Top Security Engineer Jobs

Designs, operates, and improves network security controls across Microsoft’s global cloud and datacenter infrastructure. Responsibilities include investigating threats and intrusions, developing detections, maintaining security hardware and software, implementing automation and policy standards, responding to incidents, supporting on-call operations, and leading mitigation and postmortem improvements. The role also provides technical direction for firewalls, IDS/IPS, segmentation, VPN, DDoS protection, and other network defense technologies.

Develops and maintains spacecraft security architecture, translates system security requirements into component controls, assesses cybersecurity compliance, conducts threat analysis, and supports RMF, A&A, and ATO activities. The role collaborates with systems, hardware, software, and program teams; contributes to acquisition and protection documentation; identifies cyber risks; recommends mitigations; and promotes secure-by-design engineering practices.

Integrate and improve DevSecOps security across CI/CD pipelines using SAST, DAST, SCA, container scanning, Terraform, and policy-as-code. Tune vulnerability detection, automate remediation, conduct risk assessments, support system security plans and continuous ATO, and promote Zero Trust practices. Collaborate with development, operations, and security teams, monitor pipelines, assist with incident response, and ensure compliance with federal cybersecurity frameworks and Department of War requirements.

Designs, engineers, monitors, and manages enterprise network security infrastructure, including firewalls, IDS/IPS, VPNs, and network access controls. Analyzes architectures and vulnerabilities, investigates security events, leads incident response, implements security enhancements, and develops policies aligned with NIST, CIS, ISO 27001, and federal requirements. Advises leadership, collaborates with infrastructure and security teams, and mentors junior engineers.

Designs, integrates, assesses, and maintains security controls for classified DoD information systems, including Collateral, SCI, and SAP environments. Leads security engineering and cybersecurity teams, supports RMF and JSIG authorization, performs risk assessments, develops STIGs and test procedures, integrates monitoring and SIEM tools, and mitigates system threats throughout the lifecycle. The role also provides technical leadership, incident response support, operational procedures, and guidance to architects and developers.

Supports enterprise network security engineering by managing firewalls, IDS/IPS, VPN, and NAC technologies; monitoring security events; investigating incidents; mitigating vulnerabilities; implementing defensive enhancements; documenting policies; ensuring regulatory compliance; and collaborating with IT, security operations, and infrastructure teams. The onsite role supports CBP cybersecurity operations and requires U.S. citizenship, three or more years of relevant experience, and a BI Full 6C (T4) background investigation.

Leads cybersecurity engineering and defensive cyberspace operations for DoD mission systems. Oversees 24/7 monitoring, incident response, threat hunting, vulnerability management, forensics, detection engineering, RMF activities, and cyber threat emulation. Guides multidisciplinary teams, develops Elastic dashboards and analytics, manages documentation and compliance, and strengthens cyber defense capabilities across classified and unclassified environments.

Designs, engineers, deploys, and maintains complex network infrastructure, including LAN/WAN systems, firewalls, VPNs, routing, communications equipment, and controlled interfaces. Performs network security audits, monitoring, capacity planning, troubleshooting, documentation, and technical system planning. Develops implementation and test plans, resolves complex issues, supports IT operations, collaborates across infrastructure teams, and mentors junior engineers. The role is onsite in Herndon, Virginia and requires an active TS/SCI with Polygraph clearance.

Leads security accreditation and authorization activities for complex systems across the RMF and ICD 503 lifecycle. Oversees ATO readiness, security architecture reviews, documentation, control assessments, continuous monitoring, POA&M development, risk mitigation, evidence collection, and audit support. Mentors security engineers, coordinates with customers and leadership, and translates technical details into security artifacts and briefings. The role requires active TS/SCI clearance with polygraph and is performed onsite in Washington, DC.

Leads the design and implementation of secure IT infrastructure for aerospace and defense systems. Responsibilities include advanced security monitoring, threat analysis, incident response, digital forensics, risk and vulnerability assessments, security controls, breach documentation, technology evaluation, and mentoring junior engineers. The role requires active Top Secret clearance with SCI eligibility, participation in on-call incident response, and occasional travel.

Secures Snyk’s GCP and AWS cloud platforms through threat modeling, IAM hardening, Kubernetes and container security, Terraform and pipeline fixes, CSPM integration, and secure configuration baselines. Uses AI coding agents and MCP integrations to scale infrastructure remediation while reviewing changes for unsafe defaults, excessive permissions, and agent-related risks. Works consultatively with platform teams to implement and measure security improvements.

Lead the design and implementation of enterprise security solutions, clarify multi-network security requirements, perform threat modeling, vulnerability and penetration testing, triage risks and incidents, advise stakeholders, and drive cloud-native and software security initiatives while working independently.

Architects and manages enterprise security engineering, threat detection, vulnerability assessment, security hardening, incident response, and security policies across cloud, on-premises, and SaaS environments. The role monitors security logs, supports compliance, advises on vendors and implementations, integrates security into the development lifecycle, and participates in on-call and change management activities.

Develops and validates hardware and software security solutions for DoD sensor payloads and military systems. Responsibilities include systems security engineering, Anti-Tamper and cybersecurity architecture, requirements development, risk management, reverse engineering, security testing, cryptographic protection, technology release analysis, exportability assessments, and compliance with US Government security policies. The role also supports Assessment and Authorization, Security Plans, POA&Ms, stakeholder coordination, training, and international defense product initiatives.

Develops and validates hardware and software systems security solutions for DoD sensor payloads and military systems. Responsibilities include Anti-Tamper and cybersecurity architecture, requirements, testing, reverse engineering, RMF compliance, technology release analysis, exportability assessments, cryptographic protection, security documentation, and Security Test and Evaluation. Collaborates with government, program, and international stakeholders while supporting security plans, POA&Ms, training, and strategic technology development. This is a full-time, on-site role in San Antonio, Texas, requiring U.S. citizenship and eligibility for a Secret clearance.

Designs, implements, hardens, and supports enterprise and cloud security capabilities. Responsibilities include identity and access controls, vulnerability remediation, endpoint security, SIEM/SOAR workflows, detection engineering, incident response, audits, AI security controls, documentation, and technical assessments. The role participates in on-call incident support, partners with engineering and cloud teams, mentors junior engineers, and improves security standards, controls, and operational processes.

Provides cybersecurity engineering and information assurance support for Department of Defense operational technology systems supporting fuel automation and energy supply-chain operations. Responsibilities include analyzing security requirements, integrating OT processes with information systems, and supporting OT system planning, design, development, testing, demonstration, and integration. Requires seven years of OT experience, DoD IAM Level II certification, applicable clearance or NACLC, and hands-on experience with multiple industrial control system protocols.

Operates and improves CNAPP and cloud attack-surface platforms by triaging cloud security findings, validating risk, coordinating remediation, administering platform capabilities, tuning policies, and building small enhancements. The role investigates cloud misconfigurations, vulnerabilities, exposed assets, permissions, workload and container risks; produces operational reporting; supports assessments and audits; and maintains runbooks. It partners with cloud, platform, application, DevOps, security, and vendor teams.

Owns and scales production-grade security automation for a 24/7 MDR operation. Responsibilities include developing SOAR playbooks, workflows, integrations, and APIs across SIEM, EDR/XDR, identity, cloud, and ticketing systems. The role automates alert triage, investigation, enrichment, and response while monitoring reliability, KPIs, workflow performance, and SOC outcomes. It also partners with analysts, incident responders, threat hunters, and engineers to improve detection quality, reduce analyst workload, and enhance incident response consistency.

Designs, implements, and optimizes Microsoft Purview information protection, DLP, insider risk, records management, and lifecycle governance controls across Microsoft 365 environments. Partners with mission stakeholders and technical teams to translate policy into enforcement mechanisms. Builds sensitivity labels, sensitive information types, encryption and retention policies, audit and eDiscovery capabilities, and Entra ID governance controls. Supports Zero Trust initiatives, automation, compliance engineering, and mentoring.

The Network Security Engineer II implements DoD cybersecurity policies across CANES systems, designs and troubleshoots vulnerability solutions, hardens Windows and Linux environments, and supports patching, scanning, incident response, log analysis, audits, and validation events. The role also engineers SIEM, ACAS, and Trellix ESS configurations, automates platform updates, maintains cybersecurity documentation, and submits configuration changes through GitLab, GitHub, and Spork.

Enforce DoD cybersecurity policies across CANES environments; harden Windows and Linux systems, applications, network devices, and hardware; manage vulnerabilities, patching, scanning, logging, incident response, and audit readiness; maintain cybersecurity documentation and artifacts; support validation events and installations; and automate configurations using ACAS, Trellix ESS, SIEM platforms, GitLab, GitHub, and Spork/Spork+.

Executes security engineering solutions, writes secure code, analyzes vulnerabilities and incident data, and supports resiliency training and security testing. Uses approved AI capabilities to accelerate analysis and documentation while validating outputs and protecting sensitive data. Works across agile SDLC and CI/CD processes, applying information and network security principles, risk management, and architectural concepts.

Security Engineer Interns will help secure applications, APIs, AWS workloads, cloud systems, and development pipelines. Responsibilities include building security automation, participating in threat modeling and code reviews, improving cloud detections, investigating security findings, validating risks, supporting remediation, and documenting compliance evidence. The six-month, on-site hybrid co-op includes mentorship and ownership of a scoped security project.

Build and operate security platforms, developer tooling, and AI-powered automation protecting Uber’s software supply chain. Develop secure build and dependency controls, application security tooling, automated offensive testing, and adversarial AI testing for agents and LLM applications. Lead threat modeling, architecture, production engineering, technical strategy, cross-team initiatives, and mentoring while improving security coverage, remediation, developer adoption, and risk reduction.