Top Security Engineer Jobs

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.

Develop and implement cybersecurity and infrastructure controls for classified USAF systems. Conduct risk and vulnerability assessments, analyze compliance and scan results, create RMF artifacts for ATO packages, and implement mitigations. Support network security devices and protocols, improve threat detection and event correlation, and connect classified systems to cloud environments. The role also requires collaboration with security authorities, program managers, technical experts, and senior leadership.

Designs, architects, deploys, and supports enterprise campus and data center networks in an IBM Mainframe environment. Responsibilities include routing and switching, network security and performance monitoring, capacity planning, automation, troubleshooting, incident escalation, documentation, lifecycle support, and compliance with corporate security policies. Provides technical leadership to engineering teams, vendors, and contractors; mentors staff; collaborates across IT disciplines; and recommends scalable solutions aligned with architectural and business objectives.

Own third-party risk management and business continuity programs while building production data pipelines, integrations, policy-as-code controls, continuous monitoring, and agentic AI workflows. The role requires defining technical direction, integrating imperfect data sources, automating evidence collection, and partnering across Security, Procurement, Resilience, and Engineering teams to improve governance and operational resilience.

The Cyber Security Engineer will support an intelligence client by conducting penetration testing, network security analysis, system exploitation, and security architecture assessments. Responsibilities include analyzing vulnerabilities, developing risk mitigation plans, reviewing enterprise and hypervisor configurations, applying adversarial tactics, and communicating security risks. The role may also involve security policy development, reverse engineering, cloud and container security, and source control. A TS/SCI clearance with full-scope polygraph is required.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Conduct vulnerability research across operating systems, cloud platforms, and virtualization technologies through design and code review, fuzzing, variant analysis, and reverse engineering. Develop platform mitigations, security tooling, detection capabilities, and systemic protections. Partner with engineering teams to improve secure development practices, lead complex security initiatives, track emerging attack techniques, and mentor peers.

Develop and lead cybersecurity strategy, risk management, governance, incident response, security architecture, awareness training, vendor risk management, and security monitoring. Ensure compliance with information security standards, coordinate incident investigations, strengthen organizational security controls, and report cybersecurity posture and incidents to executive leadership.

Develop and maintain security baselines using CIS and STIG benchmarks, apply NIST guidance, assess system risks and controls, monitor security environments, identify vulnerabilities, and translate technical requirements into FISMA, NIST, and client-specific controls. The role supports cloud, enterprise, networking, operating system, and workflow platforms while helping protect SEC systems and infrastructure.

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.

Build AI-driven systems for blockchain security, including smart contract analysis, vulnerability discovery, exploit analysis, threat detection, and security investigations. Develop AI agents that reason over codebases, protocol interactions, transactions, and wallet activity. Collaborate with security researchers and infrastructure teams on monitoring and incident response while researching blockchain attack techniques, Web3 infrastructure, and AI security trends.

Establishes and matures the company’s information security governance, risk, and compliance program. Responsibilities include conducting risk assessments, maintaining policies and control libraries, supporting ITGC and regulatory audits, managing vulnerability and security awareness programs, coordinating with MDR/MSSP providers, maintaining incident response playbooks, and tracking remediation. The role aligns cybersecurity practices with NIST, ISO, FDA, GDPR, and medical-device requirements while preparing evidence and reporting risk posture to executives, auditors, insurers, and private equity stakeholders.

Designs and maintains security controls for blockchain, digital asset, application, cloud, and infrastructure environments. Responsibilities include threat modeling, cryptographic key management, application and API security, AWS and Kubernetes hardening, vulnerability management, monitoring, incident response, penetration testing, and security governance. The engineer collaborates with Cybersecurity, Engineering, DevOps, and Infrastructure teams to secure distributed systems and support regulatory requirements.

Secures multiple applications and enterprise IT infrastructure by developing incident response and recovery plans, conducting risk assessments, creating security policies, monitoring system health and performance, and supporting intrusion detection. The role requires Linux, Python, SIEM expertise, secure software development practices, cross-team collaboration, technical mentorship, and process optimization. An active Top Secret clearance and willingness to obtain a polygraph are mandatory.

Supports Department of War Strategic Systems Programs by integrating cybersecurity requirements into system acquisition, development, testing, and sustainment. Develops cybersecurity architectures, system security plans, lifecycle plans, acquisition documentation, and objective quality evidence. Collaborates with program offices, technical leads, contractors, and stakeholders; evaluates deliverables, supports technical presentations, and advises on cyber risk and resiliency. The role is onsite at NSWC Crane and requires travel of 40% or more.

Provides security engineering and compliance expertise for FedRAMP Cloud Service Provider authorization packages. Reviews cloud architectures, security controls, system security plans, assessment reports, vulnerability scans, and penetration tests against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads architecture interviews, identifies technical and documentation gaps, advises government program leaders and CISOs on risk posture, supports continuous monitoring, and guides vendors through remediation and authorization activities.

Performs Linux-focused cybersecurity engineering for classified systems, including RHEL hardening, DISA STIG compliance, SCAP scanning, vulnerability remediation, RMF and ATO support, security documentation, continuous monitoring, and architecture risk assessments. Collaborates with engineering and DevOps teams and develops Bash or Python automation. The role requires onsite work in Sterling, Virginia, an active Top Secret clearance with SCI eligibility, and up to 25% domestic travel.

Own company-wide data security and access controls in Palantir Foundry. Design groups, roles, row- and column-level policies, masking, redaction, identity provisioning, and audit processes. Partner with IT, Security, and infrastructure teams on Okta, SSO, SCIM, network egress, credentials, and AI-agent access. Administer Foundry, maintain parity with source systems, advise teams on sensitive-data use, and lead cross-functional data governance standards.

Leads systems security engineering for complex mission systems across the full life cycle. Defines security requirements, architectures, threat analyses, verification strategies, assurance cases, and risk assessments across hardware, software, networks, physical elements, and human interactions. Coordinates with multidisciplinary teams, evaluates supplier and system deliverables, supports authorization and acceptance decisions, mentors engineers, and communicates security tradeoffs and residual risk to technical and executive stakeholders.

Build and maintain security controls for live cloud systems, including cloud infrastructure, container platforms, access management, and infrastructure-as-code. Embed secure development practices into product and platform engineering, advise on secure system designs, support compliance audits, and write and deploy security tools and infrastructure. The role also contributes to security strategy, hiring, and potentially future team leadership, with a focus on application security and AI-related threats.

Lead development of system security requirements and resilient architectures, design and implement cybersecurity strategy and controls, configure and monitor security infrastructure, integrate vulnerability remediation and incident response into systems engineering, document compliance with NIST/DoD/NSA standards, apply cryptography and key management practices, and communicate findings through technical reports and training for multidisciplinary teams.

Designs cybersecurity architecture and Security-by-Design controls for implantable and connected medical devices. Responsibilities include embedded and IoT security, threat modeling, risk analysis, cryptography, secure boot, device identity, provisioning, firmware updates, BLE and network security, SBOM management, and regulatory compliance. The role integrates cybersecurity requirements across hardware, software, manufacturing, verification, and risk-management processes while supporting medical-device submissions and evidence development.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Designs, operates, and improves network security controls across Microsoft’s global cloud and datacenter infrastructure. Responsibilities include investigating threats and intrusions, developing detections, maintaining security hardware and software, implementing automation and policy standards, responding to incidents, supporting on-call operations, and leading mitigation and postmortem improvements. The role also provides technical direction for firewalls, IDS/IPS, segmentation, VPN, DDoS protection, and other network defense technologies.