Top Security Engineer Jobs

Lead architecture and delivery of DigitalOcean's audit logging, SIEM integrations, and unified security visibility platform. Define multi-year roadmap, design high-throughput Go-based telemetry pipelines, ensure compliance-grade immutable audit records, build customer-facing visibility/control planes, and drive org-wide logging standards while mentoring engineers and coordinating cross-team integrations for consistent, high-fidelity security telemetry.

Define and drive the multi-year roadmap for audit logging, SIEM integration, and unified security visibility. Architect high-throughput, fault-tolerant Go/gRPC pipelines (Kafka/Flink), build customer-facing security dashboards and integrations, ensure compliance-grade immutable logs, set org-wide logging and observability standards, partner across platform teams, and mentor senior engineers while authoring RFCs.

Lead incident response and threat hunting efforts at CoreWeave, owning cybersecurity incidents end-to-end and developing AI-powered tools to enhance defense against threats.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Design, build, and operate identity and access management solutions across cloud, Kubernetes, and SaaS. Implement role design, reduce privilege sprawl, automate access workflows and reviews, integrate logging/metrics into SIEM, detect high-risk permissions, and drive secure-by-default practices and operationalization.

Design, build, and operate scalable IAM solutions across cloud, Kubernetes, SaaS, and internal systems. Lead end-to-end IAM projects: role design, privilege reduction, access reviews, SIEM observability, and automation to continuously de-risk access and enable secure engineering velocity.

Design, implement, and operate IAM solutions across cloud and internal systems. Build role-based access models, automate least-privilege workflows with Terraform/Teleport, integrate access observability into SIEM, run access reviews, and drive secure-by-default adoption through automation and documentation.

Design, build, and operate scalable IAM solutions across cloud and internal systems. Implement role design, reduce privilege sprawl, automate access workflows and reviews, integrate logging/metrics into SIEM, identify and mitigate risky permissions, and drive secure-by-default patterns and operational runbooks.

Design, build, and operate Identity & Access Management solutions across cloud infrastructure, SaaS, and internal systems. Implement role design, least-privilege models, automated access reviews, SIEM-based observability, and Terraform/IAC automation. Drive end-to-end IAM projects, reduce privilege sprawl, and codify secure-by-default practices and runbooks.

Design, build, and scale IAM solutions across cloud and internal systems. Implement role design and least-privilege models, automate access workflows and reviews, integrate logging/metrics into SIEM, reduce privilege sprawl, identify and mitigate risky permissions, and operationalize IAM projects end-to-end with documentation and runbooks.

As a Senior Software Engineer, you will develop and test security features for a distributed database, focusing on cryptography, identity access, and network security. You'll coordinate with teams to enhance MongoDB's security and mentor engineers.

Lead cloud security as a senior individual contributor: define standards and reference architectures, drive cross-team initiatives, own threat modeling and IAM strategy, design detections and lead incident response/cloud forensics, manage vulnerability workflows, and secure self-managed Kubernetes, IaC, and CI/CD pipelines while mentoring engineers and producing durable, scalable controls.

Lead cloud security direction and standards across AWS, GCP, and self-managed Kubernetes. Own threat modeling, secure architecture, detection engineering, incident response, and vulnerability management. Harden IaC and CI/CD (Terraform), secure Kubernetes control plane and runtimes, and mentor other engineers while driving cross-functional security initiatives and tooling adoption.

Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Lead cloud security strategy and standards across AWS, GCP, and self-managed Kubernetes. Drive secure architecture, threat modeling, detection engineering, incident response, and platform/IaC security. Mentor engineers, own cross-functional initiatives, harden tooling (CrowdStrike, Tenable, SIEM), and codify playbooks and controls for large-scale distributed systems.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Architects, deploys, and configures data security solutions for federal, DoD, and IC clients. Designs Zero Trust architectures, develops custom policies for hybrid cloud data control, and interfaces with agency stakeholders and internal engineering teams. Documents technical architectures and applies DSPM, DLP, data labeling, and tagging technologies. Requires TS/SCI clearance and experience with data security tools.

Principal Security Engineer partnering with Product and Engineering teams to embed security into SaaS and cloud product development. Advises senior stakeholders, coordinates Information Security engagement, supports privacy considerations, develops customer trust materials, mentors junior engineers, and evaluates AI-related product and security risks. The role requires strong security knowledge across data protection, identity, and application security, along with autonomy, influence, and experience translating security expectations into technical requirements.

Lead engineering-driven enterprise data protection and DLP capabilities across cloud, SaaS, endpoint, email, collaboration, and web environments. Build automated policy-as-code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, and operational health checks. Partner with technical, compliance, privacy, legal, and business teams to improve data protection effectiveness. Investigate events, reduce false positives, establish governance standards, and define metrics demonstrating risk reduction and operational maturity.

Lead technical design and implementation of enterprise information security tools and services. Provide expert guidance on identity/access and certificate management, incident response, secure coding, vulnerability assessments, remediation design, CI/CD pipeline security, and mentor engineering teams to maintain compliance and reduce risk.

Designs, implements, and operates enterprise information security tools and services. Monitors security systems, performs vulnerability assessments, supports incident response, develops secure custom enhancements, and collaborates with engineering to remediate security issues while maintaining documentation and standards.

Lead technical design, implementation, and lifecycle management of enterprise identity and authentication platforms. Provide expert consultation, troubleshoot escalated security incidents, develop automation and CI/CD integrations, evaluate new security technologies, and mentor engineers while ensuring secure authentication, authorization, and remediation solutions across systems.

Designs, implements, and supports IAM and PAM solutions across cloud, on-premises, and hybrid environments. Engineers privileged access controls, Entra ID capabilities, authentication integrations, RBAC, Zero Standing Privilege, and Just-In-Time access. Automates identity processes, onboards systems and applications into PAM platforms, troubleshoots identity security issues, investigates risks with Security Operations, and communicates remediation plans to technical and business stakeholders.

Deploys, manages, tunes, and governs enterprise firewalls while designing and maintaining VPN, SASE, and NAC solutions. Investigates security alerts, analyzes network traffic and logs, supports incident response, and recommends remediation. Partners with infrastructure, network, and security teams to improve controls, reduce risk, mature security programs, and document technical standards and procedures.

Design and implement secure boot, certification, attestation, manufacturing, and runtime services for Microsoft's Data Processing Unit. Develop secure enclave architecture, cryptographic flows, and post-quantum cryptography solutions while collaborating with hardware, firmware, and systems engineers. Integrate DPU software into Azure cloud scenarios and improve technical designs, efficiency, and team productivity.