Security Engineer Jobs in Pennsylvania
Security Engineer jobs in Pennsylvania are in strong demand, with active hiring across defense contracting, financial services, healthcare systems, and state and federal government agencies at every level from entry-level analyst to senior architect. Philadelphia, Pittsburgh, and the Greater Philadelphia suburbs anchoring the I-95 corridor are the busiest hiring markets, where established employers like Lockheed Martin, Comcast, and UPMC maintain significant security engineering headcount. The most sought-after specialties in Pennsylvania include cloud security, identity and access management, and security operations center engineering. Find a role that fits below and apply directly.
Find Security Engineer JobsOverview
Showing 5 of 58+ Security Engineer jobs
Job Title: Application Security Engineer (REMOTE)
Anytown, PA, US, 19605 Anytown, CA, K1A 0A1 Anytown, WY, US, 82001 Anytown, MS, US, 38601 Anytown, IL, US, 60446 Anytown, AL, US, 35005 Anytown, DE, US, 19707 Anytown, CO, US, 80503 Anytown, VA, US, 20120 Anytown, TN, US, 37363 Anytown, WV, US, 24701 Anytown, RI, US, 02801 Anytown, NM, US, 87102 Anytown, SD, US, 57001 Anytown, MD, US, 21061 Anytown, KY, US, 40018 Anytown, AR, US, 71630 Anytown, CA, US, 91710 Anytown, KS, US, 64030 Anytown, MI, US, 48377 Anytown, TX, US, 75006 Anytown, MN, US, 55177 Anytown, MO, US, 64120 Anytown, OH, US, 43127 Anytown, WI, US, 53001 Anytown, PA, US, 19610 Anytown, ME, US, 04098 Anytown, NJ, US, 07005 Anytown, LA, US, 70032 Anytown, AZ, US, 85001 Anytown, IA, US, 50001 Anytown, CT, US, 06101 Anytown, VT, US, 05001 Anytown, NH, US, 03031 Anytown, DC, US, 20001 AnyTown, WA, US, 98225 Anytown, OK, US, 73008 Anytown, NV, US, 89012 Anytown, WA, US, 98390 Anytown, GA, US, 30093 Anytown, ND, US, 58001 Anytown, NE, US, 68104 Anytown, NC, US, 27609 Anytown, MA, US, 01001 Anytown, IN, US, 46001 Anytown, FL, US, 33805 Anytown, MT, US, 59001 Anytown, ID, US, 83816 Anytown, OR, US, 97202 Anytown, SC, US, 29154 Anytown, NY, US, 13057
EnerSys is a global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products.
What We’re Offering
- Paid time off plus paid holidays
- Medical/dental/vision insurance plan
- Life insurance, short/long term disability, tuition reimbursement, flex spending, and employee stock purchase plan
- 401K plan
- Culture: We value and strive for excellence in all that we do through innovative technology by creating long lasting relationships with our stakeholders, co-workers, and customers. We continually strive to foster teamwork, engagement and enhance our employee’s skills and competence by providing appropriate training.
Compensation Range: $117,200 - $146,600
Compensation may vary based on applicant's work experience, education level, skill set, and/or location.
Job Purpose
The Application Security Engineer is responsible for strengthening the security of our applications, platforms, and development processes. This position partners with software engineers, DevOps teams, and security professionals to embed security into the full software development lifecycle. Collaborate within an expanding Cybersecurity team, and work closely with internal EnerSys teams to ensure new and continued compliance with cybersecurity frameworks and required programs and initiatives.
Essential Duties and Responsibilities
- Serve as a primary liaison between the Cybersecurity and development teams, ensuring security is integrated into design, development, deployment, and operations.
- Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.
- Define, maintain, and enforce secure coding standards, patterns, and best practices.
- Integrate and manage security tooling within CI/CD pipelines, including SAST, DAST, SCA, IaC scanning, and container security solutions.
- Support secure architecture reviews for cloud‑native applications, microservices, and containerized workloads.
- Support threat modeling, risk assessments, and security architecture reviews for applications.
- Ensure that all security practices meet regulatory and compliance requirements.
- Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices.
- Ensure application security practices align with regulatory and compliance frameworks (e.g., NIST CSF, ISO 27001, IEC 62443).
- Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.
- Monitor and respond to application security threats, incidents and vulnerabilities.
- Stay up to date on regulatory developments and industry trends.
- Manage and maintain third-party vendor and consultant relationships .
- Perform other duties as assigned.
SUPERVISORY RESPONSIBILITIES: N/A
Qualifications
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Must have an active passport and be willing to travel internationally.
Required Qualifications
- Bachelor’s degree in a technical field (e.g., Computer Science, Information Systems, Cybersecurity).
- 5+ years of experience in Information Security, with at least 3 years focused on application security, secure development, or DevSecOps.
- Demonstrated experience building and scaling an application security program, either as the lead or a key contributor.
- Strong knowledge of OWASP Top 10, OWASP ASVS, SANS Top 25, and secure SDLC methodologies.
- Hands-on experience with application security testing tools such as Burp Suite, Fortify, Checkmarx, Veracode, and ZAP.
- Experience conducting threat modeling, penetration testing, secure software development, and secure architecture reviews.
- Practical experience securing cloud environments (AWS or Azure) and implementing cloud-native security controls.
- Familiarity with Kubernetes security, container hardening, and runtime protection.
- Strong communication skills with the ability to collaborate and influence across technical and non-technical teams.
Preferred Qualifications
- Relevant certifications such as CISSP, CSSLP, OSCP, GWAPT, CEH, or GIAC Cloud Security.
- Experience securing embedded systems and mobile applications.
- Problem management / resolution skills; project management skills; generally accepted security principles.
- Ability to analyze data, resources, and schedules to make decisions that affect a project on a regular basis.
General Job Requirements
- This position will work in an office setting, expect minimal physical demands.
EnerSys provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Know Your Rights
Know Your Rights (Spanish)
We use artificial intelligence to screen, assess and select applicants for open positions, including for the purposes of reviewing and ranking application materials and scoring answers to application questions. Accordingly, decisions about your application and eligibility for employment with EnerSys may be made based exclusively on the automated processing of the personal information that you submit in your application materials.
Nearest Major Market: Reading PA
Job Title: Application Security Engineer (REMOTE)
Anytown, PA, US, 19605 Anytown, CA, K1A 0A1 Anytown, WY, US, 82001 Anytown, MS, US, 38601 Anytown, IL, US, 60446 Anytown, AL, US, 35005 Anytown, DE, US, 19707 Anytown, CO, US, 80503 Anytown, VA, US, 20120 Anytown, TN, US, 37363 Anytown, WV, US, 24701 Anytown, RI, US, 02801 Anytown, NM, US, 87102 Anytown, SD, US, 57001 Anytown, MD, US, 21061 Anytown, KY, US, 40018 Anytown, AR, US, 71630 Anytown, CA, US, 91710 Anytown, KS, US, 64030 Anytown, MI, US, 48377 Anytown, TX, US, 75006 Anytown, MN, US, 55177 Anytown, MO, US, 64120 Anytown, OH, US, 43127 Anytown, WI, US, 53001 Anytown, PA, US, 19610 Anytown, ME, US, 04098 Anytown, NJ, US, 07005 Anytown, LA, US, 70032 Anytown, AZ, US, 85001 Anytown, IA, US, 50001 Anytown, CT, US, 06101 Anytown, VT, US, 05001 Anytown, NH, US, 03031 Anytown, DC, US, 20001 AnyTown, WA, US, 98225 Anytown, OK, US, 73008 Anytown, NV, US, 89012 Anytown, WA, US, 98390 Anytown, GA, US, 30093 Anytown, ND, US, 58001 Anytown, NE, US, 68104 Anytown, NC, US, 27609 Anytown, MA, US, 01001 Anytown, IN, US, 46001 Anytown, FL, US, 33805 Anytown, MT, US, 59001 Anytown, ID, US, 83816 Anytown, OR, US, 97202 Anytown, SC, US, 29154 Anytown, NY, US, 13057
EnerSys is a global leader in stored energy solutions for industrial applications. We have over thirty manufacturing and assembly plants worldwide servicing over 10,000 customers in more than 100 countries. Worldwide headquarters are located in Reading, PA, USA with regional headquarters in Europe and Asia. We complement our extensive line of Motive Power and Energy Systems with a full range of integrated services and systems. With sales and service locations throughout the world, and over 100 years of battery experience, EnerSys is the power/full solution for stored DC power products.
What We’re Offering
- Paid time off plus paid holidays
- Medical/dental/vision insurance plan
- Life insurance, short/long term disability, tuition reimbursement, flex spending, and employee stock purchase plan
- 401K plan
- Culture: We value and strive for excellence in all that we do through innovative technology by creating long lasting relationships with our stakeholders, co-workers, and customers. We continually strive to foster teamwork, engagement and enhance our employee’s skills and competence by providing appropriate training.
Compensation Range: $117,200 - $146,600
Compensation may vary based on applicant's work experience, education level, skill set, and/or location.
Job Purpose
The Application Security Engineer is responsible for strengthening the security of our applications, platforms, and development processes. This position partners with software engineers, DevOps teams, and security professionals to embed security into the full software development lifecycle. Collaborate within an expanding Cybersecurity team, and work closely with internal EnerSys teams to ensure new and continued compliance with cybersecurity frameworks and required programs and initiatives.
Essential Duties and Responsibilities
- Serve as a primary liaison between the Cybersecurity and development teams, ensuring security is integrated into design, development, deployment, and operations.
- Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.
- Define, maintain, and enforce secure coding standards, patterns, and best practices.
- Integrate and manage security tooling within CI/CD pipelines, including SAST, DAST, SCA, IaC scanning, and container security solutions.
- Support secure architecture reviews for cloud‑native applications, microservices, and containerized workloads.
- Support threat modeling, risk assessments, and security architecture reviews for applications.
- Ensure that all security practices meet regulatory and compliance requirements.
- Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices.
- Ensure application security practices align with regulatory and compliance frameworks (e.g., NIST CSF, ISO 27001, IEC 62443).
- Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.
- Monitor and respond to application security threats, incidents and vulnerabilities.
- Stay up to date on regulatory developments and industry trends.
- Manage and maintain third-party vendor and consultant relationships .
- Perform other duties as assigned.
SUPERVISORY RESPONSIBILITIES: N/A
Qualifications
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Must have an active passport and be willing to travel internationally.
Required Qualifications
- Bachelor’s degree in a technical field (e.g., Computer Science, Information Systems, Cybersecurity).
- 5+ years of experience in Information Security, with at least 3 years focused on application security, secure development, or DevSecOps.
- Demonstrated experience building and scaling an application security program, either as the lead or a key contributor.
- Strong knowledge of OWASP Top 10, OWASP ASVS, SANS Top 25, and secure SDLC methodologies.
- Hands-on experience with application security testing tools such as Burp Suite, Fortify, Checkmarx, Veracode, and ZAP.
- Experience conducting threat modeling, penetration testing, secure software development, and secure architecture reviews.
- Practical experience securing cloud environments (AWS or Azure) and implementing cloud-native security controls.
- Familiarity with Kubernetes security, container hardening, and runtime protection.
- Strong communication skills with the ability to collaborate and influence across technical and non-technical teams.
Preferred Qualifications
- Relevant certifications such as CISSP, CSSLP, OSCP, GWAPT, CEH, or GIAC Cloud Security.
- Experience securing embedded systems and mobile applications.
- Problem management / resolution skills; project management skills; generally accepted security principles.
- Ability to analyze data, resources, and schedules to make decisions that affect a project on a regular basis.
General Job Requirements
- This position will work in an office setting, expect minimal physical demands.
EnerSys provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
Know Your Rights
Know Your Rights (Spanish)
We use artificial intelligence to screen, assess and select applicants for open positions, including for the purposes of reviewing and ranking application materials and scoring answers to application questions. Accordingly, decisions about your application and eligibility for employment with EnerSys may be made based exclusively on the automated processing of the personal information that you submit in your application materials.
Nearest Major Market: Reading PA
See All 58 Security Engineer Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Security Engineer JobsSecurity Engineer Jobs by City in Pennsylvania
Where Pennsylvania roles are concentrated, by current openings.
Security Engineer Job Market in Pennsylvania
A snapshot from current Pennsylvania openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Technology & Software
- Consulting & Professional Services
- Energy
- Insurance
- Accounting & Auditing
What Pennsylvania Employers Look For
The qualifications that appear most often in security engineer jobs across Pennsylvania.
- Active security certifications such as CISSP, CompTIA Security+, or CISM recognized by Pennsylvania employers
- Bachelor's degree in computer science, information security, or a closely related field
- Hands-on experience with SIEM platforms, endpoint protection tools, and vulnerability management systems
- Ability to obtain or maintain a U.S. government security clearance for Pennsylvania defense-sector roles
- Experience designing and implementing zero-trust network architecture or cloud security frameworks
- Familiarity with NIST Cybersecurity Framework and regulatory compliance requirements applicable to Pennsylvania industries
Security Engineer Jobs in Pennsylvania: Frequently Asked Questions
How do you become a security engineer in Pennsylvania?
Pennsylvania does not issue a state-specific license for security engineers, so the path runs through education and industry certification. Most employers expect a bachelor's degree in computer science, cybersecurity, or information technology, combined with credentials like CompTIA Security+, CISSP, or CEH. Defense contractors and government agencies in Pennsylvania additionally require candidates to qualify for a federal security clearance before or shortly after hiring.
How much do security engineers make in Pennsylvania?
Security engineers in Pennsylvania earn a median of about $107,230 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $59,890 for the lowest 10% to over $167,420 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire security engineers in Pennsylvania?
Employers hiring security engineers in Pennsylvania right now include Citizens, Lockheed Martin, and BNY, based on current listings on Migrate Mate as of August 2026. Pennsylvania's concentration of defense primes, large health systems, and financial institutions means consistent demand across both private and public-sector organizations throughout the state.
Which Pennsylvania cities have the most security engineer jobs?
Pittsburgh, Philadelphia, and King of Prussia account for the largest share of security engineer openings in Pennsylvania. Philadelphia drives volume through its financial services firms, major health systems like Jefferson and Penn Medicine, and federal agency satellite offices, while Pittsburgh's base of Carnegie Mellon-linked technology companies and UPMC's enterprise security needs sustains steady demand in the west.
Are there remote security engineer jobs in Pennsylvania?
Yes, and more than most technical fields. About 41% of security engineer openings tied to Pennsylvania are remote or hybrid as of August 2026, reflecting how much of the work involves monitoring dashboards, reviewing alerts, and configuring cloud-based tools rather than physical presence. Roles requiring hands-on hardware work or classified government clearance environments are the main exceptions that remain fully on-site.
How can I get hired as a security engineer in Pennsylvania with little or no experience?
The most realistic entry point is a security operations center analyst role, which large Pennsylvania health systems like UPMC and Penn Medicine and defense employers like Lockheed Martin actively hire for at the associate level. Completing a CompTIA Security+ certification before applying strengthens early applications considerably. Community college cybersecurity programs across Pennsylvania, including those at HACC and Community College of Philadelphia, also place graduates directly with regional employers through established hiring partnerships.
Where can I find and apply to security engineer jobs in Pennsylvania?
You can find and apply to security engineer jobs in Pennsylvania on Migrate Mate, which lists current Pennsylvania openings across industries and experience levels. Find roles that fit your background and apply directly to the employers posting them.
See All 58 Security Engineer Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Security Engineer Jobs