Kennett Square, PA focuses on building security controls that scale across Azure infrastructure, containerized environments, and .NET application delivery.

The position centers on embedding security into the Software Development Life Cycle (SDLC) through CI/CD integrations and developer workflows, while also strengthening compliance alignment with SOC 2 through durable security practices and evidence automation.

Responsibilities

Design, build, and implement security controls across Azure-based cloud infrastructure, containerized environments, and .NET applications at the platform level to support broad coverage
Ship security-focused capabilities and features that are leveraged across the development platform
Implement and mature cloud security and application security practices, including secure architecture patterns
Collaborate cross-functionally with Engineering, Compliance, and Information Security to integrate security into the SDLC via CI/CD pipelines and developer workflows
Implement cloud security scanning and posture management to reduce misconfigurations, vulnerabilities, and configuration drift across Azure environments
Identify and address emerging risks related to AI/LLM usage across the SDLC
Evaluate, implement, and operate platform tooling with a focus on automation and scalability
Use AI to support engineering work, including learning, investigations and debugging, and creation and review of code
Document platform standards for secure coding

Requirements

3+ years of experience in security engineering with a strong foundation in software or cloud engineering
Experience building applications across the full SDLC, from initial coding through production deployment and operations
Experience integrating security into CI/CD pipelines and developer tooling
Hands-on cloud security expertise with Azure required and AWS familiarity preferred
Experience securing modern application stacks, including .NET applications and containerized environments
Strong application security principles, including secure coding practices, threat modeling, and common vulnerabilities such as OWASP Top 10
Strong problem-solving skills with the ability to operate tactically
Experience with security tooling such as SAST, DAST, container scanning, and cloud security posture management (CSPM)
Excellent collaboration and communication skills, especially when working with engineering teams and Information Security

Technologies

Azure, AWS, .NET, CI/CD
SAST, DAST, CSPM
OWASP Top 10

What Success Looks Like (First 12 Months)

Reduced the burden of implementing secure coding for all Engineering teams
Collaborated effectively with adjacent teams including Information Security, Engineering, Governance/Risk/Compliance, and IT
Prioritized effectively operational work alongside project development
Implemented effective security controls via code within CI/CD pipelines and development workflows
Strengthened and matured cloud and application security practices across the organization
Maintained and improved robust policy scanning and vulnerability management practices
Automated and maintained audit control evidence to meet SOC 2 requirements

View full job page →

4d ago

Application Security Engineer

Vestwell King of Prussia, PA

King of Prussia, PA

4d ago

$140k - $150k/yr Full time Application Security Data Security Engineer

Apply Now

Job Description

Vestwell is hiring an Application Security Engineer to secure NestJS applications and identity integrations with a focus on application security across the software development lifecycle and OIDC security.

Responsibilities

Analyze NestJS and TypeScript applications for vulnerabilities across authentication, authorization, input validation, injection, session handling, API security, business-logic flaws, and data protection
Apply and refine secure development patterns for NestJS, including guards, interceptors, middleware, decorators, validation, error handling, logging, configuration, and dependency management
Strengthen OIDC integrations and identity platform capabilities when operating as an identity provider (IdP), covering authorization, token, user-info, discovery, key-set, and logout endpoints
Strengthen OIDC integrations and identity platform capabilities when operating as a relying party (RP), covering client registration, redirect handling, authorization-code flows, token exchange, session establishment, and logout
Review OAuth 2.0 and OpenID Connect flows, including authorization code with PKCE, refresh tokens, client authentication, scopes, consent, state, nonce, redirect URI validation, and token lifetimes (with guidance from senior team members for more complex cases)
Apply and maintain authorization models using RBAC and, where appropriate, claims-based or policy-based access control
Review access-control boundaries across services, APIs, tenants, users, roles, permissions, and administrative functions
Participate in threat modeling, security design reviews, architecture reviews, and secure code reviews
Contribute to security requirements, reusable libraries, reference implementations, and developer guidance to reduce recurring risk
Support security testing and detection efforts, including SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring, and targeted security testing
Partner with engineering teams to remediate vulnerabilities, prioritize findings by exploitability and business impact, and verify fixes
Monitor application and identity security signals, support incident investigations, and help maintain playbooks for account takeover, token compromise, authorization bypass, credential abuse, and related events
Help maintain security documentation, standards, risk exceptions, and evidence needed for audits and customer assurance
Stay current on application security, identity security, OAuth/OIDC, browser security, API security, cloud security, and emerging attack techniques

Requirements

2-4 years of professional experience in application security, product security, software engineering, or a closely related discipline
Experience securing Node.js and TypeScript applications; NestJS familiarity is a strong plus
Working knowledge of OAuth 2.0 and OpenID Connect concepts and common implementation pitfalls
Exposure to IdP and/or RP implementations, integrations, or security assessments
Solid understanding of authentication and authorization concepts, including RBAC, least privilege, claims, scopes, permissions, sessions, and tokens
Ability to review code across APIs, web applications, and background jobs, with support from senior engineers for complex architectural or distributed-systems questions
Familiarity with web and API security risks, including OWASP Top 10, OWASP API Security Top 10, broken access control, SSRF, injection, XSS, CSRF, insecure deserialization, and misconfiguration
Basic understanding of secure token handling, JWT validation, JWKS, signing algorithms, and token storage considerations
Some experience working with CI/CD and developer workflows, or willingness to learn integrating security with minimal friction
Good communication skills to explain security findings and risk to technical teammates
Pragmatic, collaborative approach: eager to learn, ask questions, and work with senior engineers to propose and implement proportional controls

Technologies

NestJS, TypeScript, Node.js
OAuth 2.0, OpenID Connect, OIDC, OIDC integrations
PKCE, RBAC, JWT, JWKS
CI/CD
SAST, DAST, software composition analysis, secret scanning, API testing, dependency monitoring
Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, SAML
Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP
OWASP ASVS, NIST SSDF

Benefits

Comprehensive health benefits
Generous time off
Dedicated Employee Wellbeing Committee
401(k) plan

The Extras

Exposure to identity platforms or libraries such as Auth0, Okta, Keycloak, Cognito, Azure AD/Entra ID, or comparable systems
Familiarity with SAML integrations for single sign-on solutions
Exposure to API gateways, microservices, event-driven systems, and cloud-native deployments
Familiarity with containers, infrastructure as code, secrets management, and cloud IAM basics
Experience with security tooling such as Burp Suite, Semgrep, CodeQL, Snyk, Dependabot, OWASP ZAP, or equivalent tools
Familiarity with security standards such as OWASP ASVS or NIST SSDF
Interest in pursuing relevant security certifications

Interview Process

1-2 introductory conversations for background, interests, and what you’re looking for, plus learning about Vestwell and the team
Role-dependent steps typically include a skills or experience-based assessment, such as a coding interview, portfolio review, or deeper discussion of relevant experience
Virtual or in-person interview panel for successful candidates
Reference checks with a current or former manager and a peer before an offer
Emphasis on transparency, clear communication, and minimizing surprises throughout the process

Full-Time Employee Benefits (Work Model)

Hybrid work model with flexibility and access to collaborative offices in Midtown Manhattan, Austin, King of Prussia, and Scottsdale

Location and Work Model

Hybrid role based in the New York City, Austin, King of Prussia, or Scottsdale office

Compensation

Expected base salary range: $140K - $150K
Eligible to participate in the Company Bonus Pool
Eligible to receive new hire equity in the Company
Salary bands are based on NY and other similar metro areas and may differ based on where the role is hired