Top Security Engineer Jobs

Own and secure the cloud infrastructure for a multi-tenant SaaS product: design secure cloud architecture, deploy infrastructure security (access, certificates, logging), develop isolation/sandboxing, review IaC changes, audit environments for vulnerabilities, and create secure cloud policies and procedures.

Build and improve platform security for software operating across cloud, factory, edge, and air-gapped environments. Responsibilities include implementing identity, access control, secrets management, data protection, and system boundaries; hardening Kubernetes, Linux, cloud, and edge deployments; securing software supply chains; automating CI/CD security controls; conducting threat modeling and vulnerability remediation; and supporting accreditation through technical controls, evidence, and system designs.

Reviews and assesses RMF authorization documentation for classified information systems, including security plans, control matrices, monitoring plans, and incident response artifacts. Evaluates technical compliance with information assurance directives, performs security design and threat assessments, documents POA&Ms and risk reports, conducts site assessments, and supports incident response activities. The role requires experience with NIST controls, Windows or Linux, virtualization or cloud environments, Splunk, and DoD security compliance.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Tests and certifies fire alarm, access control, and smoke detection systems to UL standards. Manages certification projects, defines test programs, coordinates laboratory activities, reviews product compliance, develops reports and procedures, resolves engineering issues, and communicates technical findings and project status to clients. The role also provides technical guidance, supports standards and test-method development, and may travel to client sites or industry events.

Provides technical execution of the County’s Information Security Program by administering, integrating, troubleshooting, and optimizing security platforms. Implements and validates controls across infrastructure, applications, cloud technologies, and operating systems. Develops security documentation, supports risk assessments and vulnerability analysis, performs advanced troubleshooting, integrates and automates security tools, and advises departments on security engineering projects and corrective actions.

Owns Federal release-gate security evidence, Continuous Monitoring automation, FedRAMP boundary coordination, vulnerability remediation, and compliance with STIG, SCAP, FIPS, NIST, and other Federal requirements. Manages hardened container registries, supports defense and intelligence projects, triages customer-reported vulnerabilities, and collaborates with product, engineering, compliance, and operations teams to implement security controls throughout the deployment lifecycle.

Lead security across the hardware lifecycle including secure silicon, firmware, supply chain, and cloud deployment. Design secure firmware/hardware interfaces, implement hardware root-of-trust and Confidential Computing features, apply cryptanalysis, and mitigate side-channel attacks while ensuring secure development practices.

Supports the development, integration, documentation, and security engineering of Naval surface weapons, combat, and fire control systems. Responsibilities include designing systems security measures, integrating hardware and software protection, developing Program Protection Plans, managing requirements, coordinating system changes, and supporting system stakeholders. The role requires engineering or technical experience and an active Secret U.S. Government clearance, with AEGIS Combat System experience and knowledge of relevant DoD instructions preferred.

Investigate infrastructure security incidents, conduct host-based and network forensics, triage real-time security events, and participate in 24x7 on-call coverage. The role develops threat detections, anomaly detection models, and adversary-focused use cases; tunes security controls and sensors; and automates incident response using Python, PowerShell, or Bash. Responsibilities also include leading security projects, supporting cloud security architecture, and applying AI to improve cybersecurity operations.

Serve as the senior security advisor embedded with product and engineering teams to design security into features, influence senior stakeholders, mentor junior staff, coordinate with security and privacy (DPO) teams, and produce customer trust materials and questionnaire knowledge bases while staying current on AI-related risks.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.

Architect, build, and support highly available enterprise edge infrastructure and security controls. The role includes threat hunting, mitigation, monitoring, DNS and load balancing, infrastructure automation, security standards, observability, technical documentation, technology evaluations, and cross-functional delivery. The engineer participates in an on-call rotation and helps shape the organization’s edge security strategy and roadmap.

Own and improve corporate security across identity and access management, endpoint protection, SaaS applications, Zero Trust, automation, detection, and incident response. Implement Entra ID controls, SSO, SCIM, MFA, RBAC, JML workflows, Intune policies, EDR, and security baselines. Automate security processes with Python or JavaScript, investigate alerts, remediate incidents, and partner with IT, Security, Engineering, and business teams in a fast-moving startup environment.

Set technical strategy and architecture across security engineering domains, build AI security foundations, and lead cross-cutting initiatives from concept through production. The role requires hands-on development and operation of production security systems, deep IAM or cryptography expertise, broad security engineering knowledge, cross-organizational influence, ambiguity management, collaboration, and mentorship.

The provided description contains no specific responsibilities or qualifications for this Security Engineer II role. It primarily presents Lennar’s benefits, equal employment statement, and company information.

Perform cloud security assessments and TEMs, design/review cloud systems (AWS/Azure/Oracle/GCP), analyze scans with Rapid7/Nessus/Qualys, manage POA&Ms, support RMF A&A activities, use compliance tools (Xacta 360, Risk Vision, RSA Archer), prepare security packages/reports, and provide project management and metrics for compliance.

Provide onsite information systems security engineering support at Fort Belvoir. Manage eMASS authorization packages, ATO documentation, POA&Ms, audit readiness, and DoD RMF compliance. Implement STIGs and security controls, perform system hardening, patching, and vulnerability remediation across Windows and Linux environments, and brief government and program stakeholders. Administer and secure systems using ACAS, ESS/HBSS, SCAP, virtualization platforms, and networking technologies.

Design and operationalize an enterprise API security program: implement runtime protections, embed security into CI/CD, provide secure API design guidance, build telemetry-driven analytics, define governance, support audit readiness, and partner with engineering to reduce API risk at scale.

Leads implementation, administration, and improvement of enterprise security technologies, primarily Microsoft 365 Defender, Purview, Intune, and Entra ID. Secures on-premises applications through configuration, patching, upgrades, access controls, and hardening. Leads security projects, develops standards, mentors staff, supports incident response, and conducts risk and compliance activities related to FERPA, GLBA, and PCI-DSS.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Designs, implements, operates, and maintains enterprise identity and access security across IAM, IGA, and PAM platforms. Supports SSO, MFA, identity governance, privileged access, monitoring, incident response, audits, compliance, troubleshooting, and root cause analysis. Collaborates with architecture, infrastructure, application, and DevOps teams to implement Zero Trust principles, documents standards and procedures, evaluates new technologies, and provides guidance to security and operations teams.

Implements and improves security controls across cloud, endpoint, network, identity, and application environments. Manages security technologies, investigates alerts and incidents, develops detections and response workflows, performs vulnerability management, and supports penetration testing. The role secures Azure and AWS environments, assists with IAM and CI/CD security, analyzes logs and forensic evidence, and supports compliance audits involving HIPAA, HITRUST, SOC 2, and PCI-DSS. It partners with technical and GRC teams to remediate risks and maintain security documentation.

Consult with clients to design, implement, configure, test, troubleshoot, and support physical security systems, including video surveillance, access control, sensors, and integrations. Develop network architectures, lead design workshops, execute test plans, document solutions, and serve as a technical customer contact. Support project delivery, sales engagements, upgrades, and complex hardware/software problem resolution while managing timelines, expenses, and customer expectations. Travel and occasional off-hours work are required.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.