Top Security Engineer Jobs

Leads security architecture, engineering, assessment, and authorization activities for classified information systems and intelligence environments. Responsibilities include RMF execution, ATO package development, security control implementation, vulnerability remediation, continuous monitoring, incident response, risk briefings, policy interpretation, and technical mentoring. The role operates independently in a SCIF and supports classified networks, cloud environments, cross-domain solutions, DevSecOps, and zero-trust initiatives.

Leads security architecture, systems security engineering, RMF execution, authorization packages, vulnerability remediation, continuous monitoring, and risk assessment for classified intelligence systems. The role supports cross-domain solutions, classified cloud environments, DevSecOps, zero trust, audits, incident response, and security control implementation. It requires briefing senior stakeholders, mentoring security personnel, translating technical risks into actionable guidance, and working daily in a SCIF. The position also serves as a technical authority for complex cybersecurity issues.

Design, deploy, maintain, and automate enterprise data security capabilities across on-premises, cloud, and hybrid environments. Support DLP and DSPM rollout, monitoring, compliance playbooks, SOPs, and Python or PowerShell automation. Partner with IT, security architects, compliance, and investigation teams to implement NIST-aligned controls, reduce data-loss risk, strengthen security posture, and improve detection and prevention of data exfiltration.

Designs, implements, configures, and sustains enterprise endpoint security solutions across classified and unclassified environments. Responsibilities include Linux-based security product installation, secure architecture design, infrastructure maintenance, policy and database administration, incident investigation, corrective action development, vendor coordination, and security reporting. The role supports global networks for an Intelligence Community customer and requires advanced cybersecurity engineering expertise, DoD architecture knowledge, and a TS/SCI clearance with CI polygraph eligibility.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Architects and operates enterprise outbound security services for a multi-tenant SaaS platform. Responsibilities include egress filtering, proxying, SSRF protection, exfiltration prevention, Kubernetes operations, threat modeling, incident response, compliance, and evaluating AI/ML for anomaly detection and risk scoring. The role also mentors engineers and advances secure connectivity, TLS, and post-quantum readiness.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Design, develop, and scale identity security solutions for AI agents across enterprise applications and systems. Build production-grade APIs and microservices, collaborate with product and security teams, and own features through design, deployment, monitoring, and maintenance. Apply AI techniques to strengthen agent security, while addressing distributed systems, access management, runtime authorization, and non-human identity risks.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Modernize and scale NVIDIA’s PAM and non-human identity services for infrastructure, service accounts, AI agents, and autonomous workflows. The role builds automation, connectors, APIs, policy-as-code, integrations, and internal tooling across hybrid environments. Responsibilities include reducing standing privilege, implementing just-in-time access, credential rotation, session recording, access reviews, and auditability. The engineer also owns service reliability through monitoring, incident response, operational readiness, and continuous improvement while collaborating across security, infrastructure, SRE, developer platforms, and business teams.

Designs and implements Linux-based security for embedded systems, including secure boot and kernel hardening. Conducts security assessments, audits, vulnerability management, patching, and kernel updates. The role requires embedded C/C++ development, secure coding, Linux security expertise, and an active or obtainable U.S. Government Secret clearance. Work is hybrid in West Los Angeles, with less than 10% travel and U.S. citizenship required.

Develop and productionize AI-agent security workflows for GPU software releases. Automate security requirements and release checks across firmware, drivers, kernels, and user-mode applications; maintain scanning pipelines; prioritize findings; and support threat modeling, architecture reviews, vulnerability remediation, and adoption across engineering teams.

Develop and secure GPU firmware powering secure boot, updates, and attestation across NVIDIA products. Design, test, debug, and optimize low-level firmware in resource-constrained environments; improve build, regression, and security testing infrastructure; conduct security reviews; define requirements aligned with industry standards; and collaborate with hardware, software, vendors, customers, and partners. The role requires strong C skills, firmware development experience, cryptography knowledge, and expertise in hardware security.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Builds secure AI and agentic cybersecurity tooling, transforming research prototypes into production-ready services. Responsibilities include developing backend services, APIs, CLI tools, automation, and integration patterns; defining MVPs for ambiguous security and identity challenges; collaborating across research, product, enterprise security, and platform teams; and applying offensive security and adversarial thinking to address AI-specific risks such as injection, tool misuse, unauthorized access, data exfiltration, and unsafe delegation.

Lead incident response, threat hunting, cloud and product security investigations across corporate, cloud, and product environments. Conduct digital forensics, malware analysis, vulnerability investigations, and cloud workload response across AWS, Azure, GCP, Kubernetes, and containers. Develop automated detection and response playbooks, map threats using MITRE ATT&CK, advise engineering and business teams, and strengthen security policies and defenses.

Architect and build agentic identity and security capabilities across cloud, on-premises, and hybrid environments. Develop credential brokering, token exchange, delegation, workload identity, lifecycle management, APIs, CLI tools, and reusable platform integrations. Prototype solutions for ambiguous security problems, guide them into production, evaluate emerging standards and technologies, and collaborate across security, AI, platform, and application teams. Apply offensive-security thinking, device trust, cloud infrastructure, and identity standards to secure AI-agent workflows.

Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops vulnerability management and compliance automation, advises on incident response and forensics, integrates security into enterprise platforms, evaluates security technologies, establishes engineering standards, and supports security tools. Requires cybersecurity experience, cloud expertise, automation capabilities, and familiarity with Palo Alto Networks, infrastructure as code, CI/CD, and security engineering practices.

Designs and improves security controls for enterprise AI, ML, generative AI, LLM, agent, and cloud environments. Responsibilities include AI security architecture, threat modeling, application and API security, IAM, data and model protection, monitoring, incident response, automation, and governance. The role partners with cybersecurity, IT, privacy, legal, compliance, data, application, and business teams to secure AI platforms throughout their lifecycle and address risks such as prompt injection, data leakage, excessive agency, and supply-chain compromise.

Build and operate platform security for Crucible across cloud, factory, edge, and air-gapped environments. Implement identity, access control, secrets, data protection, supply-chain security, and automated controls. Harden Kubernetes, Linux, containers, and cloud infrastructure; conduct threat modeling, design and code reviews, vulnerability remediation, and security architecture. Support accreditation by translating requirements into technical controls and evidence. Collaborate hands-on with software and infrastructure teams while writing production code and securing deployments.

Protect company systems, infrastructure, cloud environments, applications, endpoints, and data by investigating incidents, administering security platforms, assessing vulnerabilities, coordinating remediation, conducting security reviews, and improving controls. The role supports monitoring across endpoint, identity, email, network, cloud, and application environments while documenting findings, runbooks, audit evidence, and risk assessments aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK.

Conduct red team and adversary emulation operations across cloud, corporate, production, applications, infrastructure, and AI systems. Perform advanced web, API, cloud, Kubernetes, CI/CD, identity, and secrets security testing; identify attack paths and realistic business impact; collaborate with security and engineering teams on remediation; conduct purple team exercises; and build automation, tooling, and continuous security checks.

Designs, implements, monitors, and maintains cybersecurity systems protecting networks, applications, and data. Conducts audits, penetration tests, vulnerability assessments, incident investigations, patching, and remediation tracking. Develops security policies, incident response plans, and compliance documentation while supporting federal ATO and POA&M activities. Collaborates with engineering teams, ISSOs, assessors, and stakeholders, and participates in Scrum and Agile processes.

Supports cybersecurity for digital products and connected medical technologies by integrating security into product development, conducting risk assessments, threat modeling, and vulnerability analysis, coordinating security testing, managing findings, and maintaining security standards. Partners with engineering, quality, regulatory, and IT teams to support secure design, remediation, audits, and regulatory inquiries in a regulated medical device environment.