Top Security Engineer Jobs

Supports federal IT system cybersecurity and privacy compliance under the NIST RMF. Responsibilities include RMF/ATO documentation, SSPP maintenance, continuous monitoring, vulnerability assessment and remediation tracking, POA&M management, incident response, audits, privacy assessments, change-impact reviews, SOP development, briefings, and advising system owners. The role also supports assessments, contingency exercises, SDLC activities, and cybersecurity documentation within GRC repositories.

Provides senior-level information security engineering and advisory support across IT and business teams. Administers and monitors security controls, endpoint, identity, cloud, email, SIEM, and vulnerability management systems. Investigates security violations and attempted compromises, develops remediation recommendations, maintains security policies and procedures, supports IT projects, educates stakeholders, and advises management on security risks and business impacts. Participates in complex security projects and provides technical guidance and mentoring.

Manages identity and access lifecycles, security technologies, vulnerability remediation, access reviews, security monitoring, risk assessments, incident investigations, audits, policies, business continuity, and cybersecurity education. Partners with infrastructure, application, and business teams to protect organizational, resident, and clinical information and strengthen security controls.

Design, build, and operate secure, resilient distributed systems for secrets and key management across Cloudflare's global network. Re-architect and strengthen internal PKI and machine/workload identity, support and run services (including on-call), and consult with teams to ensure secure system design and usage.

Design, implement, and maintain cloud security solutions; own CNAPP enablement and vendor relationships (Azure, AWS, Palo Alto); serve as RCSA control owner (TEC083) and automate attestations; build Cloud Security dashboards in Microsoft Power BI; collaborate with architecture and operational partners to onboard, operationalize, and support cloud security capabilities.

Serve as a Cybersecurity Systems Engineer for a U.S. Navy weapon system: apply MBSE and RMF to identify threats, assess and mitigate security risk, develop SSE deliverables, coordinate with government stakeholders, support integration/verification/testing, and present program status to senior leadership.

Lead cross-functional initiatives to mature cloud and enterprise detection infrastructure, including telemetry pipelines, detection-as-code, logging, and scalable coverage. Design and tune detections for cloud, identity, endpoint, SaaS, CI/CD, and service-to-service threats. Conduct threat hunting, support incident response and on-call operations, apply threat intelligence and adversary emulation, mentor SOC engineers, and improve detection capabilities based on incident lessons learned.

Designs, operates, and secures on-premises and cloud network architectures across Cisco Meraki, Cloudflare, AWS, and GCP. Responsibilities include network segmentation, firewalls, VPNs, zero-trust access, security monitoring, incident response, and protection of CUI, EAR, and ITAR-controlled data. The role partners with IT, security, and engineering teams to meet compliance and business requirements.

Manage and enhance the firm’s information security systems, threat lifecycle, incident response, risk management, and security technology. Review and investigate security events, coordinate threat mitigation, lead third-party assessments, design scalable security environments, provide security consulting, and support users. The role requires expertise in SIEM, network and endpoint security, cloud technologies, incident response, Linux, and enterprise security controls.

Manage vulnerability scanning, patching, threat detection, incident response, identity and access management, data loss prevention, vendor security due diligence, and complex tier 3 security support. The role also leads security investigations, remediation, root cause analysis, policy development, control testing, and implementation of security solutions while maintaining documentation and communicating risks to leadership.

Lead engineering, implementation, support, and lifecycle integration of on-premises and cloud perimeter security controls. Partner with cybersecurity stakeholders and business units to align capabilities with security policies, coordinate deployments, minimize disruption, and provide tier-four and after-hours support. Work within Agile sprints, track progress in Jira, create technical documentation, and improve operational capabilities and knowledge bases.

Engineer cybersecurity architecture, implementation, hardening, monitoring, and compliance for DoD and military systems. Guide clients through RMF, IATO, IATT, and ATO processes; conduct vulnerability scanning, remediation, security control assessments, and STIG compliance activities. Coordinate with ISSMs, enforce DoD cybersecurity policies, and maintain acceptable security postures. Support hybrid AI/ML networks and develop solutions using security engineering practices, with potential application of DevSecOps, cloud, Agile, and Linux expertise.

Own and modernize PKI and certificate lifecycle systems for automotive products and EV charging. Design authentication and authorization using X.509, mTLS, OAuth2, and OIDC; build shared infrastructure with Kubernetes, service mesh, and workload identity; support secure boot and key management; operate production services through GitOps and observability; document systems and mentor engineers.

Leads the design, deployment, integration, and maintenance of enterprise AI gateway security across multi-cloud and federal environments. Implements guardrails, policy enforcement, secure APIs, machine authentication, governance controls, and policy-as-code automation. Builds highly available architectures, operationalizes cloud security findings, manages remediation workflows, improves security processes, and mentors technical staff while partnering across engineering, compliance, DevSecOps, and security operations teams.

Designs, installs, tests, and maintains secure operating systems, networks, databases, and cybersecurity architectures. Troubleshoots firewalls, network access, malware, and unauthorized activity; performs risk, penetration, vulnerability, and forensic analysis. Converts requirements into constrained systems solutions, establishes configuration baselines, integrates architecture into existing infrastructure, supports testing, and provides technical recommendations. The role is hands-on and onsite in Virginia, requiring coordination with multiple stakeholders and an active TS/SCI clearance with polygraph.

Designs, deploys, and maintains enterprise NGAV and EDR/XDR protections across hundreds of thousands of endpoints, servers, containers, and multi-cloud workloads. Partners with application owners to manage behavioral baselines, allowlisting, exceptions, and phased deployments. Supports SOC and IT investigations through host forensics, memory analysis, threat hunting, and automated remediation. Measures control efficacy, agent health, telemetry integrity, and fleet coverage using attack simulation and Purple Team exercises.

Designs, implements, and manages enterprise IT security solutions. Partners with architects, developers, and leadership on security plans; assesses vulnerabilities; strengthens systems, networks, and applications; manages security tools and software; and reduces risks across complex projects. The role focuses on user access, network protection, and maintaining a resilient enterprise security environment.

Build and advance application and product security across the engineering organization. Responsibilities include establishing secure defaults, CI guardrails, security requirements, threat modeling, risk assessments, penetration testing, vulnerability remediation, secure coding education, roadmap ownership, and hands-on code review. The role partners closely with product, engineering, DevOps, and services teams to secure applications, microservices, and AI features while enabling efficient development.

Lead embedded systems security engineering for DoD sensor payloads and mission systems. Responsibilities include developing security architectures and requirements, ensuring JSIG and DAAPM compliance, supporting security testing and authorization activities, maintaining security plans and POA&Ms, assessing exportability, and applying reverse engineering, anti-tamper, cyber resiliency, and hardware/software assurance techniques. The role requires collaboration across program and business development teams, strategic cybersecurity planning, and full lifecycle systems engineering from architecture through verification and validation.

Lead a team building automated systems and tools to discover, explain, and remediate vulnerabilities in native Windows code. Develop scalable detection methods, enable automated security testing for developers, collaborate with product teams, and drive team clarity and execution.

Administer Tenable Security Center, Nessus Scanners, and Nessus Manager on Linux platforms. Conduct vulnerability scans, analyze and prioritize findings, coordinate remediation, produce reports, monitor alerts, respond to incidents, maintain secure platform performance, install security products, and train users. The role supports enterprise cybersecurity environments and requires extensive cyber experience, current TS/SCI clearance, DoD certification, and the ability to pass a government polygraph.

Leads the design, implementation, maintenance, assessment, and authorization of secure IT systems. Provides information systems security expertise, performs NIST RMF and DoD compliance assessments, manages vulnerabilities, supports incident response and accreditation records, and evaluates security work products. The role requires application security testing, security control assessment tools, DoD STIG and NIST knowledge, active Top Secret clearance, and participation in on-call incident response.

Support cyber risk and compliance activities including PCI, SOC, SOX, and regulatory readiness. Maintain internal cyber content, coordinate penetration testing and remediation, support change governance and audit responses, develop scripts/reports for regulatory reporting, and partner with technical and business stakeholders to strengthen security posture and maintain compliance.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Design and implement secure-by-default cloud infrastructure across AWS: build secrets management and IAM solutions, ship production backend changes, model threats and prioritize risk-based controls, guide partners on security and privacy, and participate in incident response and mitigation.