Top Security Engineer Jobs

The Security Sales Engineer will support the enterprise sales team, drive security product adoption, conduct demos, and provide technical support throughout the sales cycle.

Provides operational support for Zscaler security platforms, including policy configuration, tuning, monitoring, alert triage, DLP, CSPM, DSPM, and incident response. Maintains zero trust access controls, investigates user and application experience issues, documents procedures, and automates repetitive workflows. Requires five-plus years in security operations or related technical fields, hands-on ZIA or ZPA administration, cloud and networking knowledge, and U.S. citizenship.

Conduct AI security research, agentic and LLM testing, vulnerability discovery, adversary simulations, and full-chain red team operations. Test WAF, EDR, and SIEM detection efficacy using MITRE ATT&CK, collaborate with blue teams and incident response, develop detection validation frameworks, report risks to executives, and mentor security professionals.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Leads application security engineering across the SDLC by applying AI-assisted threat modeling, security validation, vulnerability management, and automated controls. Integrates security testing into CI/CD pipelines, develops secure-by-default patterns and policy-as-code guardrails, monitors application, cloud, API, data, and AI/ML threats, and guides remediation. Partners with Engineering, Product, QA, DevOps, and AI platform teams to improve security maturity, developer enablement, and proactive defense.

Leads enterprise AI tooling and security engineering, designing scalable cloud platforms and secure AI applications. Responsibilities include protecting models, agents, prompts, data, APIs, and outputs; securing the AI/ML lifecycle; implementing identity, encryption, monitoring, threat detection, adversarial testing, and incident response; and establishing engineering standards. The role mentors engineers, influences architecture and technology strategy, and partners with governance, risk, compliance, and business teams to support responsible AI adoption.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Designs and improves enterprise security across endpoints, SaaS, cloud, identity, AI tooling, corporate networks, and infrastructure. Develops SIEM, SOAR, and EDR detections, alerts, automation, monitoring, and incident response workflows. Leads security investigations and remediation, strengthens access controls and hardening standards, reviews SaaS and vendor security, and establishes governance for AI-related risks including data exposure and prompt injection.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Troubleshoot customer technical support cases, reproduce issues in a lab spanning Windows, Linux, macOS, VMware, Active Directory, AWS, and Azure, and document resolutions clearly. Manage high-volume caseloads, follow up on open cases, meet SLAs, maintain documentation in Confluence, Jira, and Salesforce, and eventually support severity-one and enterprise customers. The role requires strong networking, systems administration, virtualization, cloud, SQL, communication, and organizational skills.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Sets application security direction and standards across engineering teams. Builds scalable security tooling, automation, and observability; leads threat modeling, risk assessments, code reviews, and multi-team remediation. Develops strategies for AI-powered systems and agentic development risks, API security, and software supply chain security. Partners with engineering and security teams, prioritizes investments, communicates risk to leadership, and mentors AppSec engineers.

Protect Talos assets by identifying security gaps, automating testing and remediation, analyzing vulnerabilities, tracking remediation, conducting threat modeling and secure code reviews, and collaborating with engineers and architects to secure multi-cloud hybrid infrastructures.

Designs and assesses security for complex systems, cloud infrastructure, applications, media workflows, APIs, vendor tools, and third-party integrations. The engineer leads high-risk AppSec and CloudSec assessments, develops threat models and reusable security controls, establishes hardening baselines, advises secure content-production workflows, tests tooling, researches AI security implications, and mentors engineers. The role is primarily office-based Monday through Thursday in Glendale, California, with remote work on Fridays.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.

Leads enterprise incident response as senior incident commander for high-severity events across hybrid and multi-cloud environments. Directs triage, containment, eradication, recovery, evidence handling, executive communications, and post-incident reviews. Owns incident response readiness, playbooks, exercises, after-action governance, and measurable improvement programs. Advances AWS detection engineering, monitoring, logging, telemetry, automation, identity security, and threat-informed mitigation while coordinating infrastructure, cloud, endpoint, identity, and application teams.

Execute security engineering across application, cloud, and infrastructure environments by applying patches, upgrading dependencies, hardening configurations, implementing security controls, and managing WAF and network-isolation changes. Review AI-generated SAST and SCA pull requests, coordinate regression testing, support patching cycles and golden-image refreshes, track remediation through verification, and collaborate with application and platform teams. Follow established runbooks, standards, risk prioritization, and CISA guidance while developing broader security expertise.

Own and harden on-premises and hybrid infrastructure across network, server, cloud, identity, and security platforms. Lead patching, vulnerability remediation, zero-day response, OS hardening, PKI and certificate management, segmentation, firewall and wireless security, privileged access, logging, and Azure security posture improvements. Support HIPAA, penetration test, and risk assessment remediation while maintaining 24/7 reliability, documenting procedures, and coordinating with Security, DevOps, project managers, and data center teams.

Designs and integrates cybersecurity controls across network, cloud, virtualization, and enclave environments. Leads RMF and Assessment & Authorization activities, maintains accreditation artifacts, conducts vulnerability and compliance assessments, coordinates remediation, reviews architectures for security risks, supports continuous monitoring and change management, and responds to cybersecurity threats and intrusions.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability and risk assessments, scan-result remediation, threat detection, event correlation, infrastructure security, and communicating security issues to technical teams and senior management. The role requires Secret clearance, Security+ certification, vulnerability-scanning experience, and knowledge of NIST and DoN Risk Management Framework policies.

Develops and implements cybersecurity and infrastructure controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, security event correlation, advanced threat detection, and applying NIST, RMF, and Department of the Navy policies. The engineer analyzes network, system, and application vulnerabilities, recommends security strategies, and communicates technical risks to diverse stakeholders.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, threat detection, event correlation, security analysis, and infrastructure protection. The role requires applying NIST and RMF policies, communicating security risks to technical and senior audiences, and securing network, system, application, and communications architectures in contested environments.

Own corporate IT and security across employee devices, identity, SaaS, networks, endpoint protection, vulnerability management, incident response, access reviews, and SOC 2 compliance. Build onboarding and offboarding workflows, maintain inventories and controls, coordinate audits and remediation, lead vendor security reviews, respond to customer questionnaires, and partner with Engineering on application and cloud security. Automate operational processes and support safe adoption of AI tools while serving as the primary employee IT and security contact.