Cyber security analyst jobs in Munhall, PA - 39 jobs
All
Cyber Security Analyst
Securities Analyst
Cyber Security Engineer
Security Engineer
Information Security Analyst
Senior Security Engineer
Security System Engineer
Cyber Security Specialist
Information Assurance Engineer
Associate Cyber User Behavior Engineer
Highmark Health 4.5
Cyber security analyst job in Pittsburgh, PA
Company :Highmark Health : Summary***CANDIDATE MUST BE US Citizen (due to contractual/access requirements)*** For candidates residing within a 50-mile radius of a Highmark office, a hybrid work schedule of three days per week (Tuesday, Wednesday, and Thursday) in the office is required.
The Associate Cyber User Behavior Engineer plays a critical role in strengthening Highmark's overall security posture by fostering a strong security-first culture among all employees. This individual will be responsible for developing, implementing, and managing comprehensive security awareness programs designed to educate, train, and motivate employees to recognize and report security threats and adhere to Highmark's security policies and best practices.
Role Focus:
Program Design & Strategy: Design, develop, and maintain a robust and engaging security awareness program aligned with Highmark's security objectives, policies, and regulatory requirements (e.g., HIPAA, PCI DSS). Execute Highmark's multi-year security awareness roadmap, identifying key themes, training methodologies, and communication channels.
Content Development & Delivery: Manage the full lifecycle of security awareness campaigns, from content creation to delivery and measurement. Develop and deliver engaging and effective training materials, including presentations, e-learning modules, newsletters, articles, posters, videos, and intranet content. Tailor content for diverse employee audiences (e.g., executives, IT staff, clinical staff, general employees) and their specific security risks.
Collaboration & Communication: Collaborate with subject matter experts (SMEs) within Information Security and other departments to ensure content accuracy and relevance. Plan and execute internal communication strategies to promote security awareness initiatives and reinforce key security messages. Organize and facilitate security awareness events, workshops, and contests to increase engagement and knowledge retention.
Performance & Improvement: Provide targeted feedback and remedial training to employees involved in cybersecurity incidents like phishing attempts. Develop and track key performance indicators (KPIs) to measure program effectiveness, preparing regular reports and presentations for management on progress, effectiveness, and recommendations for improvement.
Strategic Integration & Innovation: Collaborate with HR, Legal, and Communications departments to integrate security awareness into broader employee development and communication strategies. Stay current with industry best practices, emerging threats, and security awareness trends to continuously enhance the program. Evaluate and recommend new tools, technologies, and methodologies for improving security awareness.
ESSENTIAL RESPONSIBILITIES
Establish close relationships with business stakeholders outside of the security discipline, working closely with privacy, physical security, fraud, legal, human resources and senior leadership.
Perform predictive analysis of behavior, anomalies, and concerns to identify potential insider threat risks.
Develop and implement a proactive program to improve insider threat monitoring.
Provide insider threat support to security operations and incident response teams in advance of and during cyber-security incidents.
Ensure the education and awareness program is aligned with the Information Security Program, Policies and Standards.
Execute campaigns designed to improve enterprise security posture.
Utilize change management methodologies to mitigate identified security risks.
Measure program effectiveness and report accordingly on progress.
Ensure clear lines of communication including but not limited to; transparency to the business on upcoming security initiatives, identifying impact to the business and to consumers, helping shape remediation, and developing external and internal communications.
Other duties as assigned or requested.
EDUCATION
Required
Bachelor's Degree in Business Education, Marketing, Information Systems or experience and/or education as determined by the company in lieu of bachelor's degree.
Preferred
Bachelors in Information Security
EXPERIENCE
None
Preferred
1-3 years in a Security Awareness or Cybersecurity role
LICENSES or CERTIFICATIONS
Required
None
Preferred
SANS Security Awareness Professional (SSAP)
Proofpoint Certified Security Awareness Specialist
Any Cybersecurity certification
SKILLS
Change Management
Presentation Delivery
Prioritizing
Analytical and Logical Reasoning/Thinking
Communication Skills
CyberSecurity
User Behavior
Languages (Other than English)
None
Travel Required
0% - 25%
PHYSICAL, MENTAL AND WORKING CONDITIONS
Position Type
Office Based
Teaches / trains others regularly
Frequently
Travel regularly from the office to various work sites or from site-to-site
Rarely
Works primarily out-of-the office selling products/services (sales employees)
Never
Physical work site required
Yes
Lifting: up to 10 pounds
Occasionally
Lifting: 10 to 25 pounds
Rarely
Lifting: 25 to 50 pounds
Rarely
Disclaimer:
The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.
Compliance Requirement:
This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies.
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Company's Handbook of Privacy Policies and Practices and Information Security Policy.
Furthermore, it is every employee's responsibility to comply with the company's Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements.
Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on any category protected by applicable federal, state, or local law.
We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact the email below.
For accommodation requests, please contact HR Services Online at *****************************
California Consumer Privacy Act Employees, Contractors, and Applicants Notice
$84k-105k yearly est. Auto-Apply 5d ago
Looking for a job?
Let Zippia find it for you.
Information Assurance Engineer
General Dynamics Mission Systems 4.9
Cyber security analyst job in Pittsburgh, PA
Basic Qualifications
Requires a Bachelor's degree in Engineering, or a related Science, Technology or Mathematics field. Also requires 2+ years of job-related experience, or a Master's degree and 6 months of job-related experience.
CLEARANCE REQUIREMENTS: Ability to obtain a Department of Defense TS/SCI security clearance is required at time of hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.
Responsibilities for this Position
Knowledge, Skills and Abilities:
Supports the development of RMF body of evidence for security requirements, including security plans, security testing plans, Security Control Traceability Matrices, and System Impact Analyses.
Performs routine security verification tasks using manual and automated methods (Cyber Test Procedures and vulnerability scans).
Supports the execution of Assessment and Authorization events.
Collaborates with Development and Test teams to plan, implement, and support the verification of security requirements.
Actively participates in an Agile team to organize, prioritize, and status work efforts.
Champions security perspective for decisions related to implementing and verifying security controls in high-security, cloud-native DevSecOps environments.
Self-directed and self-starting ability.
Strong written and verbal communication skills.
Excellent ability to communicate issues, impacts, and corrective actions.
Strong security mindset and comfortable questioning system behavior inconsistent with key security principles.
Familiar with NIST SP 800-53 & Risk Management Framework (RMF). Experience with FedRAMP is a plus.
Familiar with Linux and Windows operating systems and their security features.
Experience with Secure Technical Implementation Guides (STIGs).
Understanding of the RMF Assessment and Authorization process.
Experience with automation, virtualization, containerized application deployment and orchestration, and cloud-native solutions
Strong use and understanding of systems engineering concepts, principles, and theories.
Contributes to the achievement of business objectives.
Recognizes and incorporates various security designs and lessons learned.
Able to sell concepts and ideas effectively.
Able to work directly with customers.
Proficient in reporting relevant cyber systems engineering design.
Regular contact with senior levels of security workgroups.
Ability to lead security workgroups.
Works under limited direction.
Frequent contact with project leaders, other professionals within the Engineering department, project teams, and external customers' security professionals.
Creative thinker and good multi-tasker.
Strong understanding of Microsoft Office applications.
Must be able to obtain a TS/SCI Clearance within six months after hire
#LI-Hybrid
Salary Note This estimate represents the typical salary range for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain open until the position is filled. Combined Salary Range USD $95,384.00 - USD $105,817.00 /Yr. Company Overview
General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team!
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans
$95.4k-105.8k yearly Auto-Apply 41d ago
Cyber Security Specialist
First National Trust Company
Cyber security analyst job in Pittsburgh, PA
Primary Office Location:626 Washington Place. Pittsburgh, Pennsylvania. 15219.Join our team. Make a difference - for us and for your future.
CyberSecurity Specialist
Business Unit: Risk Management
Reports to: Manager of CyberSecurity
Position Overview:
This position is primarily responsible for performing all procedures necessary to ensure the safety of information systems assets and protecting systems from intentional or inadvertent access or destruction under the supervision of the Manager of CyberSecurity. The incumbent demonstrates the ability to develop IT security standards and procedures, has demonstrated knowledge and understanding of IT industry trends and emerging technologies and an ability to relate them to the corporation and it's objectives.
Primary Responsibilities:
Investigates, escalates and documents cybersecurity events or incidents according to standard operating procedures (SOP), as needed. Writes comprehensive reports of incident investigations.
Evaluates and improves Security Information and Event Management (SIEM) rule set based on threat and vulnerability indicators.
Analyzes information from variable threat sources and provide necessary awareness to management, IT and impact business areas.
Tracks remediation of identified issues based on incident investigations.
Utilizes forensic resources to understand event impacts and generates incident reports.
Assists management in preparation of reports of current threats.
Uses PowerShell scripting or other programming languages to automate tasks.
Leverages various toolsets to gain awareness of potentially suspicious activity and alerts to threats, intrusions and/or compromises.
Performs other related duties and projects as assigned.
All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by F.N.B. Corporation's risk management program.
F.N.B. Corporation is committed to achieving superior levels of compliance by adhering to regulatory laws and guidelines. Compliance with regulatory laws and company procedures is a required component of all position descriptions.
Minimum Level of Education Required to Perform the Primary Responsibilities of this Position:
BA or BS
Minimum # of Years of Job Related Experience Required to Perform the Primary Responsibilities of this Position:
3
Skills Required to Perform the Primary Responsibilities of this Position:
Excellent communication skills, both written and verbal
Excellent customer service skills
Excellent project management skills
Detail-oriented
Strong security background in network/systems/physical security, authentication, authorization and usability. Comprehensive knowledge of the OSI model. Working knowledge of packet collection and analysis tools.
Licensures/Certifications Required to Perform the Primary Responsibilities of this Position:
Valid Drivers License
CISSP, Security+, Network+, GCIA, GCIH, CEH, CISM, CSX
Physical Requirements or Work Conditions Beyond Traditional Office Work:
Heavy Lifting over 45 lbs.
Equal Employment Opportunity (EEO):
It is the policy of FNB not to discriminate against any employee or applicant for employment because of his or her race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, or status as a protected veteran. FNB provides all applicants and employees a discrimination and harassment free workplace.
$80k-113k yearly est. Auto-Apply 60d+ ago
Information Security Specialist II
Federal Home Loan Bank of Pittsburgh 4.1
Cyber security analyst job in Pittsburgh, PA
The Information Security Specialist plays a vital role in protecting the Bank's information assets by ensuring the integrity, confidentiality, and availability of systems across the enterprise. This position is responsible for the effective application of security controls across both business operations and technology environments.
The successful candidate will perform security administration, conduct continuous monitoring, and lead investigations into security events triggered by the Bank's security infrastructure.
Organization Overview
FHLBank Pittsburgh provides reliable funding and liquidity to its member financial institutions, which include commercial and savings banks, community development financial institutions, credit unions and insurance companies in Delaware, Pennsylvania and West Virginia. FHLBank products and resources help support community lending, housing and economic development. As one of 11 Federal Home Loan Banks established by Congress, FHLBank has been an integral and reliable part of the financial system since 1932.
Primary Success Factors
Supports the efficient and effective implementation and maintenance of security for the Bank's information assets and resources; evaluates, installs and maintains security software on a variety of platforms; and actively promotes the advancement of sound security policies and procedures. Provides customer support for email processing and security, Help Desk ticket queues for security and account requests.
Monitoring and investigation of security events generated by the Bank's security infrastructure
Designs appropriate security measures in new system development efforts as defined by security requirements, product options and implementation strategies.
Evaluates, engineers, and recommends security enhancements to Bank's current environment and architecture.
Establishes and executes procedures for authorizing access to information across all platforms to appropriately restrict access.
Participates in establishing and maintaining security policies and procedures
Provides daily support and management of Security incident and event Management (SIEM) solution according to industry best practice and Bank policy.
Performs monitoring, analysis, and reporting of security events across a complex environment.
Establishes and executes procedures for performing self-audits of the security administration function to detect inappropriately defined security parameters.
Manages bank firewalls to ensure access and controls are properly applied to all systems.
Manages security systems (IDS, firewall, mail/web filtering, etc.) to ensure systems are properly functioning and upgraded.
Works with business users to ensure proper access to applications is in place.
Regularly reviews systems and networks to ensure compliance with IT Security policy.
Assists in the designing of network architecture to ensure industry-standard network practices are enforced.
Deciphers network packet captures for troubleshooting.
Ensures compliance with applicable policies, procedures, and regulations to ensure safe and sound business operations.
Required Experience
Bachelor's degree in Computer Science, Information Systems or related degree or equivalent work experience
At least one of the following professional Security-related certifications required: CISSP, SANS GIAC, CCSP
Five or more years of experience in an information security role
At least two years of hands-on experience with firewall administration
Hands-on experience with administering security in Windows Active Directory Security
Demonstrated knowledge of managing and administering spam filtering system
Demonstrated knowledge of securing and administering security on multiple operating environments: Linux, Windows
Demonstrated knowledge of host-based and network-based Intrusion Detection System concepts
Experience with DDOS mitigation and related network traffic risk mitigation techniques
Experience with Network Access Control Platforms and Procedures
Candidates with at least three years of experience in an information security role and Windows Active Directory Security will be considered for an alternative role.
It is the policy of the Federal Home Loan Bank of Pittsburgh to ensure equal employment opportunity (EEO) for all employees and applicants for employment without regard to race, religion, color, sex, national origin, age, disability status, genetic information, veteran's status, ancestry, sexual orientation or status as a parent as defined by applicable law. It is the Bank's policy to comply with applicable laws concerning the employment of persons with disabilities, including reasonable accommodation for applicants and employees with disabilities.
$99k-141k yearly est. Auto-Apply 58d ago
Information Security Sr Specialist
Citizens 2.9
Cyber security analyst job in Pittsburgh, PA
This role is for a Data Protection Analyst working in the Data Discovery and Protection Program. The Analyst is responsible for supporting, developing, and enhancing the Data at Rest Protection Program for both on-premise and cloud environments. The colleague will engage with Business Units across the organization, produce metrics and documentation, and implement and support tools related to the data protection program.
A successful candidate will:
+ Assess existing scanning program to implement cloud scanning capabilities
+ Assist in deployment and maintenance of data scanning tools
+ Partner with other groups within the organization to identify and remediate data at rest access risk.
+ Work with risk partners to identify controls, determine control adequacy, and identify control monitoring opportunities and areas for improvement/enhancement
+ Assist in collecting, analyzing, and interpreting data access information and remediate permission compliance issues based on company security standards
+ Discern patterns of complex threat actor behavior, communicate an understanding of current and developing Cyber threats to key stakeholders, and stay current with emerging trends and threats in the field of insider threat
Qualifications
Required:
+ Understanding of information security concepts, best practices, and regulations related to data loss prevention
+ Understanding of enterprise security and networking technology and how the technology relates to the prevention, detection, and response of data loss
+ Advanced understanding of the Microsoft Office suite (e.g., Outlook, Word, Excel, PowerPoint, etc)
+ Excellent verbal and written communication skills (including but not limited to: correct English usage, grammar, spelling, punctuation, vocabulary, etc.).
+ Ability to execute work independently and as a team member with good interpersonal skills - using tact, patience and courtesy.
+ Experience as a security consultant
+ Working knowledge of cloud topology
+ Knowledge of file share security and Windows ACL administration
+ Familiarity with the Financial Services Industry
+ Knowledge of varying cloud platforms
+ Familiarity with cloud security at major cloud service providers
+ Certifications: Associate of (ISC)^2, CISSP, or similar.
Education:
+ Bachelor's degree in Information Security, Computer Science or a related field OR
+ Bachelor's degree in Business or other field + 3 years relevant experience
+ Equivalent years: BA/BA = HS + 5 years of experience
Pay Transparency
The salary range for this position is $97,049 - $145,574 per year. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.
We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit ************************************** .
Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.
Equal Employment Opportunity
Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague's or a dependent's reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.
Why Work for Us
At Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth
Background Check
Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.
$97k-145.6k yearly 33d ago
Cyber Security Engineer
Microbac 4.0
Cyber security analyst job in Cranberry, PA
Come join our family! Microbac Laboratories is an essential business offering competitive pay and benefits including medical, dental, vision, life insurance, disability, generous paid time off including vacation, holidays and flex-time, a wellness program, referral bonus, tuition reimbursement and more!
Whether you are just starting your career in science or looking to further it, Microbac will put you on the path of an exciting career with room to grow. Quality, safety, giving back to our communities, diversity and inclusion, customer success and employee wellbeing are part of our core culture. We are looking for motivated individuals to join our family as a Cybersecurity Engineer.
ABOUT MICROBAC
Microbac Laboratories, Inc. is a premier commercial laboratory testing firm that partners with clients worldwide, offering laboratory solutions to the life science, food and nutrition, and environmental industries and serves our clients with the utmost expertise and respect for their market requirements, constraints, and challenges. We embody a company-wide commitment to exceptional customer experience, which has been refined over nearly 50 years of trusted, analytical and measurement experience.
Through our network of laboratories, offices, and field services, we have the flexibility to meet the unique requirements for each client, project, and scope.
As a privately held third-party testing company, Microbac operates with a commitment to safety, quality, and compliance. Our diverse work portfolio includes broad accreditation offerings and tested insights across the environmental, food and nutrition and life science markets.
JOB SUMMARY
We are seeking a hands-on Cybersecurity Engineer to own day-to-day security operations and incident response across our network of 30+ laboratories. This role is execution-focused and ideal for a candidate who enjoys working in lean environments, partnering closely with Infrastructure and Quality teams, and directly configuring and operating security controls.
You will serve as the primary escalation point for security incidents while helping mature the organization's security posture as the business grows.
Essential Functions:
Own daily cybersecurity operations, monitoring alerts and responding to incidents
Act as the primary escalation point for security events
Lead incident response from detection through remediation and root cause analysis
Configure and maintain security controls across business platforms
Manage identity, access controls, MFA, Conditional Access, and privileged access models
Perform hands-on investigations
Develop, test, and maintain incident response playbooks and escalation paths
Create security policies and translate them into enforceable technical controls
Partner closely with Infrastructure on architecture, network changes, cloud services, and new tools
Continuously assess risk, identify gaps, and implement practical security improvements
Partner with Quality to ensure compliance with industry standard regulations
Set a positive example through high standards and professional conduct.
Continuously monitor emerging cybersecurity threats, regulatory changes, and industry best practices to keep organizational security strategies current and effective.
Other duties as assigned.
Minimum Requirements:
Bachelor's degree in Computer Science, Information Systems or related field.
3+ years of experience in cybersecurity related positions
Willingness to travel to lab locations as needed to provide on-site IT support.
Preferred Qualifications:
Certifications: CompTIA Security+, CompTIA CySA+, GSEC, CompTIA PenTest+, CCSP, CISSP, CISM
Knowledge of advanced persistent threats (APTs) and their tactics, techniques, and procedures (TTPs)
Fundamental understanding of Windows, Mac OSX, and Linux operating systems
Fundamental understanding of OSI model, basic networking and troubleshooting concepts
Experience with programming or scripting, including PowerShell, Bash, Python, Yara, and Perl
Experience in managing SSO/IAM, email security, phishing and user awareness training
Experience in EDR platforms
Experience with cloud deployments such as Azure, AWS or similar platforms
Experience working with distributed teams and other cross functional stakeholders
Familiarity with commercial solutions for logging and security event management, including SIEM or SOAR platforms
Familiarity with vulnerability management and IDS/IPS
Demonstrated intermediate experience with security incident detection, response frameworks, and established incident handling procedures Understanding and knowledge of various log formats from a variety of network and computer devices
Knowledge of Cyber risks and threats related to Cyber attackers
Knowledge of recent Cyber events and interpreting kill chain process and threat impacts
Presentation, analytical, and critical-thinking skills
Ability to manage competing priorities and workload
WORKING CONDITIONS AND PHYSICAL REQUIREMENTS
The physical demands and working conditions described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Physical Requirements:
While performing the duties of this job, the employee is regularly required to use hands to finger, handle, or feel objects, tools; talk or hear. The employee is occasionally required to stand, walk, and sit.
The employee must occassionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include color vision and depth perception.
Working Conditions:
Home internet acceptable for remote computer work.
The noise level in the work environment is usually moderate.
This job may require travel less than 20%
As a privately held third-party testing company, Microbac operates with a commitment to safety, quality, and compliance. Our diverse work portfolio includes broad accreditation offerings and tested insights across the environmental, food and life science markets.
OTHER:
This is not an exhaustive list of all duties an employee may be required to perform. Microbac reserves the right to revise the job description at any time.
Employment is at-will. Microbac, promotes a drug-free, alcohol-free workplace. Applicants considered for hire must pass a drug test before beginning work. Refusal to submit to testing will result in disqualification of further employment consideration.
Microbac is an Equal Opportunity Employer - We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. All qualified applicants will receive consideration for employment.
$81k-111k yearly est. 7d ago
Security Analyst
Artech Infosystems
Cyber security analyst job in Frazer, PA
Artech Information Systems is the #1 Largest Women-Owned IT Staffing Company in the U.S. and an employer of choice for over 7,200 consultants. We recruit world-class talent for IT, engineering, and other professional jobs at 70+ Fortune and Global 500 companies coast-to-coast across the U.S., India, and China. We are one of the fastest-growing companies in the US and we welcome you to search the thousands of jobs in our cutting-edge GEM system for employment opportunities that fit your qualifications.
Job Title: SecurityAnalyst
Location: Pittsburgh, PA/ Lake Mary, FL / Nashville, TN
Duration: 12 months contract with possible extension/ conversion FTE
Job Description:
Client is looking for a talented and self-motivated individual with strong technical skills and the ability to rapidly learn new technologies. We are looking for an exceptional candidate that shares our passion for delivering solutions to complex security problems, while maximizing productivity and minimizing employee friction. The candidate will contribute to IAMO Transformation program by aiding in the configuration and implementation of the new SailPoint LCM product. The candidate will perform business critical analysis to help with the implementation of application access requests and workflows across IAM. This role will support access provisioning, remediation for audit findings, workflow creation and modifications, and ensuring revocations and certifications are completed within the guidelines established by Corporate Policy. This position is critical to ensure Service Level Objectives and Internal project deadlines are met. The candidate will require increased technical and analytical skillsets and provide Sailpoint Product Support with a focus on:
• Experience with designing, developing, testing, implementing, and integrating IGA solutions involving SailPoint Identity Now (IIQ).
• Experience in SailPoint Identity IQ implementation and configuration for application on-boarding for access request and approval and access certifications
o Configuration of simple and advanced LCM workflows within SailPoint
o Creating and managing workgroups in SailPoint
o Configuration and management of most common direct connectors (i.e. Active Directory, LDAP, Mainframe, etc.)
o Creation of preventative and detective Segregation of Duty rules
o Experience with role-based access controls and configuring automate provisioning and deprovisioning.
• Train and mentor other team members on the use of the SailPoint Identity Now platform.
• Experience with identity lifecycle flows including leaver, joiner, and mover.
• Experience with consultative and complex technical deployment projects, managing various stakeholder relationships.
• Strong knowledge and experience with incident/problem management processes.
• Possess critical thinking skills.
• Strong functional knowledge of MS Office Suite software products, Jira, and Confluence.
• Strong communications skills, oral and written.
• Ability to collaborate and interact productively with team members and key stakeholders.
• Ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood and actionable manner.
• Ability to effectively influence and convince others to make appropriate changes in their priorities and behaviors for the benefit of the organization.
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.
• Ensures integration end state protects information resources against unauthorized use, inappropriate degrees of access, disclosure, damage and/or loss.
• Design and code rules, applications, workflows, custom tasks, custom connectors, UI pages and custom reports in SailPoint Identity Now.
• Develop working relationship with IT engineering resources to drive solution features adoption.
• Develop control adoption templates for IT resources to understand and implement connections required for the SailPoint Identity Now service.
• Review SailPoint IGA to ensure the solution is optimized for the highest level of service and establish an ongoing practice to perform periodic reviews.
• Interpret policies and standards with InfoSec, Risk and Compliance teams, ensuring policies and standards are properly followed by IAM control solutions.
• Design and maintain flowchart diagrams, process workflows and standard documentation required to sustain the SailPoint platform.
• Promote security policies, standards, and best practices across the organization.
• Supports and resolves system incidents, problems, and changes.
Qualifications
5 years of Sailpoint experience
-Will consider experience over degree
-Locations: Pittsburgh, Lake Mary or Nashville
-2000+ applications to be migrated into sailpoint
-Configure workflows
-Create/manage work groups
-Create duty rules
-Invisio, Confluence, Jira, Excel
Additional Information
All your information will be kept confidential according to EEO guidelines.
$68k-97k yearly est. 60d+ ago
Security Analyst/Engineer
Limbach Facility Services LLC 4.4
Cyber security analyst job in Fernway, PA
Who We Are…
Since our founding in 1901, Limbach's primary core value has always been simple: We Care. That commitment extends to our people, our customers, and the communities we serve-driving a culture of belonging across our industry.
Limbach Facility Services LLC, a subsidiary of Limbach Holdings, Inc., (NASDAQ: LMB), is a leading building systems solutions firm delivering mission-critical systems that support life's most important moments. We specialize in revitalizing and maintaining HVAC, mechanical, electrical, plumbing, and control systems within existing facilities-ensuring buildings are always ready to perform when it matters most.
Learn more about Limbach by checking out our YouTube channel: We Are Limbach - YouTube
From healthcare and education to government and commercial facilities, we partner with building owners and operators to safeguard reliability, efficiency, and comfort where it's needed most.
Our vision is to create value for building owners targeting opportunities for long term relationships.
Our purpose is to create great opportunities for people.
Learn more about Limbach's commitment to our people and career opportunities, straight from our employees via the Limbach Unlocked podcast: Limbach Unlocked - Why We Chose Limbach
We carry out our vision and purpose through a commitment to our four core values…
We Care
We Act with Integrity
We Are Innovative
We Are Accountable
The Benefits & Perks…
Base salary range of $130K - $140K
Full portfolio of medical, dental, and vision benefits, along with 401K plan and company match.
HSA, FSA, and life insurance offerings.
Maximize your professional development with our award-winning Learning & Engagement team.
Engage in our “We Care” culture through our ERGs, brought to you by EMBRACE.
Career pathing flexibility and mobility.
Who You Are…
As SecurityAnalyst / Engineer, you will serve as the organization's primary, hands-on security operations lead. Reporting directly to the CIO, the candidate will triage SOC outputs, tune detection logic, drive automated response through SOAR playbooks, own the vulnerability management lifecycle, and lead incident response from detection through remediation and post-incident lessons learned. They act as a trusted partner to our outsourced SOC, the quarterback for IR, and the technical voice to the CIO and Board on operational security posture working closely with our IT Operations leader.
This Position…
Some examples of the work you might do includes:
Security Operations & Monitoring: Serves as the primary liaison to our outsourced SOC and vCISO. Triage, validate, and prioritize alerts from SIEM (e.g., Google Chronicle, GrayMatter, or equivalent). Ensures log integrity, enrichment, and actionable alerting.
SOAR & Automation: Builds, maintains, and iterates SOAR playbooks (Google SOAR or comparable) to automate containment, enrichment, and evidence collection; lowers MTTR by automating low-risk actions while preserving human judgment for high-impact events.
Incident Response: Lead detection → containment → eradication → recovery workflows. Owns post-incident reviews, creates remediation roadmaps, and tracks closure of corrective actions. Conducts regular tabletop exercises and maintains IR runbooks and escalation paths.
EDR/MDR/XDR Management: Administers and tunes EDR/MDR/XDR platforms (deployment health, telemetry, detection rules, containment capabilities). Investigates endpoint events, performs root cause analysis, and coordinates remediation with IT operations.
Vulnerability Management: Operates the vulnerability management program (Rapid7, Tenable.io, or equivalent): schedules scans, triages findings, prioritizes by risk and asset criticality, and shepherds remediation with engineering teams. Proposes and verifies system hardening measures and baselines.
Detection Engineering: Authors correlation rules, analytic searches, and detection content; reduces false positives while increasing meaningful detections. Builds dashboards and KPIs that communicate detection coverage and efficacy.
M&A & Integration Security: Leads security due diligence and integration activities for acquisitions: identities & accesses reviews, vulnerability scans, endpoint posture checks, and integration playbooks to onboard new entities into Limbach's security baselines.
Training & Knowledge Transfer: Develops and delivers IR and detection training for IT and business teams. Produces clear operational documentation, SOPs, and playbooks. Coaches SOC engineers and champions continuous improvement.
Reporting & Executive Communication: Produces monthly operational and executive risk reports (incidents, vulnerability trends, MTTR, coverage gaps). Briefs the CIO and Board with concise risk-based recommendations.
Third-Party Coordination: Manages relationships and SLAs with MDR/MSSP/MDR providers, forensic firms, and other security partners.
What You Need…
5+ years of progressive, hands-on cybersecurity experience, with significant time spent in SOC and incident response environments.
Demonstrated experience in incident response, threat hunting, and digital forensics.
Demonstrated expertise with SIEM and SOAR platforms (Google Chronicle, GrayMatter, Chronicle SOAR, or comparable).
Proven track record managing EDR/MDR/XDR solutions and performing endpoint investigations.
Hands-on experience owning vulnerability programs with Rapid7, Tenable.io, or similar tooling.
Experience writing detection logic, playbooks, and incident runbooks; demonstrable success in alert tuning and automation.
Real-world experience coordinating cross-functional incident response activities and driving remediation to completion.
Scripting and automation skills (PowerShell, Python, Bash) to automate enrichment, containment, and evidence collection.
Strong Windows and Linux administration/forensics fundamentals; network fundamentals and packet-level troubleshooting.
Familiarity with cloud security (Azure, Microsoft 365, Intune, Conditional Access) and endpoint management tools.
Knowledge of security controls, hardening standards, and configuration baselines.
Ability to read and interpret logs and telemetry across endpoints, network devices, and cloud services.
Superior written and verbal communication; able to explain technical findings to non-technical and executive audiences.
Decisive under pressure, methodical in evidence collection, and disciplined in documentation.
Collaborative, tactful, and experienced at working with cross-functional teams (IT ops, HR, Legal, vendor partners).
Strong project management and organizational skills with an eye for measurable outcomes.
Ability to travel up to 15% of the time.
Preferred Qualifications:
Relevant industry certifications, including advanced training from SANS in incident handling, threat hunting, and digital forensics (e.g., SEC504, FOR508, FOR572, or equivalent).
Certifications: CISSP, GCIH, GCFA, ECIH, or Security+ (or equivalent).
Prior role as a dedicated incident responder or IR team lead.
Experience with Microsoft Defender for Endpoint, Azure Security Center, and native cloud telemetry.
Familiarity with compliance frameworks (SOC 2, NIST CSF/800-171, ISO 27001) and how detection/IR maps to them.
Experience in multi-site enterprise environments and with M&A integration security.
Conduct Standards:
Maintains appropriate Company confidentiality at all times.
Protects the assets of the Company and ethically upholds the Code of Conduct & Ethics in all situations.
Cultivates and promotes the “Hearts & Minds” safety culture.
Consistently exemplifies the Core Values of the Company (we CARE, we act with INTEGRITY, we are INNOVATIVE, and we are ACCOUNTABLE).
Work Environment:
This position operates primarily in an office environment and routinely utilizes standard office equipment, such as computers, phones, copiers, and filing cabinets.
The Company's Remote Work Policy is applicable to this position.
Physical Demands:
In performing the duties of this job, the incumbent is regularly required to talk, hear, perform repetitive motion, and possess an appropriate degree of both visual acuity and manual dexterity.
This is considered a sedentary position, which means possible exertion up to ten (10) pounds of force occasionally, and/or negligible amount of force frequently or constantly to lift, carry, push, pull, or otherwise move objects.
This job description is intended to describe the general nature of work being performed by the individual who assumes this role, not an exhaustive list of responsibilities. Duties, responsibilities, and activities may change at any time, with or without notice, as business needs dictate. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position. Limbach Facility Services LLC is an Equal Opportunity Employer.
#LFS
$130k-140k yearly 24d ago
Information Security Sr Specialist
Citizens Financial Group, Inc. 4.3
Cyber security analyst job in Pittsburgh, PA
This role is for a Data Protection Analyst working in the Data Discovery and Protection Program. The Analyst is responsible for supporting, developing, and enhancing the Data at Rest Protection Program for both on-premise and cloud environments. The colleague will engage with Business Units across the organization, produce metrics and documentation, and implement and support tools related to the data protection program.
A successful candidate will:
* Assess existing scanning program to implement cloud scanning capabilities
* Assist in deployment and maintenance of data scanning tools
* Partner with other groups within the organization to identify and remediate data at rest access risk.
* Work with risk partners to identify controls, determine control adequacy, and identify control monitoring opportunities and areas for improvement/enhancement
* Assist in collecting, analyzing, and interpreting data access information and remediate permission compliance issues based on company security standards
* Discern patterns of complex threat actor behavior, communicate an understanding of current and developing Cyber threats to key stakeholders, and stay current with emerging trends and threats in the field of insider threat
Qualifications
Required:
* Understanding of information security concepts, best practices, and regulations related to data loss prevention
* Understanding of enterprise security and networking technology and how the technology relates to the prevention, detection, and response of data loss
* Advanced understanding of the Microsoft Office suite (e.g., Outlook, Word, Excel, PowerPoint, etc)
* Excellent verbal and written communication skills (including but not limited to: correct English usage, grammar, spelling, punctuation, vocabulary, etc.).
* Ability to execute work independently and as a team member with good interpersonal skills - using tact, patience and courtesy.
* Experience as a security consultant
* Working knowledge of cloud topology
* Knowledge of file share security and Windows ACL administration
* Familiarity with the Financial Services Industry
* Knowledge of varying cloud platforms
* Familiarity with cloud security at major cloud service providers
* Certifications: Associate of (ISC)^2, CISSP, or similar.
Education:
* Bachelor's degree in Information Security, Computer Science or a related field OR
* Bachelor's degree in Business or other field + 3 years relevant experience
* Equivalent years: BA/BA = HS + 5 years of experience
Pay Transparency
The salary range for this position is $97,049 - $145,574 per year. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.
We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit ************************************** .
Some job boards have started using jobseeker-reported data to estimate salary ranges for roles. If you apply and qualify for this role, a recruiter will discuss accurate pay guidance.
Equal Employment Opportunity
Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague's or a dependent's reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.
Background Check
Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.
Benefits
We offer competitive pay, comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more.
View Benefits
Awards We've Received
Age-Friendly Institute's Certified Age-Friendly Employer
The Banker's
US Bank of the Year
Dave Thomas Foundation's Best Adoption-Friendly Workplace
Disability:IN Best Places to Work for Disability Inclusion
Human Rights Campaign Corporate Equality Index 100 Award
$97k-145.6k yearly Auto-Apply 35d ago
Security Analyst
Atria Group 4.2
Cyber security analyst job in Pittsburgh, PA
We specialize in Staffing, Consulting, Software Development, and Training along with IT services to small to medium size companies. AG's primary objective is to help companies maximize their IT resources and meet the ever-changing IT needs and challenges.
In addition, AG offers enterprise resource planning and enterprise application integration, supply-chain management, e-commerce solutions, and B2B public exchanges and B2B process integration solutions. Our company provides application analysis, design, development and programming, software engineering, systems development, testing, integration, and implementation, and management consulting services to various clients - including governmental agencies and private companies - throughout the United States and India.
We provide these services in multiple computing environments and use technologies such as client/server architecture, object-oriented programming languages and tools, distributed database management systems, state-of-the-art networking, and communications infrastructures. Our honest and realistic approach to recruiting dictates that AG does not entice or lure engineers from their employers. We represent only high caliber technical professionals who have committed to making a change required by career.
Job Description
MUST HAVE:
Experience with implementing a vulnerability scanner
Familiarity with both Windows and Linux platforms
Experience with a log management system (Splunk, Elastic Search, etc)
General understanding of incident management systems
Experience patching operating systems/applications
Experience configuring operating systems/applications
Knows and applies the fundamental concepts, practices and procedures of IT security hardware, software, management software, and troubleshooting tools
Candidate should have a strong knowledge of IT security, including demonstrated knowledge of current security trends and issues
Ability to effectively and professionally communicate with customers and technical support staff at remote locations including team members in foreign countries; excellent verbal and written communication skills
Highly self-motivated and flexible
Manage priorities for timely completion of assignments
Strong analytical and problem-solving skills
Demonstrated success managing confidential/secure information with a high level of integrity
NICE TO HAVE:
Nessus experience
HP Service Manager
Additional Information
Good comm skills are a big priority
Duration: 3+ Months
LOCALS PREFERRED
Interview: Phone+F2F
$65k-104k yearly est. 60d+ ago
Security Analyst - SOC - 7am EST - 3:30PM EST Tuesday - Saturday
PNC 4.1
Cyber security analyst job in Pittsburgh, PA
At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a SecurityAnalyst within PNC's Technology organization, you will be based in Pittsburgh, PA. This position is primarily based in a location within PNC's footprint.
The work shift will be:
Tuesday, Wednesday, Thursday, Friday and Saturday
7:00am EST - 3:30pm EST
Time in the above office locations will be expected weekly
Ideal candidate will demonstrates intimate knowledge of the following:
-Evaluate, respond, and mitigate alerts that originate from the SIEM and the Cybersecurity product suite, e.g. NGFWs, IDS/IPS, Anti-virus, Web Application Firewalls, NAC Solution, EDR, etc.
-Demonstrate use and understanding of security technologies such as Security Incident and Event Management (SIEM) & Endpoint Detection and Response (EDR)
-Assist with tuning the SIEM events to reduce the false positives
-Extract the IOCs and behavioral characteristics of malicious samples and implement the proper mitigation (Sandboxing)
-Demonstrate the ability to scope an event to ensure the proper remediation steps
-Ability to demonstrate subject matter expertise on the one or more functions performed by the SOC
-Perform operational support for the institution as a representative of the security organization
PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.
**Job Description**
+ Provides technical evaluation and analysis. Supports activities, process, and tools needed to improve overall security posture of the organization.
+ Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls.
+ Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff.
+ Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines.
PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:
+ **Customer Focused** - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
+ **Managing Risk** - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.
**Qualifications**
Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position.
**Preferred Skills**
Access Control (AC), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, Network Security, Physical Security, Risk Assessments, Security Technologies
**Competencies**
Analytical Thinking, Effective Communications, Information Assurance, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Problem Solving, Software Security Assurance
**Work Experience**
Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience. Certifications are often desired. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
**Education**
Bachelors
**Certifications**
No Required Certification(s)
**Licenses**
No Required License(s)
**Benefits**
PNC offers a comprehensive range of benefits to help meet your needs now and in the future. Depending on your eligibility, options for full-time employees include: medical/prescription drug coverage (with a Health Savings Account feature), dental and vision options; employee and spouse/child life insurance; short and long-term disability protection; 401(k) with PNC match, pension and stock purchase plans; dependent care reimbursement account; back-up child/elder care; adoption, surrogacy, and doula reimbursement; educational assistance, including select programs fully paid; a robust wellness program with financial incentives.
In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.
To learn more about these and other programs, including benefits for full time and part-time employees, visit Your PNC Total Rewards (******************************* .
**Disability Accommodations Statement**
If an accommodation is required to participate in the application process, please contact us via email at AccommodationRequest@pnc.com . Please include "accommodation request" in the subject line title and be sure to include your name, the job ID, and your preferred method of contact in the body of the email. Emails not related to accommodation requests will not receive responses. Applicants may also call ************ and say "Workday" for accommodation assistance. All information provided will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
At PNC we foster an inclusive and accessible workplace. We provide reasonable accommodations to employment applicants and qualified individuals with a disability who need an accommodation to perform the essential functions of their positions.
**Equal Employment Opportunity (EEO)**
PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.
This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.
**California Residents**
Refer to the California Consumer Privacy Act Privacy Notice (****************************************************************************************************** to gain understanding of how PNC may use or disclose your personal information in our hiring practices.
$59k-83k yearly est. 20d ago
Security Engineer, Cloud
Wolfe 3.6
Cyber security analyst job in Pittsburgh, PA
About Us
Recognized among Pittsburgh's 2024 Top Workplaces and Fastest-Growing Companies, Wolfe has been a leader in the Gift Card and FinTech sectors for over 25 years. We power gift card programs for national merchants like KFC. Our flagship consumer brand, PerfectGift.com, enables customers to create customized gift cards.
We are a fast-paced environment, like kayaking down a white-water river, not canoeing on a lake. Learn more about our company culture, core values, and industry recognition on our career page (******************************
Role Summary
Wolfe is seeking a Senior Cloud Security Engineer to lead the protection of our cloud-based systems, data, and applications. This is a pivotal role focused on embedding security into every layer of our cloud infrastructure, particularly within AWS environments. You'll work closely with Developers, DevOps, and Infrastructure teams to manage vulnerabilities, mature security controls, and drive secure practices across our technology organization.
In this hands-on role, you'll architect and implement cloud-native security solutions, enhance cloud protections, and build tools and procedures that safeguard sensitive data and workloads. You'll help shape how Wolfe builds and maintains secure cloud systems while balancing risk, performance, and delivery.
If you are an experienced DevOps engineer looking to grow into a security-focused role, we encourage you to apply!
This is a five-day onsite role based in Pittsburgh, PA.
Wolfe does not provide visa sponsorship.
Responsibilities
Analyze cloud security models, protocols, and systems.
Monitor and analyze cloud security tools and technologies for potential risks.
Develop best practices and processes for cloud security.
Implement security measures to protect the cloud infrastructure from external threats.
Collaborate with other teams to ensure the security of the cloud environment.
Continuously enhance cloud security technologies and services in designated security domains.
Analyze, design, and create applications, tests, and infrastructure automation tools.
Impact Statement
Example expectations for this role include but are not limited to:
Lead the initiative to strengthen cloud account security by eliminating user keys and deploying updated policy controls within three months.
Deploy enhanced firewall solutions and expand application protection platforms to production environments, achieving cost savings and increased security over the next four months.
Manage and mature privileged access management (PAM) solutions for databases, phasing out legacy access methods where possible, and extend PAM deployment to new environments within six months.
Perform comprehensive assessments of new accounts and prepare for resource cleanup across multiple cloud projects.
Enhance cloud security maturity by improving KPI tracking and maturing security metrics reporting within three months.
Assist with developing penetration test scopes and support the execution of penetration tests within six months, while ensuring visibility of cloud vulnerabilities for developers.
Qualification
3+ years security engineering or 3+ years cloud infrastructure engineering experience
Strong communication skills
Proficient with AWS; familiar with Azure and/or GCP
Passionate about cloud security and driving secure infrastructure
Deep experience in cloud security technologies, processes, and best practices
Familiarity of non-cloud native security tools like CrowdStrike, SentinelOne Singularity, Wiz, or Prisma
History of developing and implementing security policies and procedures
Solid understanding of network security protocols and security architecture
Excellent problem-solving abilities
Effective team player focused on team goals
Experience in a fast-paced environment with the ability to think quickly and creatively to solve problems.
Familiar with frameworks: NIST CSF, OWASP DSOMM, CSA STAR, CCM
Recommended certifications: CCSP, AWS Certified - Security, GCSA, CISSP
Compensation & Benefits
Wolfe is committed to providing a comprehensive benefits package to support your well-being, along with competitive compensation. Our benefits and perks include but not limited to:
Restricted Stock Units (RSUs)
Profit Share
Medical, Prescription, Vision, and Dental insurance for employees and dependents (Wolfe pays 80% of premium)
Short-Term Disability Insurance (Wolfe pays 100% of premium)
Voluntary Long-Term Disability Insurance, Life Insurance, Critical Illness Insurance, Accident Insurance, and Hospital Indemnity coverage
PTO (vacation and sick time)
Corporate Holidays and Floating Holidays
401(k)
Employee recognition program
Charitable Donation to a charity of your choice yearly
Employee Referral Bonus
Tuition Reimbursement
Internal Training and Information sessions
Family Picnic, Holiday Party, and other outings
Internal Culture Club
---
Wolfe is an Equal Opportunity Employer.
Wolfe does not sponsor employment visas.
$106k-150k yearly est. Auto-Apply 60d+ ago
Security Systems Engineer
Dagostino Electronic Services 4.1
Cyber security analyst job in Pittsburgh, PA
The Systems Engineer position is responsible for providing full cycle implementation and support of customer systems, while working across multiple company departments to ensure full client satisfaction. Under the direction of a manager or dispatcher, coordinates the design and maintenance of all access control, intrusion, and video surveillance systems. Incumbent receives and evaluates work orders and requests, investigates requests and troubleshoots problems where appropriate, establishes priorities and coordinates with contractors, when required.
Requirements
Essential functions and responsibilities:
Assists with security systems integration, mapping and software updates and helps train personnel in the use of these systems.
Assists on new projects in both existing areas and new construction helping with security assessments, vendor selection, technology upgrades, product selections, testing, field verification of systems and inspection of work in progress for compliance with standards
Assess work sites, conditions, and logistics for each project; Develop Method of Procedure based on pre-project assessment.
Design, develop and provide documentation of systems, configurations, and other pertinent information for the customer.
Communicate with clients to resolve issues in a professional and confidential manner; Develop and execute client specific solutions.
Manage the allocation of project resources, including software, hardware, tools, and related items specific to each customer and/or project.
Direct the work responsibilities of union labor personnel based on specific project needs.
Design and oversee training programs for new and existing customers; Determine which customers receive training.
Collaborate with Customer Relationship Managers on demonstrations for new and potential clients.
Perform installation, configuration, programming, and final commissioning of customer systems.
Work collaboratively with installation, project management and engineering teams.
Perform infrastructure services, including pulling cables, installing wall, and ceiling cabling, and installing surface mounted devices, as required.
Perform system wiring and terminations services, as required.
Deliver on-going remote and on-site technical support for existing customers and systems.
Additional responsibilities may be required as necessary, including but not limited to: Provide internal support for basic trouble shooting.
Organizes and manage parts stock and tools.
Perform other duties as needed.
Success factors/job competencies:
Effectively communicate both in writing and verbally
Work independently and prioritize multiple tasks and adapt to needed change
Analysis
Mechanical aptitude
Comprehend technical language and read and interpret blueprints, wiring diagrams, and schematics
Safety orientation
Customer Focus
Attention to Detail
Teamwork/Collaboration
Stay abreast of changes in security technology
Physical demands and work environment:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Individual will be required to travel to customer sites as needed.
While performing the duties of this job, the employee is occasionally exposed to moving mechanical parts.
The employee is occasionally exposed to outside weather conditions and risk of electrical shock.
Individual will regularly be required to lift, push, pull, and carry up to 50 pounds, and occasionally up to 75 pounds.
Incumbent will be required to use a computer with keyboard, telephone, or handheld mobile device for extended periods of time, and office machinery as needed.
Incumbent must be able to read, see, hear, and speak.
Workdays and Shifts:
Position works Monday-Friday, daylight hours, and additional time as needed to complete work.
Education/Certification(s)/License(s) required:
Bachelor's Degree in Electronics, Information Technology or related field, or equivalent experience.
May be required to participate in safety trainings and/or certifications provided by the Company or customers.
Valid driver's license, as employee will be required to travel to local and overnight client sites as needed.
Manufacturer specific certifications, as required.
Responsible to maintain active certifications and obtain new and updated certifications as required by the Company.
Experience/Other required:
Position requires two (2) to three (3) years of relevant experience in the electronic services.
Strong knowledge of Microsoft Office.
Strong computer skills with advanced software aptitude.
Security systems to include, service and maintenance across a broad spectrum of access control, intrusion and video surveillance systems such as, Genetec, Milestone, Bosch, and DMP.
Applicants must be currently authorized to work in the United States on a full-time basis.
Visa sponsorship is not available for this position.
This is a full-time, in-person position, and candidates must be able to work from our office located in Pittsburgh, Pennsylvania.
$90k-127k yearly est. 60d+ ago
Senior Cloud Security Engineer
Techstra Solutions
Cyber security analyst job in Pittsburgh, PA
Techstra Solutions is seeking an experienced and dedicated Senior Cloud Security Engineer to join our team. This role is crucial for ensuring the security and compliance of our cloud infrastructure in a highly regulated financial environment. The ideal candidate will have a strong background in cloud security, a deep understanding of regulatory requirements, and the ability to design, implement, and maintain secure cloud solutions.
Primary Success Factors
· Design, develop, and deploy scalable cloud-based security solutions to protect sensitive financial data and ensure compliance with industry regulations.
· Perform comprehensive vulnerability testing, risk analyses, and security assessments to identify and mitigate potential threats.
· Develop and coordinate robust cloud security procedures
· Monitor for and respond to security incidents in the cloud environment, utilizing advanced security tools and techniques.
· Collaborate with IT and development teams to ensure cloud solutions are securely integrated with existing software and infrastructure, following best practices and security standards.
· Keep abreast of the latest security issues, regulatory changes, and industry trends to proactively address emerging threats.
· Assist with the design of security training and awareness programs to educate staff about cloud security risks and responsibilities, fostering a culture of security within the organization.
· Regularly report on the status of cloud security, including any breaches or vulnerabilities, to senior management and stakeholders.
· Work with third-party vendors to ensure that security requirements are met and maintain strong relationships with external security partners.
· Maintain compliance with all relevant security and privacy laws and regulations, including PCI-DSS, GDPR, SOX, and other industry-specific standards
Required Experience
· Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Specific experience will be considered in lieu of a degree.
· Minimum of 7 years of experience
· Relevant certifications in CyberSecurity, with Cloud specific certifications a plus.
· Proven experience in cloud security engineering, preferably in a financial institution, with a track record of successfully implementing secure cloud solutions.
· Strong knowledge of cloud platforms and cloud security best practices, including identity and access management, encryption, and network security.
· Experience with regulatory compliance frameworks such as PCI-DSS, GDPR, and SOX, and the ability to navigate complex regulatory environments.
· Excellent problem-solving skills and the ability to work under pressure, with a proactive and detail-oriented approach to security.
· Strong communication and collaboration skills, with the ability to effectively convey complex security concepts to both technical and non-technical audiences.
· Experience with DevSecOps practices and tools, including continuous integration and continuous deployment (CI/CD) pipelines.
· Knowledge of infrastructure as code (IaC) and automation tools, such as Terraform, Ansible, or CloudFormation.
· Familiarity with security monitoring and incident response tools, such as SIEM, IDS/IPS, and EDR solutions.
· Ability to deliver with minimal management oversight
Location:
This position is based in Pittsburgh, PA and required to be on site (Hybrid)
This is a full-time W2 Salaried position. Applicants must be legally authorized to work in the United States now and in the future without the need for sponsorship.
At Techstra Solutions, we help top companies and brands achieve the business value of Digital and Talent Transformation. We believe there are three components in successful business transformation: Business Strategy, Technology and Talent. It is the coming together of these three disciplines that enables companies to take full advantage of opportunities. It differentiates us. Our approach is holistic and all-encompassing. We consider the full picture as we guide our clients on this journey. We are experts in transformation, business strategy, technology, innovation, and human capital management. We deliver our expertise through client consulting, innovative staffing solutions and software development. From strategy through implementation, we are dedicated to bringing our clients world-class business and talent solutions that fit strategic requirements and most importantly, deliver results.
Equal Employment Opportunity Statement
Techstra Solutions is an equal opportunity employer. The Company makes its decisions on merit, and its policy of equal opportunity prohibits discrimination in all phases of the employment process, including, but not limited to, recruitment, hiring, promotion, selection, transfer, demotion, layoff, termination, compensation, benefits, and other terms and conditions of employment. The policy of equal opportunity applies without regard to race, color, creed, religion, gender,, sexual orientation, gender identification, pregnancy, marital status, national origin, ancestry, age, disability that can reasonably be accommodated without undue hardship, military status, veteran status, genetic predisposition or carrier status, alienage or citizenship, domestic partnership status, arrest or conviction record, status as a victim of domestic violence, or any other protected categories under federal, state, or local law. The Company also prohibits discrimination or harassment based upon the perception that a person has, or is associated with a person who has, any of these characteristics.
$97k-135k yearly est. Auto-Apply 60d+ ago
Security Analyst
PNC Financial Services Group, Inc. 4.4
Cyber security analyst job in Pittsburgh, PA
At PNC, our people are our greatest differentiator and competitive advantage in the markets we serve. We are all united in delivering the best experience for our customers. We work together each day to foster an inclusive workplace culture where all of our employees feel respected, valued and have an opportunity to contribute to the company's success. As a Security Staff Manager within PNC's CYBER DEFENSE organization, you will be based in Pittsburgh, PA.
PowerShell
Python or Bash
IP addressing
Routing basics
* The candidate should have familiarity with the process of registering, maintaining, and decommissioning domains.
* The candidate should have experience managing domain inventory for a large enterprise/corporation.
* The candidate should have an understanding of DNS, ICANN, networking, and internet infrastructure.
Role responsibilities:
* This candidate will be a founding member of a newly formed team focused on the management of PNC's enterprise domain inventory.
* In this role, the candidate will partner with internal teams to develop a system of record, implement an enterprise-wide policy for governance, and ensure that the complete domain lifecycle (creation, maintenance, decommissioning) is accounted for in processes and procedures.
* The candidate will work closely with the lines of businesses, technology, and security teams to develop an accurate domain inventory.
* The candidate should have familiarity with the process of registering, maintaining, and decommissioning domains.
* The candidate should have experience managing domain inventory for a large enterprise/corporation.
* The candidate should have an understanding of DNS, ICANN, networking, and internet infrastructure.
PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.
In office.
Monday - Friday 8:00 am - 5:00 pm EST
PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.
PNC will not provide sponsorship for employment visas or participate in STEM OPT for this position.
Job Description
* Provides technical evaluation and analysis. Supports activities, process, and tools needed to improve overall security posture of the organization.
* Applies security concepts, reviews information, executes defined tasks, analyzes requirements, reviews logs, and creates documentation. Performs investigation and data loss prevention, data manipulation, and coordination of activities. Performs actions to address or mitigate risks and vulnerabilities. Reviews and defines controls.
* Advises on more complex security procedures and products for clients, security administrators and network operations. Participates in enforcement of control security risks and threats; potential of one more controls subject to manager discretion. Shares knowledge with staff.
* Conducts security assessments and other information security routines consistently. Investigates and recommends corrective actions for data security related to established guidelines.
PNC Employees take pride in our reputation and to continue building upon that we expect our employees to be:
* Customer Focused - Knowledgeable of the values and practices that align customer needs and satisfaction as primary considerations in all business decisions and able to leverage that information in creating customized customer solutions.
* Managing Risk - Assessing and effectively managing all of the risks associated with their business objectives and activities to ensure they adhere to and support PNC's Enterprise Risk Management Framework.
Qualifications
Successful candidates must demonstrate appropriate knowledge, skills, and abilities for a role. Listed below are skills, competencies, work experience, education, and required certifications/licensures needed to be successful in this position.
Preferred Skills
Access Control (AC), Bash (Programming Language), Building Architecture, Customer Solutions, Disaster Recovery Planning, Information Security, IP Addressing, Microsoft PowerShell, Network Security, Physical Security, Python (Programming Language), Risk Assessments, Security Technologies
Competencies
Analytical Thinking, Effective Communications, Information Assurance, Information Security Management, Information Security Technologies, IT Environment, IT Standards, Procedures & Policies, IT Systems Management, Problem Solving, Software Security Assurance
Work Experience
Roles at this level typically require a university / college degree, with 3+ years of relevant / direct industry experience. Certifications are often desired. In lieu of a degree, a comparable combination of education, job specific certification(s), and experience (including military service) may be considered.
Education
Bachelors
Certifications
No Required Certification(s)
Licenses
No Required License(s)
Pay Transparency
Base Salary: $55,000.00 - $128,000.00
Salaries may vary based on geographic location, market data and on individual skills, experience, and education. This role is incentive eligible with the payment based upon company, business and/or individual performance.
Application Window
Generally, this opening is expected to be posted for two business days from 01/12/2026, although it may be longer with business discretion.
Benefits
PNC offers a comprehensive range of benefits to help meet your needs now and in the future. Depending on your eligibility, options for full-time employees include: medical/prescription drug coverage (with a Health Savings Account feature), dental and vision options; employee and spouse/child life insurance; short and long-term disability protection; 401(k) with PNC match, pension and stock purchase plans; dependent care reimbursement account; back-up child/elder care; adoption, surrogacy, and doula reimbursement; educational assistance, including select programs fully paid; a robust wellness program with financial incentives.
In addition, PNC generally provides the following paid time off, depending on your eligibility: maternity and/or parental leave; up to 11 paid holidays each year; 9 occasional absence days each year, unless otherwise required by law; between 15 to 25 vacation days each year, depending on career level; and years of service.
To learn more about these and other programs, including benefits for full time and part-time employees, visit Your PNC Total Rewards.
Disability Accommodations Statement
If an accommodation is required to participate in the application process, please contact us via email at AccommodationRequest@pnc.com. Please include "accommodation request" in the subject line title and be sure to include your name, the job ID, and your preferred method of contact in the body of the email. Emails not related to accommodation requests will not receive responses. Applicants may also call ************ and say "Workday" for accommodation assistance. All information provided will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.
At PNC we foster an inclusive and accessible workplace. We provide reasonable accommodations to employment applicants and qualified individuals with a disability who need an accommodation to perform the essential functions of their positions.
Equal Employment Opportunity (EEO)
PNC provides equal employment opportunity to qualified persons regardless of race, color, sex, religion, national origin, age, sexual orientation, gender identity, disability, veteran status, or other categories protected by law.
This position is subject to the requirements of Section 19 of the Federal Deposit Insurance Act (FDIA) and, for any registered role, the Secure and Fair Enforcement for Mortgage Licensing Act of 2008 (SAFE Act) and/or the Financial Industry Regulatory Authority (FINRA), which prohibit the hiring of individuals with certain criminal history.
California Residents
Refer to the California Consumer Privacy Act Privacy Notice to gain understanding of how PNC may use or disclose your personal information in our hiring practices.
$55k-128k yearly 1d ago
Senior Cloud Security Engineer
Eliassen Group 4.7
Cyber security analyst job in Pittsburgh, PA
**Pittsburgh, PA** **Type:** Permanent **Category:** Security **Industry:** Financial Services **Reference ID:** JN -122025-104820 **Shortcut:** ****************************** S8EJ + Description + Recommended Jobs **Description:** _Hybrid in Pittsburgh, PA_
Financial services & banking organization comprised of offerings for commercial banking, insurance, credit unions, and community development
_This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis._
_Rate: $130,000 - $140,000 / yr. w2_
**Responsibilities:**
**Cloud Security Engineering & Architecture**
+ Design, develop, and deploy scalable cloud security solutions across AWS and Azure (experience with any major cloud provider accepted).
+ Harden existing cloud environments and implement best practices for IAM, RBAC, Zero Trust, CSPM, CNAPP, and SaaS Security Posture Management.
+ Lead the transition toward Terraform and Infrastructure as Code (IaC) maturity.
+ Build and refine KRIs and KPIs to measure cloud security posture and program effectiveness.
**Security Operations & Governance**
+ Conduct vulnerability assessments, risk analyses, and cloud security reviews.
+ Monitor and respond to cloud security incidents using modern tooling (SIEM, IDS/IPS, EDR).
+ Develop and maintain cloud security procedures and documentation.
+ Ensure compliance with regulatory frameworks including PCI-DSS, GDPR, SOX, and other financial-industry standards.
**Collaboration & Leadership**
+ Mentor and advise teams new to cloud security, guiding them through best practices and secure implementation patterns.
+ Partner with IT, engineering, and development teams to ensure secure integration of cloud services.
+ Work with third-party vendors and internal stakeholders to ensure security requirements are met.
+ Contribute to security training and awareness initiatives.
**Experience Requirements:**
+ Strong understanding of Infrastructure as Code (IaC) and cloud security best practices.
+ Experience with CSPM, Zero Trust, CNAPP, SaaS Security Posture Management, and cloud hardening.
+ Hands-on engineering experience in AWS and/or Azure (both not required).
+ Experience with Terraform, Ansible, CloudFormation, or similar tools.
+ Strong IAM and RBAC best practices.
+ Ability to build, measure, and improve cloud security metrics (KRIs/KPIs).
**Education Requirements:**
+ Bachelors Degree required
**_Recruitment Transparency Notice_**
**_Eliassen Group values transparency in our recruitment practices. Please be advised that Eliassen Group utilizes artificial intelligence (AI) tools as part of its initial application screening process. You may receive email and SMS notifications from the Eliassen Virtual Recruiting Team (_** **_noreply@eliassen.com_** **_, ************* inviting you to complete a brief voice screening as part of your application process. These tools assist our hiring teams in different ways, including but not limited to, assistance in reviewing application materials to help identify candidates whose qualifications most closely match the requirements of the position. All AI-assisted evaluations and responses are reviewed by human recruiters before any hiring decisions are made. The use of AI in our process is intended to support fairness, efficiency, and consistency, and Eliassen Group takes measures to prevent bias or discrimination in connection with its hiring practices. By proceeding, you acknowledge, agree, and consent to Eliassen Group's use of these tools, including AI tools, as part of the application and hiring process._**
_Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range._
_W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality._
_Please be advised- If anyone reaches out to you about an open position connected with Eliassen Group, please confirm that they have an Eliassen.com email address and never provide personal or financial information to anyone who is not clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact_ _********************_ _._
_About Eliassen Group:_
_Eliassen Group is a leading strategic consulting company for human-powered solutions. For over 30 years, Eliassen has helped thousands of companies reach further and achieve more with their technology solutions, financial, risk & compliance, and advisory solutions, and clinical solutions. With offices from coast to coast and throughout Europe, Eliassen provides a local community presence, balanced with international reach. Eliassen Group strives to positively impact the lives of their employees, clients, consultants, and the communities in which they operate._
_Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status._
_Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!_
$130k-140k yearly 15d ago
AI Security Engineer
Preamble
Cyber security analyst job in Pittsburgh, PA
We are seeking an experienced AI Security Engineer to lead the development of next -generation cybersecurity solutions for advanced AI systems. This individual will be responsible for researching, designing, and implementing cutting -edge security controls to protect AI models, data pipelines, and infrastructure from adversarial attacks, privacy vulnerabilities, and regulatory risks. The ideal candidate has a strong background in AI and understanding of cybersecurity principles, has been published in leading academic conferences (NeurIPS, ICLR, Black Hat, DEFCON, etc.), and has experience working at a frontier AI lab.
Requirements
Experience: 5+ years in AI/ML with a strong focus on cybersecurity.
Education: Bachelor's or Master's in Computer Science, Cybersecurity, AI/ML, or a related field. PhD preferred.
Technical Expertise:
Strong understanding of AI security challenges, including adversarial ML, LLM backdoor, (in)direct prompt injections, model poisoning, and data leakage.
Proficiency in cybersecurity frameworks (NIST, MITRE ATLAS, OWASP AI Top 10) and security tools.
Hands -on experience with AI frameworks (TensorFlow, PyTorch, OpenAI API, Hugging Face) and securing AI pipelines.
Expertise in cryptography, secure data handling, and privacy -preserving AI techniques (federated learning, differential privacy).
Proficiency in Python and security -related programming (e.g., secure coding, AI model evaluation).
Familiarity with AI agents, autonomous agents, large language models (LLMs), and multi -modal AI systems.
Preferred: Experience in compliance, regulatory, or risk frameworks for AI (e.g., OWASP, MITRE, GDPR, HIPAA, GLBA, NIST AI RMF). An interest in robotics would be preferred as well.
Publication & Research: Proven track record of research contributions in top AI/ML and cybersecurity conferences.
Industry Experience: Prior work at a leading AI research lab, security -focused AI startup, or a major tech company's AI division.
Benefits
Competitive salary and equity options.
100% paid medical insurance coverage.
Research and publication opportunities.
Opportunity to work on cutting -edge AI security challenges that expand beyond software systems.
Flexible work environment with remote and in -office options.
Access to industry -leading AI security research and resources.
A dynamic, mission -driven team shaping the future of AI security.
$79k-110k yearly est. 60d+ ago
Application Security Engineer
HDJ & Associates
Cyber security analyst job in Pittsburgh, PA
Are you ready to elevate security practices to new heights? Our organization is on the lookout for a dynamic Application Security Engineer who will revolutionize our application security strategies. Located in the vibrant city of Pittsburgh, PA, this on\-site role is the perfect opportunity to collaborate with key stakeholders in Technology, Product, and Strategic Business Units to tackle the most pressing security challenges head\-on.
As a Application Security Engineer, you will spearhead the secure software development lifecycle, embedding cutting\-edge security practices at every step of our DevOps pipelines and application security processes. Your expertise in maturity models like DSOMM (DevSecOps Maturity Model), CI\/CD pipelines, and vulnerability management tools will be crucial in transforming our security landscape. Join forces with our engineering, DevOps, Product, and Technology teams to implement automated security controls, threat modeling, and risk mitigation strategies that will shape the future of our software development lifecycle.
This role requires minimal travel and the ability to work in a fast\-paced, dynamic environment. The position may involve working outside normal business hours to address urgent compliance or security incidents.
Key Responsibilities
DevSecOps & Maturity Measurement Implementation:
Assess, report, and assist with improving application security and DevSecOps Maturity, utilizing a measurement framework such as DSOMM or BSIMM, across the organization.
Define and implement security policies, standards, and best practices for DevOps, CI\/CD pipelines, and cloud security.
Work with development and DevOps teams to integrate automated security testing (SAST, DAST, SCA, IaC security scanning, etc.) into pipelines.
Establish security gates in CI\/CD workflows to prevent deployment of vulnerable code.
Application Security & Code Vulnerabilities:
Perform code reviews, static\/dynamic security testing (SAST\/DAST), and secure coding guidance to developers.
Identify and remediate vulnerabilities in application code, libraries, containers, and infrastructure as code (IaC).
Develop and enforce secure coding standards in alignment with OWASP, NIST, and other frameworks.
Conduct threat modeling and security architecture reviews for applications and services. For example, assist application teams with developing accurate data flow diagrams and developing appropriate identity management solutions.
Manage and mature Bot Management services for all applications. Assist with WAF management and maturity.
Improve secrets management and API security.
Vulnerability Management & Risk Reduction:
Manage and mature enterprise\-wide Bug Bounty program (e.g. BugCrowd, HackerOne)
Manage vulnerability scanning tools (e.g., Tenable, Qualys, Sonar, Snyk) and prioritize remediation efforts.
Track, assess, and coordinate the remediation of vulnerabilities across the application, infrastructure, and cloud environments.
Develop risk\-based vulnerability management workflows and collaborate with engineering teams to drive fixes.
Monitor security dashboards and metrics, ensuring vulnerabilities are patched in alignment with SLAs.
Security CI\/CD Automation & Tooling:
Implement security automation using APIs, scripts, and cloud\-native security controls.
Work with DevOps engineers to integrate security tooling (like SemGrep, Snyk, Cycode) or within Jenkins, GitHub, GitLab CI\/CD, or AWS DevOps.
Automate security findings triage, reporting, and prioritization processes.
Security Awareness & Collaboration:
Train and mentor developers on secure coding, threat modeling, DevSecOps, and vulnerability management best practices.
Collaborate with security operations, incident response, and compliance teams on security initiatives.
Participate in security assessments, penetration testing, and security incident investigations.
Requirements Qualifications & Experience
Bachelor's Degree in Information Security, Cybersecurity, Computer Science, or a related field OR a minimum of 6 years' equivalent experience in lieu of a degree
4+ years of experience in application security, DevSecOps, and security engineering OR a combination of 2+ years experience as a developer and 2+ years in application security, DevSecOps, and security engineering
Hands\-on experience with DevSecOps tools (SAST, DAST, SCA, container security, IaC security), integrating security solutions within CI\/CD pipelines, strong knowledge of secure coding principles (OWASP Top 10, SANS CWE Top 25), and familiarity with AI ML or LLM usage within security tooling.
Experience with vulnerability management, web app penetration testing tooling, and security certifications like CISSP, OSCP, GCPN, GCSA, AWS Security Specialty, or CSSLP are preferred.
Proficiency in Bot Management tooling, client\-side monitoring tooling, and implementing maturity measurement frameworks such as DSOMM or BSIMM in an enterprise setting.
Ability to understand and communicate best\-practice system architectures, data flows, and security controls within modern web applications and cloud (SaaS\/PaaS, IaaS).
Excellent verbal and written communication skills, with the ability to communicate complex security concepts to technical and non\-technical stakeholders.
"}}],"is Mobile":false,"iframe":"true","job Type":"Full time","apply Name":"Apply Now","zsoid":"641871163","FontFamily":"PuviRegular","job OtherDetails":[{"field Label":"Industry","uitype":2,"value":"Engineering"},{"field Label":"Work Experience","uitype":2,"value":"5+ years"},{"field Label":"City","uitype":1,"value":"Pittsburgh"},{"field Label":"State\/Province","uitype":1,"value":"Pennsylvania"},{"field Label":"Zip\/Postal Code","uitype":1,"value":"15205"}],"header Name":"Application Security Engineer","widget Id":"**********00072311","is JobBoard":"false","user Id":"**********00133003","attach Arr":[],"custom Template":"5","is CandidateLoginEnabled":true,"job Id":"**********06714003","FontSize":"15","google IndexUrl":"https:\/\/hdjassociates.zohorecruit.com\/recruit\/ViewJob.na?digest=UnBknG4YeUTpH3g.ao7JoWAjgPO2l6C2tdKjPQTIaoc\-&embedsource=Google","location":"Pittsburgh","embedsource":"CareerSite","indeed CallBackUrl":"https:\/\/recruit.zoho.com\/recruit\/JBApplyAuth.do"}
$79k-110k yearly est. 60d+ ago
Cyber Security Engineer
Microbac 4.0
Cyber security analyst job in Cranberry, PA
Come join our family! Microbac Laboratories is an essential business offering competitive pay and benefits including medical, dental, vision, life insurance, disability, generous paid time off including vacation, holidays and flex-time, a wellness program, referral bonus, tuition reimbursement and more!
Whether you are just starting your career in science or looking to further it, Microbac will put you on the path of an exciting career with room to grow. Quality, safety, giving back to our communities, diversity and inclusion, customer success and employee wellbeing are part of our core culture. We are looking for motivated individuals to join our family as a Cybersecurity Engineer.
ABOUT MICROBAC
Microbac Laboratories, Inc. is a premier commercial laboratory testing firm that partners with clients worldwide, offering laboratory solutions to the life science, food and nutrition, and environmental industries and serves our clients with the utmost expertise and respect for their market requirements, constraints, and challenges. We embody a company-wide commitment to exceptional customer experience, which has been refined over nearly 50 years of trusted, analytical and measurement experience.
Through our network of laboratories, offices, and field services, we have the flexibility to meet the unique requirements for each client, project, and scope.
As a privately held third-party testing company, Microbac operates with a commitment to safety, quality, and compliance. Our diverse work portfolio includes broad accreditation offerings and tested insights across the environmental, food and nutrition and life science markets.
JOB SUMMARY
We are seeking a hands-on Cybersecurity Engineer to own day-to-day security operations and incident response across our network of 30+ laboratories. This role is execution-focused and ideal for a candidate who enjoys working in lean environments, partnering closely with Infrastructure and Quality teams, and directly configuring and operating security controls.
You will serve as the primary escalation point for security incidents while helping mature the organization's security posture as the business grows.
Essential Functions:
* Own daily cybersecurity operations, monitoring alerts and responding to incidents
* Act as the primary escalation point for security events
* Lead incident response from detection through remediation and root cause analysis
* Configure and maintain security controls across business platforms
* Manage identity, access controls, MFA, Conditional Access, and privileged access models
* Perform hands-on investigations
* Develop, test, and maintain incident response playbooks and escalation paths
* Create security policies and translate them into enforceable technical controls
* Partner closely with Infrastructure on architecture, network changes, cloud services, and new tools
* Continuously assess risk, identify gaps, and implement practical security improvements
* Partner with Quality to ensure compliance with industry standard regulations
* Set a positive example through high standards and professional conduct.
* Continuously monitor emerging cybersecurity threats, regulatory changes, and industry best practices to keep organizational security strategies current and effective.
* Other duties as assigned.
Minimum Requirements:
* Bachelor's degree in Computer Science, Information Systems or related field.
* 3+ years of experience in cybersecurity related positions
* Willingness to travel to lab locations as needed to provide on-site IT support.
Preferred Qualifications:
* Certifications: CompTIA Security+, CompTIA CySA+, GSEC, CompTIA PenTest+, CCSP, CISSP, CISM
* Knowledge of advanced persistent threats (APTs) and their tactics, techniques, and procedures (TTPs)
* Fundamental understanding of Windows, Mac OSX, and Linux operating systems
* Fundamental understanding of OSI model, basic networking and troubleshooting concepts
* Experience with programming or scripting, including PowerShell, Bash, Python, Yara, and Perl
* Experience in managing SSO/IAM, email security, phishing and user awareness training
* Experience in EDR platforms
* Experience with cloud deployments such as Azure, AWS or similar platforms
* Experience working with distributed teams and other cross functional stakeholders
* Familiarity with commercial solutions for logging and security event management, including SIEM or SOAR platforms
* Familiarity with vulnerability management and IDS/IPS
* Demonstrated intermediate experience with security incident detection, response frameworks, and established incident handling procedures Understanding and knowledge of various log formats from a variety of network and computer devices
* Knowledge of Cyber risks and threats related to Cyber attackers
* Knowledge of recent Cyber events and interpreting kill chain process and threat impacts
* Presentation, analytical, and critical-thinking skills
* Ability to manage competing priorities and workload
WORKING CONDITIONS AND PHYSICAL REQUIREMENTS
The physical demands and working conditions described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Physical Requirements:
* While performing the duties of this job, the employee is regularly required to use hands to finger, handle, or feel objects, tools; talk or hear. The employee is occasionally required to stand, walk, and sit.
* The employee must occassionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include color vision and depth perception.
Working Conditions:
* Home internet acceptable for remote computer work.
* The noise level in the work environment is usually moderate.
* This job may require travel less than 20%
As a privately held third-party testing company, Microbac operates with a commitment to safety, quality, and compliance. Our diverse work portfolio includes broad accreditation offerings and tested insights across the environmental, food and life science markets.
OTHER:
This is not an exhaustive list of all duties an employee may be required to perform. Microbac reserves the right to revise the job description at any time.
Employment is at-will. Microbac, promotes a drug-free, alcohol-free workplace. Applicants considered for hire must pass a drug test before beginning work. Refusal to submit to testing will result in disqualification of further employment consideration.
Microbac is an Equal Opportunity Employer - We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. All qualified applicants will receive consideration for employment.
$81k-111k yearly est. 6d ago
Security Analyst
Atria Group 4.2
Cyber security analyst job in Pittsburgh, PA
We specialize in Staffing, Consulting, Software Development, and Training along with IT services to small to medium size companies. AG's primary objective is to help companies maximize their IT resources and meet the ever-changing IT needs and challenges.
In addition, AG offers enterprise resource planning and enterprise application integration, supply-chain management, e-commerce solutions, and B2B public exchanges and B2B process integration solutions. Our company provides application analysis, design, development and programming, software engineering, systems development, testing, integration, and implementation, and management consulting services to various clients - including governmental agencies and private companies - throughout the United States and India.
We provide these services in multiple computing environments and use technologies such as client/server architecture, object-oriented programming languages and tools, distributed database management systems, state-of-the-art networking, and communications infrastructures. Our honest and realistic approach to recruiting dictates that AG does not entice or lure engineers from their employers. We represent only high caliber technical professionals who have committed to making a change required by career.
Job Description
SecurityAnalyst
MUST HAVE:
Experience with implementing a vulnerability scanner
Familiarity with both Windows and Linux platforms
Experience with a log management system (Splunk, Elastic Search, etc)
General understanding of incident management systems
Experience patching operating systems/applications
Experience configuring operating systems/applications
Knows and applies the fundamental concepts, practices and procedures of IT security hardware, software, management software, and troubleshooting tools
Candidate should have a strong knowledge of IT security, including demonstrated knowledge of current security trends and issues
Ability to effectively and professionally communicate with customers and technical support staff at remote locations including team members in foreign countries; excellent verbal and written communication skills
Highly self-motivated and flexible
Manage priorities for timely completion of assignments
Strong analytical and problem-solving skills
Demonstrated success managing confidential/secure information with a high level of integrity
NICE TO HAVE:
Nessus experience
HP Service Manager
Additional Information
Good comm skills are a big priority
Duration: 3+ Months
Phone+F2F
Local Candidates Preferred
How much does a cyber security analyst earn in Munhall, PA?
The average cyber security analyst in Munhall, PA earns between $63,000 and $114,000 annually. This compares to the national average cyber security analyst range of $66,000 to $117,000.
Average cyber security analyst salary in Munhall, PA