Top Security Engineer Jobs

Administer and troubleshoot enterprise network security platforms, including firewalls, URL filtering, IDS/IPS, 802.1X NAC, VPN, and TLS inspection. Handle security tickets, policy changes, certificate renewals, documentation, and scoped segmentation projects. Support formal change management and collaborate across security, IT, product, and operations teams while meeting SLA and project milestones.

Designs and secures classified cloud and on-premises systems, leading ISSE, A&A/ATO documentation, vulnerability management, and continuous monitoring. Develops ETL pipelines, Neo4j graph database solutions, secure software components, and data models supporting analytics and AI/ML. Performs systems engineering assessments, risk analysis, and technical evaluations while collaborating with engineering, security, development, and mission stakeholders. Supports Agile delivery, CI/CD, cloud-native architectures, and comprehensive technical and compliance documentation.

Lead design and operation of platform vulnerability management and real-time threat detection across bare-metal, containers, and cloud. Integrate security into CI/CD and IaC, run triage/prioritization, automate posture assessment, conduct platform security assessments, and collaborate with engineering to drive remediation and hardening.

Design, implement, and maintain network security architecture for hyperscale HPC and cloud environments. Lead detection and response for network threats, integrate controls across on-prem and cloud, support segmentation and Zero Trust, evaluate security tech, mentor junior engineers, and document policies and standards.

Designs, operates, and continuously improves the bank’s information security program. Responsibilities include security engineering, threat and vulnerability management, incident response, IAM, cloud security, AI governance, security tools administration, data protection, reporting, security awareness, vendor risk, and business continuity support.

Designs, implements, administers, and troubleshoots security technologies protecting IT and OT environments. Responsibilities include SIEM, EDR, DLP, network security, vulnerability management, detection engineering, automation, incident response, reporting, secure configuration, documentation, compliance support, and collaboration with technical teams and vendors. Requires hands-on cybersecurity experience, scripting skills, systems and networking knowledge, and experience securing OT, ICS, or SCADA environments.

Designs, deploys, and advises on Microsoft 365 security solutions across Defender XDR, Entra ID, Intune, and Purview. Implements identity, access, data protection, and endpoint security controls; supports hybrid infrastructure; automates configuration with PowerShell and Microsoft Graph; conducts assessments; and develops security roadmaps. Leads client workshops, explains security frameworks and trade-offs, produces technical and executive deliverables, manages project tasks, and contributes reusable security templates and scripts.

Engineer and administer enterprise cybersecurity controls with an emphasis on firewalls, network segmentation, VPNs, and secure network architecture. Investigate security alerts, incidents, vulnerabilities, and complex technical issues; coordinate remediation; maintain endpoint and identity security technologies; support logging, detection engineering, incident response, audits, and compliance initiatives. The role also contributes to architecture reviews, documentation, on-call response, security technology assessments, and mentoring junior staff.

Provides information systems security engineering, systems engineering, and test and evaluation support for DoD/DoW mission and tactical network systems. Responsibilities include cybersecurity testing, vulnerability assessments, penetration testing, red team activities, systems administration, test planning, findings analysis, remediation verification, RMF support, system hardening, and acquisition lifecycle support. The role also prepares technical documentation and briefings and travels to government, vendor, fleet, and operational sites as required.

Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.

Designs and implements security controls for backend services and multi-cloud infrastructure. Conducts security reviews, remediates vulnerabilities and misconfigurations, secures CI/CD pipelines, and embeds secure design practices across engineering teams. The role also supports responsible AI and LLM adoption, mentors junior engineers, and champions security and privacy.

Provides technical leadership for enterprise security architecture, platforms, and controls across endpoints, infrastructure, applications, and cloud environments. Responsibilities include developing security strategy and roadmaps; implementing endpoint, EDR, zero-trust, application, and infrastructure protections; building scalable security services and automated workflows; and partnering across engineering teams to improve security posture, resilience, and operational excellence.

Leads the design and implementation of security solutions for AI systems across data ingestion, model training, deployment, and runtime. Develops controls against prompt injection, data poisoning, model inversion, data leakage, and unauthorized access. Secures cloud infrastructure, APIs, identities, integrations, and third-party AI platforms; implements monitoring, automated security testing, and incident response. Partners with architecture, engineering, and governance teams to ensure resilient, compliant AI security practices.

Designs, builds, and improves security detections across cloud, identity, endpoint, network, and application environments. The role develops Detection-as-Code capabilities, maps threats to MITRE ATT&CK, tunes alerts, reduces false positives, supports incident investigations, and automates triage. It also tracks detection performance, contributes to on-call operations, partners with engineering and infrastructure teams, and applies threat intelligence, data analysis, and machine learning to strengthen detection fidelity.

Assist with designing, implementing, testing, hardening, and managing firewall and network security solutions in classified government environments. Responsibilities include secure enclave architecture, firewall configuration, security requirements, system interconnections, compliance with DoD and Intelligence Community guidance, security assessments, monitoring, incident response, vulnerability management, and automation. The role supports Fortinet technologies, routing, segmentation, VPNs, SIEM/NAC integration, and operational documentation.

Leads high-severity cybersecurity incident response, including investigation, containment, eradication, recovery, digital forensics, threat hunting, and detection improvement. Serves as a technical lead during major incidents, develops response playbooks, supports cyber exercises, conducts post-incident reviews, mentors responders, and coordinates with business, legal, privacy, vendors, and law enforcement stakeholders.

Designs, implements, monitors, and improves the organization’s cybersecurity program. Leads Microsoft security technologies, endpoint protection, identity security, cloud security, SIEM administration, threat detection, vulnerability management, incident response, security architecture, automation, compliance support, audits, and risk reduction. Partners with IT, legal, compliance, leadership, and vendors to support HIPAA and privacy obligations while strengthening security controls across systems, applications, acquisitions, and third-party integrations.

Own Rox’s end-to-end security program across application, cloud, infrastructure, product, and enterprise deployments. Responsibilities include security tooling, secure design and code reviews, tenant isolation, IAM, secrets, network security, supply-chain security, vulnerability management, incident response, security architecture, customer security reviews, compliance support, and on-call incident response. The role requires strong production software engineering, cloud security expertise, enterprise communication, and Staff-level ownership.

Executes cybersecurity engineering and remediation projects across hybrid Microsoft, AWS, and Azure environments. Configures and hardens firewalls, vulnerability scanning, endpoint protection, patch management, IAM, cloud security, and security monitoring technologies. Performs vulnerability assessment, remediation, validation, and governance; develops documentation, dashboards, reports, and technical procedures. Requires independent ownership of implementations in a federal enterprise environment governed by NIST, RMF, and IRS Publication 1075.

Leads end-to-end incident response, including investigation, containment, recovery, and postmortems. Builds security telemetry pipelines and high-fidelity detections across cloud, Kubernetes, identity, endpoint, SaaS, and application environments. Develops threat intelligence, threat hunting, automated response tooling, incident plans, and tabletop exercises. Partners with infrastructure, research, product, legal, and leadership teams to address sophisticated threats targeting AI labs, including model theft, supply chain compromise, and AI-specific abuse.

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Designs, assesses, and strengthens cybersecurity solutions for mission-critical government systems. Leads RMF activities, security requirements analysis, network architecture reviews, security control implementation, vulnerability mitigation, and accreditation documentation. Advises government stakeholders, validates SSPs and SRTMs, supports Assessment and Authorization activities, and ensures compliance with NIST, DISA, and DoD security requirements.

Performs systems security vulnerability and risk assessments for the Sentinel defense program, develops mitigation plans, evaluates security designs, and communicates findings to stakeholders. Supports program initiatives, milestone requirements, systems security engineering activities, and program protection practices. Requires active DoD Secret clearance, U.S. citizenship, STEM education, substantial systems engineering experience, and eligibility for Top Secret and SAP access. Travel is approximately 10%.

Designs, implements, and improves enterprise information security across infrastructure, systems, and data. Manages Azure and Entra ID security policies, vulnerability and patch management, security toolsets, and statewide security standards. Participates in Blue Team activities, resolves escalated technical issues, collaborates with operations and external partners, researches emerging threats, and develops security roadmaps, recommendations, reports, and improvements.

Embeds security across the software development lifecycle by leading threat modeling, security design reviews, application security assessments, red-team exercises, and secure architecture guidance. The role drives adoption of SAST, DAST, and SCA tooling, strengthens CI/CD and cloud security, supports fintech regulatory compliance, and advises engineering and product leadership on prioritized security risks.