Top Security Engineer Jobs

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Supports cybersecurity for medical, research, laboratory, and operational technologies. Responsibilities include secure network onboarding, security configuration, vulnerability remediation, implementation of compensating controls, lifecycle security improvements, technical documentation, and collaboration with clinical teams, IT, manufacturers, and vendors. The role also provides basic security consultation, troubleshooting, and coaching while balancing cybersecurity requirements with patient safety, device functionality, and clinical workflows.

Designs, implements, and operates enterprise identity and access security across IAM, IGA, and PAM platforms. Responsibilities include managing SSO, MFA, lifecycle workflows, RBAC/ABAC, privileged access, service accounts, secrets, and Zero Trust controls. The role monitors identity activity, supports incident response, audits, compliance remediation, troubleshooting, architecture documentation, product evaluations, and cross-functional security initiatives. It also provides guidance and occasional mentorship to junior engineers and operations teams.

Architects, deploys, configures, and supports enterprise data security solutions for federal clients. Implements and tunes DLP policies, integrates security tools across hybrid cloud environments, develops scalable security architectures, troubleshoots complex issues, documents technical designs, and applies Zero Trust and federal data security practices. The role interfaces with agency stakeholders and internal engineering teams and requires a Secret clearance.

Architects, deploys, configures, and supports enterprise data security solutions for federal clients. Designs Zero Trust architectures, implements DLP and data protection policies across hybrid cloud environments, integrates security technologies, troubleshoots complex issues, documents technical architectures, and collaborates with agency and engineering stakeholders. Requires enterprise data security experience, Top Secret clearance, and knowledge spanning cybersecurity, networking, identity, cloud, operating systems, and infrastructure.

Secure classified DoD modeling and simulation environments through vulnerability management, automated patching, compliance-as-code, security architecture, and governance. The engineer will configure SIEM, EDR, IDS/IPS, firewalls, IAM, and VPN solutions; conduct vulnerability scans and STIG audits; support POA&M remediation and authorization packages; develop security automation and telemetry tools; and embed with Agile software teams to integrate security controls into delivery pipelines.

Build and maintain security across the MeshMesh platform, including threat modeling, security reviews, vulnerability scanning, monitoring, remediation, system hardening, compliance support, and continuous control validation. The role partners with engineering teams to secure cloud-based distributed systems, application and infrastructure environments, and AI-assisted development workflows, including agent loops and tool use.

Designs, implements, operates, and improves enterprise network security across on-premises, cloud, and hybrid environments. Manages Palo Alto and Cisco firewalls, segmentation, VPNs, routing, AWS and Azure connectivity, IDS/IPS, telemetry, and production changes. Resolves complex incidents, supports compliance and audits, coordinates vulnerability remediation, maintains documentation, participates in on-call support, and mentors technical staff.

Implements and operates AWS security controls for a federal filing platform. Performs vulnerability scanning, security testing, remediation tracking, ATO evidence collection, continuous monitoring, and threat detection. Partners with DevSecOps to automate pipeline security and supports incident response and forensics. The role also uses AI-assisted security tooling for detection and triage while maintaining compliance with NIST 800-53 and FedRAMP controls.

Design, build, and operate secure cloud services and AI agents for application security, including vulnerability triage, sandboxed testing, and remediation support. Implement infrastructure as code, isolation, least-privilege access, secrets management, and defenses against untrusted input and prompt injection. Evaluate AI accuracy, cost, and latency while collaborating with security teams, communicating risk, reviewing code, and mentoring engineers.

Leads cybersecurity strategy and provides technical leadership for security software development. Designs and operates secure services, APIs, automation platforms, PKI and secrets-management systems across cloud environments. Integrates security controls into CI/CD pipelines, performs code reviews and threat modeling, supports telemetry and incident response, and mentors engineers. Collaborates with application, infrastructure, audit, and compliance teams to embed secure practices and define security roadmaps.

Build and operate enterprise and product security capabilities across cloud infrastructure, Kubernetes, applications, detection, vulnerability management, automation, and AI governance. Partner with engineering and infrastructure teams to embed security practices, improve GCP and networking security, respond to anomalous activity, remediate vulnerabilities, and establish technical and policy frameworks for safe AI adoption.

Security Operations Engineer responsible for deep-dive security investigations, threat hunting, incident response, log and telemetry analysis, and security monitoring in a 24/7 SOC. The role requires expertise in cloud security architectures, MITRE ATT&CK, SIEM, SOAR, EDR, and forensic investigations, along with strong documentation and communication skills. Responsibilities include identifying anomalies, analyzing incidents, prioritizing multiple security events, and collaborating independently or with the broader security team.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.

Lead and execute red team exercises and penetration tests across applications, infrastructure, and physical environments. Mentor teammates, develop automation tools, partner with detection/response teams, prioritize and drive remediation, and conduct adversarial simulations to improve detection and incident readiness.

Leads systems security engineering and supply chain risk management for defense missile systems. Develops Program Protection Plans, integrates anti-tamper, secure boot, cryptographic, and hardware/software/firmware assurance controls, assesses critical program information vulnerabilities, and analyzes supply chain threats. Advises engineering and program leadership, aligns protection measures with RMF and Department of War cybersecurity policies, leads cross-functional working groups, and translates technical risks into mission impacts and mitigation plans.

Lead the enterprise AI security and Agentic AI program by designing secure AI agents for cybersecurity operations, integrating Microsoft AI and security platforms, and establishing governance, risk controls, auditability, and responsible AI practices. Build reusable frameworks and guardrails addressing prompt injection, permissions, data leakage, and unauthorized actions. Partner with Security, Risk, Compliance, Legal, and Technology teams to enable compliant enterprise AI adoption.

Engineers and operates corporate IT security across identity, devices, endpoints, SaaS, internal networks, and workforce AI tools. Responsibilities include access hardening, device trust, lifecycle automation, SaaS security posture, detection engineering, incident command, audit evidence, and AI guardrails. The role is primarily hands-on and partners with Security, IT, Legal, Compliance, and business leaders to investigate incidents, remediate risks, and improve corporate security controls.

Designs and deploys security controls for AI applications, agents, copilots, model platforms, and enterprise AI infrastructure. Builds APIs, services, policy checks, automation, and integrations governing identity, authorization, secrets, data access, tool use, logging, and egress. Performs AI threat modeling, security reviews, adversarial testing, and remediation for prompt injection and unsafe tool execution. Integrates security telemetry and response workflows while mentoring engineers and influencing enterprise security practices.

Designs, implements, and optimizes Microsoft 365 security, compliance, identity, and governance solutions for clients. Configures Microsoft Purview, Entra ID, Defender, DLP, information protection, access controls, and AI-agent security capabilities. Assesses environments, identifies gaps, develops remediation plans, automates administration with PowerShell, and delivers documentation, workshops, testing, and knowledge transfer. The role requires strong consulting and customer-facing skills while supporting technical project delivery across enterprise environments.

Provides cybersecurity engineering and architecture leadership for classified information systems. Develops technical standards, secure solutions, baselines, and risk evaluations; advises security managers and mission teams; evaluates new technologies; supports cybersecurity projects, governance, compliance, and enterprise initiatives. The role is fully onsite in Tucson, Arizona, requires an active Secret clearance, and includes up to 10% business travel.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Develops and maintains security configuration baselines using CIS Benchmarks, STIGs, vendor guidance, and NIST standards. Assesses system configurations, researches vulnerabilities, identifies compliance gaps, and recommends remediation. Translates technical requirements into FISMA and customer-specific controls, documents security standards, and collaborates with technical stakeholders to implement secure configurations. The role requires at least five years of IT operations experience and the ability to obtain and maintain a Public Trust determination.

Provide cloud security engineering for the GDSS program in AWS Cloud One. Implement STIG remediation, integrate security controls into CI/CD, identify and remediate vulnerabilities, monitor Nessus and cloud security tooling (Security Hub, GuardDuty, Config, Trend Micro), manage IAM/network security and encryption, and maintain security architecture documentation and compliance.

Leads security architecture, engineering, assessment, and authorization activities for classified information systems and intelligence environments. Responsibilities include RMF execution, ATO package development, security control implementation, vulnerability remediation, continuous monitoring, incident response, risk briefings, policy interpretation, and technical mentoring. The role operates independently in a SCIF and supports classified networks, cloud environments, cross-domain solutions, DevSecOps, and zero-trust initiatives.