Top Security Engineer Jobs

Deploys, manages, tunes, and governs enterprise firewalls while designing and maintaining VPN, SASE, and NAC solutions. Investigates security alerts, analyzes network traffic and logs, supports incident response, and recommends remediation. Partners with infrastructure, network, and security teams to improve controls, reduce risk, mature security programs, and document technical standards and procedures.

Design and implement secure boot, certification, attestation, manufacturing, and runtime services for Microsoft's Data Processing Unit. Develop secure enclave architecture, cryptographic flows, and post-quantum cryptography solutions while collaborating with hardware, firmware, and systems engineers. Integrate DPU software into Azure cloud scenarios and improve technical designs, efficiency, and team productivity.

Build and scale internal security systems, analyze security data from logs and endpoints, design detection technologies, assess infrastructure risks, recommend remediation, and execute projects improving intrusion detection, scanning, testing, and response capabilities.

Administer RACF logical security across z/OS systems, managing users, groups, profiles, permissions, and least-privilege controls. Conduct access reviews, audits, compliance checks, log analysis, and incident investigations. Secure mainframe subsystems and integrations, support IAM, SSO, MFA, certificates, TLS/SSL, and encryption practices, and troubleshoot authorization issues. The role also supports security transformations, regulatory audits, automation, and collaboration with enterprise stakeholders.

Supports DoD and Navy Risk Management Framework assessment and authorization activities for enterprise and RDT&E systems. Maintains ATO documentation, security plans, risk assessments, POA&Ms, architecture diagrams, and compliance artifacts. Conducts security control assessments, continuous monitoring, STIG reviews, and risk mitigation using eMASS and related cybersecurity tools. Coordinates with government and contractor stakeholders, tracks action items, provides RMF guidance, and supports cybersecurity training and process improvements.

Designs, implements, and maintains enterprise network security infrastructure, with emphasis on Palo Alto firewalls, GlobalProtect VPN, hybrid Azure/AWS connectivity, routing, switching, and 802.1X certificate-based access control. Secures wired, wireless, camera, and IoT devices using TLS/PKI authentication; troubleshoots firewall, VPN, wireless, and network issues; manages VLAN segmentation and Ruckus switching; and may support Prisma and CASB initiatives.

Lead system security engineering for program protection, supply chain risk management, and counterfeit prevention across acquisition lifecycle. Develop SCRM/PPIP/CPP plans, conduct vulnerability and criticality analyses, support RMF/SSP/assessment efforts, mentor junior engineers, liaise with suppliers and stakeholders, and support authorization and Agile development.

Supports hardware assurance for the GBSD defense program by assessing hardware and firmware threats, vulnerabilities, and risks; reviewing security assessments; identifying noncompliance; recommending mitigations; and helping ensure secure system architecture and implementation. The role also supports vulnerability management, supply chain security, counterfeit prevention, program protection, stakeholder communication, technical working groups, and security requirements across complex defense systems.

Protect the firm from web-based threats by designing, implementing, and maintaining web filtering proxies, secure web gateways, and cloud proxy platforms. Develop security policies for web filtering, SSL inspection, DLP, and threat prevention; translate regulatory requirements into technical controls; automate policy management and integrate security tools with SIEM, SOAR, and identity platforms. Support incident response, secure business use cases, scalability, Zero Trust alignment, and leadership reporting on risks and program maturity.

Leads hands-on cybersecurity engineering across infrastructure, platforms, and applications in federal RMF environments. Designs, implements, assesses, and hardens security controls; supports ATOs, continuous monitoring, SSPs, POA&Ms, and vulnerability remediation. Serves as the technical incident-response lead, coordinating alert triage, forensic investigations, remediation, reporting, and runbook development. Collaborates with system owners, architects, developers, operations, and enterprise security teams while guiding junior security personnel.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Supports Cybersecurity Assurance teams with compliance enforcement, SIEM configuration, security administration, vulnerability management, audits, security checks, automation, documentation, technical writing, and hardware/software reviews. The intern may also assist with Windows and Linux administration, defensive cyber tools, networking, troubleshooting, scripting, compliance auditing, NIST documentation, and STIG-related work.

Lead secure architecture strategy across application, cloud, identity, edge, and AI security domains. Conduct threat modeling for complex services and LLM systems, define AI security practices, build security tooling, harden CI/CD and infrastructure-as-code environments, and manage AWS and WAF security controls. Serve as a technical escalation lead for security incidents, influence enterprise security strategy, represent security in executive architecture discussions, mentor senior engineers, and participate in 24/7 on-call support.

Designs, implements, and maintains security controls across cloud and enterprise environments. Evaluates security tools, implements SOAR capabilities, develops automation for threat hunting and digital forensics, tunes SIEM detections, leads incident response, conducts phishing awareness campaigns, and supports secure implementations. The role requires AWS cloud security, purple teaming, identity protocols, scripting, documentation, collaboration, and participation in a 24/7 on-call rotation.

The Security Sales Engineer will support the enterprise sales team, drive security product adoption, conduct demos, and provide technical support throughout the sales cycle.

Provides operational support for Zscaler security platforms, including policy configuration, tuning, monitoring, alert triage, DLP, CSPM, DSPM, and incident response. Maintains zero trust access controls, investigates user and application experience issues, documents procedures, and automates repetitive workflows. Requires five-plus years in security operations or related technical fields, hands-on ZIA or ZPA administration, cloud and networking knowledge, and U.S. citizenship.

Conduct AI security research, agentic and LLM testing, vulnerability discovery, adversary simulations, and full-chain red team operations. Test WAF, EDR, and SIEM detection efficacy using MITRE ATT&CK, collaborate with blue teams and incident response, develop detection validation frameworks, report risks to executives, and mentor security professionals.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Leads application security engineering across the SDLC by applying AI-assisted threat modeling, security validation, vulnerability management, and automated controls. Integrates security testing into CI/CD pipelines, develops secure-by-default patterns and policy-as-code guardrails, monitors application, cloud, API, data, and AI/ML threats, and guides remediation. Partners with Engineering, Product, QA, DevOps, and AI platform teams to improve security maturity, developer enablement, and proactive defense.

Leads enterprise AI tooling and security engineering, designing scalable cloud platforms and secure AI applications. Responsibilities include protecting models, agents, prompts, data, APIs, and outputs; securing the AI/ML lifecycle; implementing identity, encryption, monitoring, threat detection, adversarial testing, and incident response; and establishing engineering standards. The role mentors engineers, influences architecture and technology strategy, and partners with governance, risk, compliance, and business teams to support responsible AI adoption.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Designs and improves enterprise security across endpoints, SaaS, cloud, identity, AI tooling, corporate networks, and infrastructure. Develops SIEM, SOAR, and EDR detections, alerts, automation, monitoring, and incident response workflows. Leads security investigations and remediation, strengthens access controls and hardening standards, reviews SaaS and vendor security, and establishes governance for AI-related risks including data exposure and prompt injection.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Troubleshoot customer technical support cases, reproduce issues in a lab spanning Windows, Linux, macOS, VMware, Active Directory, AWS, and Azure, and document resolutions clearly. Manage high-volume caseloads, follow up on open cases, meet SLAs, maintain documentation in Confluence, Jira, and Salesforce, and eventually support severity-one and enterprise customers. The role requires strong networking, systems administration, virtualization, cloud, SQL, communication, and organizational skills.