Top Security Engineer Jobs

Designs, implements, configures, and sustains enterprise endpoint security solutions across classified and unclassified environments. Responsibilities include Linux-based security product installation, secure architecture design, infrastructure maintenance, policy and database administration, incident investigation, corrective action development, vendor coordination, and security reporting. The role supports global networks for an Intelligence Community customer and requires advanced cybersecurity engineering expertise, DoD architecture knowledge, and a TS/SCI clearance with CI polygraph eligibility.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Architects and operates enterprise outbound security services for a multi-tenant SaaS platform. Responsibilities include egress filtering, proxying, SSRF protection, exfiltration prevention, Kubernetes operations, threat modeling, incident response, compliance, and evaluating AI/ML for anomaly detection and risk scoring. The role also mentors engineers and advances secure connectivity, TLS, and post-quantum readiness.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Design, develop, and scale identity security solutions for AI agents across enterprise applications and systems. Build production-grade APIs and microservices, collaborate with product and security teams, and own features through design, deployment, monitoring, and maintenance. Apply AI techniques to strengthen agent security, while addressing distributed systems, access management, runtime authorization, and non-human identity risks.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Modernize and scale NVIDIA’s PAM and non-human identity services for infrastructure, service accounts, AI agents, and autonomous workflows. The role builds automation, connectors, APIs, policy-as-code, integrations, and internal tooling across hybrid environments. Responsibilities include reducing standing privilege, implementing just-in-time access, credential rotation, session recording, access reviews, and auditability. The engineer also owns service reliability through monitoring, incident response, operational readiness, and continuous improvement while collaborating across security, infrastructure, SRE, developer platforms, and business teams.

Designs and implements Linux-based security for embedded systems, including secure boot and kernel hardening. Conducts security assessments, audits, vulnerability management, patching, and kernel updates. The role requires embedded C/C++ development, secure coding, Linux security expertise, and an active or obtainable U.S. Government Secret clearance. Work is hybrid in West Los Angeles, with less than 10% travel and U.S. citizenship required.

Develop and productionize AI-agent security workflows for GPU software releases. Automate security requirements and release checks across firmware, drivers, kernels, and user-mode applications; maintain scanning pipelines; prioritize findings; and support threat modeling, architecture reviews, vulnerability remediation, and adoption across engineering teams.

Develop and secure GPU firmware powering secure boot, updates, and attestation across NVIDIA products. Design, test, debug, and optimize low-level firmware in resource-constrained environments; improve build, regression, and security testing infrastructure; conduct security reviews; define requirements aligned with industry standards; and collaborate with hardware, software, vendors, customers, and partners. The role requires strong C skills, firmware development experience, cryptography knowledge, and expertise in hardware security.

Build and operate security controls, telemetry, detections, and enforcement for NVIDIA’s large-scale EDA compute, storage, and networking infrastructure across on-premises and multi-cloud environments. Investigate threats, respond to incidents, automate secure configurations and compliance evidence, threat-model infrastructure, and manage security technology lifecycles. The role requires hands-on Linux, networking, programming, infrastructure security, and collaboration with infrastructure and security teams.

Lead incident response, threat hunting, cloud and product security investigations across corporate, cloud, and product environments. Conduct digital forensics, malware analysis, vulnerability investigations, and cloud workload response across AWS, Azure, GCP, Kubernetes, and containers. Develop automated detection and response playbooks, map threats using MITRE ATT&CK, advise engineering and business teams, and strengthen security policies and defenses.

Architect and build agentic identity and security capabilities across cloud, on-premises, and hybrid environments. Develop credential brokering, token exchange, delegation, workload identity, lifecycle management, APIs, CLI tools, and reusable platform integrations. Prototype solutions for ambiguous security problems, guide them into production, evaluate emerging standards and technologies, and collaborate across security, AI, platform, and application teams. Apply offensive-security thinking, device trust, cloud infrastructure, and identity standards to secure AI-agent workflows.

Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops vulnerability management and compliance automation, advises on incident response and forensics, integrates security into enterprise platforms, evaluates security technologies, establishes engineering standards, and supports security tools. Requires cybersecurity experience, cloud expertise, automation capabilities, and familiarity with Palo Alto Networks, infrastructure as code, CI/CD, and security engineering practices.

Designs and improves security controls for enterprise AI, ML, generative AI, LLM, agent, and cloud environments. Responsibilities include AI security architecture, threat modeling, application and API security, IAM, data and model protection, monitoring, incident response, automation, and governance. The role partners with cybersecurity, IT, privacy, legal, compliance, data, application, and business teams to secure AI platforms throughout their lifecycle and address risks such as prompt injection, data leakage, excessive agency, and supply-chain compromise.

Build and operate platform security for Crucible across cloud, factory, edge, and air-gapped environments. Implement identity, access control, secrets, data protection, supply-chain security, and automated controls. Harden Kubernetes, Linux, containers, and cloud infrastructure; conduct threat modeling, design and code reviews, vulnerability remediation, and security architecture. Support accreditation by translating requirements into technical controls and evidence. Collaborate hands-on with software and infrastructure teams while writing production code and securing deployments.

Protect company systems, infrastructure, cloud environments, applications, endpoints, and data by investigating incidents, administering security platforms, assessing vulnerabilities, coordinating remediation, conducting security reviews, and improving controls. The role supports monitoring across endpoint, identity, email, network, cloud, and application environments while documenting findings, runbooks, audit evidence, and risk assessments aligned with ISO 27001, NIST CSF, CIS Controls, and MITRE ATT&CK.

Conduct red team and adversary emulation operations across cloud, corporate, production, applications, infrastructure, and AI systems. Perform advanced web, API, cloud, Kubernetes, CI/CD, identity, and secrets security testing; identify attack paths and realistic business impact; collaborate with security and engineering teams on remediation; conduct purple team exercises; and build automation, tooling, and continuous security checks.

Designs, implements, monitors, and maintains cybersecurity systems protecting networks, applications, and data. Conducts audits, penetration tests, vulnerability assessments, incident investigations, patching, and remediation tracking. Develops security policies, incident response plans, and compliance documentation while supporting federal ATO and POA&M activities. Collaborates with engineering teams, ISSOs, assessors, and stakeholders, and participates in Scrum and Agile processes.

Protect enterprise systems and customer data through vulnerability management, patch deployment, asset hardening, threat monitoring, incident response, endpoint and cloud security engineering, and security platform administration. The role supports red and blue team exercises, automates security processes, aligns controls with NIST frameworks and banking regulations, maintains audit-ready documentation, and collaborates with IT, compliance, and security teams.

Owns security administration, vulnerability management, Linux and AWS infrastructure operations, SOC 2 Type II compliance, monitoring, incident response, backups, reliability, and CI/CD support. The role maintains secure and highly available SaaS systems across EC2, ECS, containers, networking, storage, and application runtimes. Responsibilities include patching, access reviews, audit evidence, remediation tracking, automation with Terraform and Ansible, deployment troubleshooting, recovery testing, documentation, and cross-functional production support.

Manage and mature enterprise vulnerability management and application security programs across on-premises, cloud, infrastructure, databases, and applications. Configure security tools, prioritize and communicate risks, coordinate remediation, develop metrics, enforce security standards, and collaborate with stakeholders, vendors, and consultants. The role requires experience with vulnerability scanning, cloud security controls, asset management, risk reporting, and frameworks such as ISO 27001 and NIST 800-53.

Designs, engineers, deploys, and supports campus and data center networks in an IBM Mainframe environment. Leads routing and switching changes, monitors network performance and security, troubleshoots incidents, plans capacity, introduces automation, and develops scalable, reliable solutions. Provides technical leadership to internal teams, vendors, and contractors; contributes to architecture, documentation, project scoping, process improvements, and major incident resolution.

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.