Top Security Engineer Jobs

Design, build, and maintain enterprise cryptographic programs and tooling including KMS, HSMs, PKI, tokenization, and cryptographic inventory. Lead post-quantum migration planning, ensure compliance with PCI/FIPS/NIST, produce implementation and operational documentation, support production environments, and collaborate with stakeholders to operationalize cryptographic controls and metrics.

The role involves managing Mastercard's cryptographic systems, providing secure design advice, ensuring compliance with security frameworks, and enhancing governance in cryptographic practices.

Perform hands-on application and system security assessments: discover and validate vulnerabilities, develop proof-of-concepts and custom tooling, conduct threat modeling and architecture reviews, and communicate clear remediation guidance to clients while contributing to security research.

Lead AppSec engineering efforts to integrate and automate SAST/DAST/SCA and IaC controls across CI/CD, drive shift-left security, lead cross-functional governance, manage tooling/vendor evaluations, support audits/regulatory requirements, and lead a team to prioritize and remediate application security risks.

Lead Application Security initiatives by integrating AppSec controls into CI/CD and SDLC, designing automated, scalable AppSec processes, prioritizing risk-aligned remediation, leading cross-functional governance, managing tooling/vendor evaluations and enhancements, supporting audits/compliance, and leading a team to deliver AppSec outcomes.

Design, implement, and automate application security processes and integrations (SAST/DAST/SCA/IaC). Lead tooling integration and CI/CD controls, tune detection rules, recommend mitigations, support audits and governance, and collaborate with cybersecurity leadership to mature SSDLC and AI-assisted development controls.

Lead and technical hands-on ownership of application security programs: integrate and automate SAST/DAST/SCA and IaC controls into CI/CD, drive shift-left strategies, prioritize risk-aligned remediation, support audits and governance, tune tooling, and lead a team to deliver scalable AppSec processes and reporting.

Lead Application Security initiatives by integrating and automating AppSec controls across CI/CD and developer workflows. Provide technical leadership on SAST/DAST/SCA, IaC, secrets detection, vendor tooling, and shift-left strategies. Drive prioritization, reporting, cross-functional governance, audits, and lead a team to implement scalable, compliant AppSec processes.

As a Security Engineer at Remitly, you'll enhance security controls across infrastructure and SaaS, automate tooling, manage MDM policies, and participate in security assessments and operational improvements.

Deploy, integrate, and operate enterprise threat and vulnerability detection platforms (Tenable VM). Conduct vulnerability assessments, manage remediation, configure scans and reporting, ensure FedRAMP/NIST compliance, implement security controls, collaborate cross-functionally, and mentor junior engineers.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Design, implement, and improve security controls for operational technology (OT) networks in datacenter environments. Identify and remediate risks, create inventories and risk registers, coordinate penetration testing and vulnerability mitigation, embed security into OT systems, develop recovery and response playbooks, and present technical findings to stakeholders while partnering with engineering and third parties to reduce risk.

Secure customer-facing products, APIs, and internal services through threat modeling, architecture and code reviews. Remediate vulnerabilities by coding fixes in Python/Go/JS/TS. Build and manage SAST/DAST/SCA security pipelines in CI/CD. Configure WAFs, API gateways, and bot protection. Provide secure coding guidance, run bug bounty triage, and support compliance (SOC 2, ISO 27001, GDPR).

Design and implement defense-in-depth security architectures and countermeasures for hardware and software systems. Analyze adversary threats, define system requirements and architectures, integrate hardware and software, validate and verify solutions, work with advanced S-SOTA technologies, and lead a team or section. Position is full-time, on-site at a BAE Systems facility.

Lead design and implementation of defense-in-depth security architectures and countermeasures for hardware and software systems. Analyze adversary threats, implement and test protections guided by U.S. government requirements, integrate hardware/software, validate solutions, and lead an engineering team working with advanced S-SOTA technologies.

Design and implement defense-in-depth security architectures and embedded software on complex processors. Analyze adversary threats, propose countermeasures, implement and test embedded software per U.S. Government guidance, work with NIST cryptographic algorithms and S-SOTA technologies, and collaborate onsite with multi-discipline teams to deliver secure solutions.

Design and implement defense-in-depth security architectures and embedded software on complex processors. Implement and test embedded software per U.S. Government guidance, analyze adversary threats, propose countermeasures, work with NIST cryptographic algorithms and S-SOTA technologies, and provide technical leadership to software development teams. Role is full-time, on-site at a BAE Systems facility.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead security baseline configuration program: drive security engineering initiatives from intake through adoption, define standards and governance, automate controls, partner with engineering and architecture teams, influence stakeholders, mentor engineers, and deliver measurable operational security improvements.

Lead security baseline configuration program, drive complex security engineering initiatives from intake to adoption, partner across engineering and governance, define standards and governance, automate controls and processes, influence stakeholders, mentor engineers, and deliver measurable operational security improvements.

Lead security baseline configuration program: drive security engineering initiatives end-to-end, define standards and governance, automate controls, influence stakeholders, mentor engineers, and deliver risk-based, scalable security solutions.

Lead security baseline configuration program: drive complex security engineering initiatives, define standards and governance, automate controls, influence stakeholders, mentor engineers, and deliver risk-balanced, secure-by-default solutions across engineering and infrastructure teams.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Implement, operate, automate, and improve Cargill's global SASE/SSE services. Configure SWG, ZTNA, CASB, DLP, and threat protection; migrate legacy remote-access solutions to cloud-delivered security; troubleshoot, maintain, monitor performance, support disaster recovery, and develop automation and documentation.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.