Top Cybersecurity Engineer Jobs

Lead design and implementation of secure-by-default infrastructure: build IaC modules, CI/CD templates, policy-as-code guardrails, and platform security tooling. Embed pipeline and supply-chain security, enforce least-privilege identity, operate defenses as self-service products, review high-risk designs, and set technical direction while mentoring engineers.

Lead and execute adversary emulation and purple team operations to validate detections, logging, and response. Build repeatable MSV-based validation workflows, develop custom offensive tooling (C2, payloads, automation), test cloud and endpoint attack paths (AWS, GCP, Azure), and partner with Detection Engineering and Incident Response to convert findings into improved detections, documentation, and hunts.

Lead PKI and secrets management strategy, design, and operations. Engineer and harden certificate authorities, HSM-backed key storage, OCSP/CRL, and secrets platforms. Automate lifecycle processes, integrate cryptographic controls into cloud and on-prem systems, drive incident remediation, mentor engineers, and define standards and reference architectures to ensure secure, scalable certificate and secrets management across the enterprise.

The Security Engineering Manager oversees security policies, manages incident responses, monitors threats, and coordinates investigations to protect the technology environment. They also handle reporting and assurance on security incidents and ensure operational stability.

The Security Engineering Manager safeguards technology by enforcing security policies, managing incident responses, monitoring threats, and reporting on security incidents. Must collaborate across IT and business functions, ensuring compliance and conducting training.

The Security Engineering Manager oversees IT security policies, manages incident response, tracks threats, engages with IT teams, and provides regular incident reporting.

Support C2BMC X‑Lab cybersecurity: tune and optimize security tools, create custom dashboards, integrate security products, troubleshoot and manage upgrades/deployments to improve threat detection and system performance. Work is 100% onsite and supports missile defense networks requiring clearance and facility access.

Lead product threat assessments and TARA activities during product development. Perform threat modeling across embedded systems, mobile and connected platforms; identify risks and recommend mitigations; translate attacker perspective into security requirements; advise engineering and validation teams; and improve assessment methods and reusable security artifacts.

Design and implement scalable zero trust and secure access architectures across complex hybrid networks. Conduct deep analysis of network access paths, author reusable reference architectures, implement mesh VPN and identity-aware proxy solutions, automate deployments with IaC and CI/CD, collaborate cross-functionally, drive governance and metrics, mentor engineers, and participate in incident response and remediation.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.

Design, implement, and maintain cybersecurity architecture for OT networks, performing risk assessments and advocating secure practices across teams.

The role involves designing and managing PKI and secrets management systems, leading technical teams, and advising on security architecture. Responsibilities include mentoring engineers and ensuring compliance with security standards.

The role involves leading cybersecurity efforts for Boeing airplanes, conducting risk assessments, coordinating system security requirements, and ensuring compliance with industry standards.

Design, implement, and optimize secure, resilient network and server-room infrastructures; translate cybersecurity requirements into system architecture; produce ATO documentation and POAMs; create network routing and hardware diagrams; design room and rack infrastructure; evaluate technologies and vendors; support troubleshooting and incident response; collaborate on cloud and hybrid networking and GCS network architecture.

The Senior Cybersecurity Engineer will design, implement, and manage security solutions, conduct risk assessments and threat responses, and collaborate on security architecture and compliance efforts for enterprise systems.

Design, build, and operate security controls and architecture based on NIST frameworks. Deploy IAM (Okta, Vault), endpoint and network protections, SIEM, vulnerability management, and vendor risk processes. Perform penetration testing/assessments, embed security into engineering workflows, automate security operations with scripting, and support compliance (SOC 2, ISO 27001).

Design and implement security controls for AI systems (LLMs/NLMs/SLMs), perform red teaming and adversarial ML testing, assess AI architectures and third-party integrations, and help build RAIA standards to mitigate data leakage, model poisoning, bias, and other AI-specific risks.

Investigate security issues from red team and assessment teams, perform root cause analysis, prioritize risk, design and implement technical and procedural mitigations, collaborate with stakeholders, and use enterprise AI tools to accelerate analysis and reporting while validating outputs and ensuring data security.

Design, implement, and operate security controls across Oracle Cloud (OCI) and hybrid environments. Harden workloads, manage identity and access, lead vulnerability and compliance programs, integrate with SIEM, respond to incidents, and mentor junior engineers.

Embed security across the software development lifecycle by partnering with engineering teams to design secure systems, identify and remediate vulnerabilities, perform code reviews, integrate SAST/DAST/SCA tooling into CI/CD, and reduce production risk through offensive and defensive measures and automation.

Develop offensive cyber tools for computer network exploitation: design, implement, test, and document native and scripting software; analyze infrastructure for vulnerabilities; research new offensive techniques; evaluate operational readiness.

Design, implement, and optimize SIEM, SOAR, EDR, and vulnerability management platforms. Harden and automate Windows/Linux systems, develop detection content and automation (Python, PowerShell, Bash), integrate telemetry across cloud and identity systems, lead detection engineering and threat hunting, mentor analysts, and serve as Tier III escalation while producing executive reporting and maintaining platform operations.

Design, implement, and secure enterprise IT and network systems for Navy Live Virtual Constructive (LVC) environments. Apply STIGs, RMF controls, patches, and security controls; perform vulnerability assessments and remediation. Support ATO documentation, develop secure system architectures, and collaborate with engineering and operations to maintain system security.

Support cybersecurity engineering for Navy LVC environments: system hardening, secure configurations, patching, vulnerability scanning/remediation, RMF documentation, and assist senior engineers with secure integrations and compliance.

Design, implement, and harden secure enterprise IT and network architectures for Live Virtual Constructive environments. Lead vulnerability analysis, threat modeling, RMF/STIG-based controls, and ATO support. Provide technical leadership, remediation planning, and mentor junior engineers to ensure DoD cybersecurity compliance.