Top Cybersecurity Engineer Jobs

Lead ISSE activities to implement DoD/AF RMF, develop and review cybersecurity artifacts, assess controls and gaps, support incident response and threat modeling, use automated tools for compliance, and collaborate with program teams to implement security controls.

Lead implementation and maturation of security and privacy controls across SDLC, cloud, and infrastructure. Perform secure code reviews, threat assessments, vulnerability management, and cloud security work. Embed security into CI/CD and IaC, develop automation and KPIs, analyze security telemetry, communicate risk to stakeholders, and mentor team members to drive risk-based remediation and secure engineering practices.

Lead and mentor a cybersecurity team to run security operations, incident response, vulnerability and risk management, secure architecture, cloud and DevSecOps security, compliance, and stakeholder reporting to reduce enterprise cyber risk.

Lead design and implementation of hybrid CMMC Level 2 security for cloud and on-premise manufacturing/engineering systems. Partner with non-cyber stakeholders to enable secure workflows, manage SIEM/firewalls/identity/vulnerability tools, produce compliance artifacts (SSPs, RARs, POA&Ms), mentor junior staff, and solve complex network segmentation and OT security challenges.

The Senior Cybersecurity Engineer will design, implement, and manage security solutions, conduct risk assessments and threat responses, and collaborate on security architecture and compliance efforts for enterprise systems.

The Security Engineering Manager oversees security policies, manages incident responses, monitors threats, and coordinates investigations to protect the technology environment. They also handle reporting and assurance on security incidents and ensure operational stability.

The Security Engineering Manager safeguards technology by enforcing security policies, managing incident responses, monitoring threats, and reporting on security incidents. Must collaborate across IT and business functions, ensuring compliance and conducting training.

The Security Engineering Manager oversees IT security policies, manages incident response, tracks threats, engages with IT teams, and provides regular incident reporting.

Lead and execute adversary emulation and purple team operations to validate detections, logging, and response. Build repeatable MSV-based validation workflows, develop custom offensive tooling (C2, payloads, automation), test cloud and endpoint attack paths (AWS, GCP, Azure), and partner with Detection Engineering and Incident Response to convert findings into improved detections, documentation, and hunts.

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

Lead design and implementation of secure-by-default infrastructure: build IaC modules, CI/CD templates, policy-as-code guardrails, and platform security tooling. Embed pipeline and supply-chain security, enforce least-privilege identity, operate defenses as self-service products, review high-risk designs, and set technical direction while mentoring engineers.

Design, build, and evolve product security validation platforms, pipelines, and test frameworks. Develop automated test capabilities, scripts, and services to scale security validation. Implement AI-driven robustness and fuzz testing, create reusable security test cases, and integrate tests with CI/CD and product workflows to improve coverage, reliability, and efficiency.

Engineer and optimize Palo Alto Networks XSIAM security operations capabilities by tuning alerts, validating rules, monitoring performance, investigating incidents, automating workflows, onboarding data sources, and integrating security tools. The role supports threat intelligence, vulnerability management, cloud and network security, forensics, intrusion detection, secure systems, documentation, and client-facing cybersecurity consulting while maintaining current knowledge of Palo Alto Networks technologies and emerging threats.

Lead offensive security assessments across embedded vehicle software, mobile, and backend systems. Perform penetration tests, red-team activities, and vulnerability research; validate impacts and develop exploits; provide actionable remediation guidance; partner with engineering teams to improve secure SDLC and advance offensive tooling and testing methods.

Senior individual contributor who designs and builds secure engineering services, implements SAST/DAST/fuzzing/runtime/OS hardening, conducts secure code reviews, authors reusable security patterns, partners with product teams, mentors engineers, and builds custom security tooling to scale secure software and systems across embedded, mobile, and backend products.

Leads application penetration testing strategy, methods, and solutions across diverse technology stacks. Develops offensive security research, adversary emulation, scanning, and AI red-team capabilities while mentoring testing teams. Advises senior leaders on security risks and challenges assumptions in security strategies. Uses AI-assisted development tools responsibly, validating outputs for security, compliance, privacy, ethical, and operational risks. Requires expertise in application security testing, AI/ML security, stakeholder management, and team development.

Leads application penetration testing strategy, methods, and solutions across diverse technology stacks. Develops offensive security capabilities, mentors testing teams, advises senior leaders, and performs adversarial security assessments. Uses AI-assisted development and analysis tools while evaluating AI/ML and LLM security risks, including prompt injection, model misuse, and red teaming. Ensures testing and AI practices meet security, compliance, privacy, and ethical standards.

Leads application penetration testing research and methodology across diverse technology stacks. Develops offensive security tools, advises senior management, mentors security teams, and evaluates AI/ML systems, generative AI applications, LLM risks, prompt injection, and AI red-teaming techniques. Integrates AI-assisted development responsibly while addressing security, compliance, privacy, ethical, and operational considerations in a regulated environment.

Leads application penetration testing research and methodology across diverse technology stacks and software development lifecycle phases. Develops offensive security tools, automation, adversary emulation, and AI-assisted testing practices. Mentors security teams, advises senior management, challenges security strategies, and evaluates AI/ML systems for vulnerabilities including prompt injection and model misuse. Ensures testing and AI usage meet security, compliance, privacy, and ethical standards.

Build and operate ETL and data-ingestion pipelines consolidating OT cybersecurity data into Databricks. Develop Python and SQL solutions, data-quality controls, monitoring, and automation; analyze vulnerabilities and cyber risks; and create Power BI dashboards supporting remediation prioritization. Collaborate with cybersecurity, manufacturing, plant, and data engineering teams, document data processes, and improve OT vulnerability-management visibility and reporting.

Designs, implements, assesses, and improves cybersecurity and IT controls across cloud, SaaS, identity, infrastructure, and data environments. The role engineers assurance workflows, automation, evidence collection, and continuous monitoring; conducts control assessments; evaluates technical evidence; identifies cyber and IT risks; validates remediation; and delivers executive-ready reporting. It partners with Cybersecurity, IT, Finance, engineering, and business teams to strengthen governance, accountability, and risk-based decision-making.

Provides technical leadership for enterprise cybersecurity architecture, engineering, modernization, technology integration, risk management, and cloud migration. Leads cybersecurity solution design, feasibility studies, proofs of concept, vendor evaluations, and technology assessments. Advises government and executive stakeholders, develops recommendations aligned with mission objectives, and improves cybersecurity capabilities across on-premises, hybrid-cloud, and multi-cloud environments. Supports continuous monitoring, threat detection, incident response, vulnerability management, and classified and unclassified enterprise operations.

Leads cybersecurity risk management for Army Aviation systems, including RMF lifecycle activities, accreditation packages, continuous monitoring, vulnerability mitigation, audits, testing, and authorization reviews. Coordinates government, contractor, and military stakeholders; maintains eMASS artifacts and compliance with DoD, NIST, CNSSI, and Army regulations. Provides technical guidance across multiple classification levels and supports ATO/ATC readiness.

Design, build, and maintain reusable frameworks, libraries, APIs, and reference implementations for zero trust authentication and authorization. Partner with developers, architects, and infrastructure to enable secure-by-design integrations, implement fine-grained authorization patterns, conduct code reviews, create developer documentation, and research emerging IAM/zero trust technologies.

Design and maintain reusable frameworks, libraries, APIs, and reference implementations to enable zero trust authentication and authorization. Provide developer guides, implement fine-grained authorization (entitlements, row-level security, ABAC), conduct secure code reviews, collaborate with architects and infrastructure teams, and research identity/access management improvements.