Top Cybersecurity Engineer Jobs

Owns secure architecture for in-vehicle communications, including message authentication, firewalls, and Automotive Ethernet security. Translates threat assessments and architectural decisions into testable requirements for engineering and suppliers, leads security design reviews, maintains specifications across software-defined vehicle platforms, and serves as a subject-matter expert. The role requires strong embedded and automotive cybersecurity expertise, stakeholder alignment, and pragmatic security judgment.

Lead design and delivery of security platforms, embedded SDLC controls, cloud and service-mesh security, and AI/LLM protections. Build and operate AWS-native security programs (CSPM/DSPM), integrate security into CI/CD and developer workflows, and partner with engineering teams to operationalize zero-trust, detection, and automated remediation at enterprise scale.

Lead ISSE activities to implement DoD/AF RMF, develop and review cybersecurity artifacts, assess controls and gaps, support incident response and threat modeling, use automated tools for compliance, and collaborate with program teams to implement security controls.

Lead implementation and maturation of security and privacy controls across SDLC, cloud, and infrastructure. Perform secure code reviews, threat assessments, vulnerability management, and cloud security work. Embed security into CI/CD and IaC, develop automation and KPIs, analyze security telemetry, communicate risk to stakeholders, and mentor team members to drive risk-based remediation and secure engineering practices.

Lead design and implementation of hybrid CMMC Level 2 security for cloud and on-premise manufacturing/engineering systems. Partner with non-cyber stakeholders to enable secure workflows, manage SIEM/firewalls/identity/vulnerability tools, produce compliance artifacts (SSPs, RARs, POA&Ms), mentor junior staff, and solve complex network segmentation and OT security challenges.

The Senior Cybersecurity Engineer will design, implement, and manage security solutions, conduct risk assessments and threat responses, and collaborate on security architecture and compliance efforts for enterprise systems.

The Security Engineering Manager oversees security policies, manages incident responses, monitors threats, and coordinates investigations to protect the technology environment. They also handle reporting and assurance on security incidents and ensure operational stability.

The Security Engineering Manager safeguards technology by enforcing security policies, managing incident responses, monitoring threats, and reporting on security incidents. Must collaborate across IT and business functions, ensuring compliance and conducting training.

The Security Engineering Manager oversees IT security policies, manages incident response, tracks threats, engages with IT teams, and provides regular incident reporting.

Lead and execute adversary emulation and purple team operations to validate detections, logging, and response. Build repeatable MSV-based validation workflows, develop custom offensive tooling (C2, payloads, automation), test cloud and endpoint attack paths (AWS, GCP, Azure), and partner with Detection Engineering and Incident Response to convert findings into improved detections, documentation, and hunts.

Leads enterprise vulnerability management across data centers, endpoints, multi-cloud, AI workloads, and manufacturing environments. The role prioritizes exposures using threat intelligence, exploitability, asset criticality, business context, and attack-path analysis. Responsibilities include vulnerability scanning, remediation governance, patch coordination, exception management, automation, dashboards, intelligence workflows, 0-day response, stakeholder influence, and mentoring. The engineer partners with infrastructure, cloud, application, SOC, and incident response teams to reduce organizational risk and mature cybersecurity capabilities.

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

Lead design and implementation of secure-by-default infrastructure: build IaC modules, CI/CD templates, policy-as-code guardrails, and platform security tooling. Embed pipeline and supply-chain security, enforce least-privilege identity, operate defenses as self-service products, review high-risk designs, and set technical direction while mentoring engineers.

Design, build, and evolve product security validation platforms, pipelines, and test frameworks. Develop automated test capabilities, scripts, and services to scale security validation. Implement AI-driven robustness and fuzz testing, create reusable security test cases, and integrate tests with CI/CD and product workflows to improve coverage, reliability, and efficiency.

Lead security design and assessments across applications, cloud, mobile, IoT, and network domains. Perform threat modeling, code reviews, vulnerability testing, and remediation planning. Advise engineering teams, design firewall/SSL policies, manage SIEM and scanning tools, and drive security improvements and compliance.

Manages cybersecurity infrastructure and operations, identifies vulnerabilities, leads incident response, digital forensics, and e-discovery, and administers data classification and DLP programs. Evaluates vendor security, supports security projects, maintains documentation, audits access controls, and ensures encryption and compliance across systems, networks, and endpoints. Provides technical guidance to IT staff and travels quarterly to company locations as needed.

Leads cybersecurity architecture for DoD intelligence, electronic warfare, and cyber systems. Designs Zero Trust, ICAM, Cross Domain Solutions, RMF, DevSecOps, encryption, and secure cloud architectures. Directs security assessments, threat modeling, compliance validation, ATO activities, and cybersecurity roadmaps. Provides technical leadership, mentors engineering teams, and interfaces with government program offices, ISSMs, and Authorizing Officials.

Hands-on cybersecurity engineer responsible for implementing and improving security controls across infrastructure, endpoints, cloud services, identity systems, networks, and engineering platforms. Duties include vulnerability management, security monitoring, alert triage, incident response support, IAM, server hardening, DevSecOps, compliance evidence collection, documentation, and remediation tracking. The role partners with infrastructure, DevOps, software engineering, DBA, and business technology teams in a hybrid Austin environment.

Supports cybersecurity engineering for DoD mission-critical systems in AWS classified environments. Responsibilities include secure architecture, NIST 800-53 control implementation, RMF activities, ATO documentation, vulnerability scanning, system hardening, remediation, and stakeholder risk advisory. The role requires classified-environment experience, security certification, vulnerability assessment expertise, and an active or recently active Secret clearance.

Leads the Cyber Engineering organization supporting NGA cybersecurity services and capabilities. Oversees strategy, technical performance, modernization, solution design, integration, operations, and sustainment of complex enterprise cybersecurity systems. Provides expert guidance, resolves complex technical issues, drives innovation, and communicates recommendations to executive and senior customer stakeholders. Requires extensive DoD or IC cybersecurity experience, cloud transition expertise, RMF and NIST knowledge, leadership experience, and TS/SCI clearance with polygraph eligibility.

Implements and manages cybersecurity controls for AWS GovCloud environments and DevSecOps pipelines. Integrates RMF and NIST SP 800-53 controls into infrastructure and configuration code, remediates security findings, develops risk assessments and POA&Ms, documents risks, recommends mitigations, and evaluates tools supporting Zero Trust and compliance.

Provides cybersecurity and information assurance engineering for federal defense systems. Responsibilities include analyzing DoD security requirements, supporting system lifecycle activities, designing secure architectures, implementing security controls, resolving information assurance challenges, and maintaining secure configurations through continuous monitoring and risk management. The role requires extensive federal cybersecurity experience, multiple DoD-approved certifications, a Top Secret clearance, and eligibility for an IT-I critical-sensitive clearance.

Supports DTRA CSSP cybersecurity infrastructure by configuring and optimizing security tools, integrating subscriber data into Splunk SIEM, validating and normalizing logs against CIM, applying Linux patches and DISA STIGs, and documenting technical solutions. Collaborates with stakeholders to maintain security telemetry, operational readiness, compliance, diagrams, procedures, and training materials.

Designs, deploys, sustains, and optimizes DTRA CSSP security infrastructure and toolsets. Responsibilities include leading SIEM migrations, configuring forwarders, APIs, and syslog collectors, validating and normalizing logs in Splunk CIM, developing parsing rules and dashboards, applying Linux vulnerability patches, enforcing DISA STIGs, documenting architecture and changes, and supporting defensive cybersecurity operations. Requires an active Top Secret clearance with SCI eligibility, DoD certifications, a bachelor’s degree, and cybersecurity engineering experience.

Provides cybersecurity and information assurance engineering for Defense Logistics Agency systems. Responsibilities include analyzing DoD security requirements, supporting secure system design and integration, implementing security controls, resolving IA challenges, and maintaining continuous monitoring and risk management. Requires extensive federal IT experience, multiple cybersecurity certifications, Microsoft Windows Server certification, RSA Archer administration certification, and an active Top Secret clearance.