Top Security Engineer Jobs

Senior hands-on security engineer responsible for sovereign and regulated cloud security architecture, readiness assessments, boundary validation, tooling, identity, WAF, DSPM, logging, vulnerability management, and control automation. The role supports FedRAMP and related authorization activities, audits, penetration testing, evidence reviews, and external assessor engagement. It also provides technical direction, mentoring, secure SDLC guidance, and communication with business units, vendors, government customers, and senior leadership without direct people management.

Provides technical leadership for ServiceNow’s platform access-control and authorization frameworks. Sets architecture strategy, develops secure and scalable software, leads design and code reviews, defines comprehensive testing, resolves complex production issues, and mentors engineers. The role focuses on RBAC, ABAC, policy engines, reliability, performance, observability, CI/CD, AI-agent access security, and cross-team technical influence.

Own and improve CoreWeave’s vulnerability management program across applications, cloud infrastructure, and hardware. Build production security automation, triage and remediation workflows, prioritization models, metrics, and risk reporting. Investigate hardware-adjacent vulnerabilities, support zero-day response, conduct root-cause analysis, and collaborate with engineering and operational stakeholders. Contribute to architecture decisions, technical standards, code reviews, documentation, and teammate onboarding.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Lead offensive security engagements across corporate, cloud, application, and mobile environments, including red, purple, and orange team exercises. Develop covert engagement infrastructure, custom implants, payloads, and exploits; model threats and killchains; assess detection coverage; produce remediation-focused reports; support incident response; and advise security teams on vulnerabilities, threat intelligence, and defensive improvements.

Analyze, debug, and secure diverse codebases; implement features; refactor legacy software; conduct audits and penetration tests; optimize backend performance; and document findings to improve AI training datasets.

Implements and monitors information security programs, controls, and risk management processes. Engineers security solutions, audits identity and access management, conducts vulnerability scans, monitors intrusion prevention and security events, supports investigations, performs phishing simulations, analyzes threats, documents test results, and collaborates with IT and business teams to resolve security issues.

Own security end to end as AIUC’s first security hire, securing its product, agent evaluation platform, infrastructure, corporate systems, vendors, data, and customer environments. Build sandboxing, credential isolation, least-privilege access, detection, logging, incident response, and automated security controls. Investigate emerging agent attacks, turn research into production defenses, support customer security reviews, and contribute findings to AIUC-1 standards and its CISO consortium.

Leads Apollo’s detection and response strategy, detection architecture, security observability, incident response, and AI-assisted security workflows. Builds MITRE ATT&CK-aligned detections, response automations, investigation tools, and detection-as-code pipelines using Panther and Python. Leads high-severity incidents across cloud, SaaS, and corporate systems; improves IR readiness, metrics, playbooks, and forensic processes. Partners with Engineering, Infrastructure, IT, Legal, Fraud, and leadership while mentoring engineers and driving multi-quarter security initiatives.

Sets the technical vision for enterprise security across cloud, identity, application, data, endpoint, and network environments. Leads security architecture, threat modeling, DevSecOps, incident response, compliance evidence, security roadmap planning, and AI security initiatives. Advises executives and cross-functional stakeholders, handles high-severity escalations, mentors security engineers, and strengthens healthcare security controls for AWS, Azure, FHIR, Medplum, Snowflake, HITRUST, HIPAA, and NIST requirements.

Lead cloud security architecture and threat hunting across enterprise cloud environments. Partner with engineering, product, and risk teams to embed secure-by-design controls, conduct threat models and risk assessments, review infrastructure-as-code, develop preventive and detective controls, and operationalize detections with cybersecurity teams. Analyze large datasets, improve alerting and incident-response playbooks, investigate cloud threats, and provide expertise on adversary tradecraft and emerging risks.

Lead Security Engineer responsible for designing and building secure Python-based services, conducting threat modeling, vulnerability assessments, secure code development/reviews, and integrating AI-assisted security practices across cloud, container, and CI/CD environments while working with stakeholders to ensure auditability and resiliency.

Join Notion's Detection and Response team as a Security Operations Engineer, focusing on investigating security events and mentoring junior engineers, ensuring operational excellence in security practices.

Operate and improve cybersecurity monitoring, incident response, vulnerability management, email and endpoint security, cloud and identity controls, and security assurance. Investigate alerts, manage incidents, hardening, access controls, vendor risk, policies, audits, and remediation. Partner with IT teams, an MDR provider, and specialist vendors while delivering security awareness, phishing exercises, runbooks, and tabletop exercises. After-hours incident response and local travel may be required.

Evaluates and tests construction equipment, scaffolding systems, hoists, and physical security products against UL requirements. Develops test plans, specifications, schedules, and reports; coordinates laboratory technicians; communicates technical findings and project status to clients; resolves compliance issues; supports standards development and continuous improvement. The role includes occasional client-site travel and hybrid office work.

Own product security for an AI-driven supply-chain platform, including authentication, authorization, tenant isolation, APIs, threat modeling, secure development practices, vulnerability management, software supply-chain security, and AI agent safeguards. Build the product security function while partnering with engineering, infrastructure, product, customers, and executives. Lead security reviews, penetration testing, vulnerability disclosure, and controls for customer-hosted deployments.

Designs and implements security controls for AI solutions, including threat modeling, adversarial testing, secure development, identity and access management, data protection, monitoring, and incident response. The role builds AI-enabled cybersecurity automation, validates AI deployments, supports engineering teams with secure implementation patterns, and communicates security risks and recommendations to technical and business stakeholders.

Secure an integrated supply chain e-commerce platform across application, infrastructure, authentication, compliance, and AI agent layers. Responsibilities include threat modeling, vulnerability assessments, code reviews, PCI-DSS and GDPR controls, OAuth/SAML authentication, tenant isolation, secrets management, encryption, WAF and rate limiting, incident response, security training, and AI prompt-injection prevention. The intern will work remotely for three months under technical leadership and collaborate with development and DevOps teams.

Leads application and AI security engineering across architecture, software delivery, cloud platforms, APIs, and agentic AI systems. Builds reusable security controls, automated testing, risk-based quality gates, and secure engineering patterns. Conducts code reviews, threat modeling, authorized security testing, vulnerability triage, incident support, and remediation validation. Partners with distributed engineering teams, mentors technical leaders, and communicates security risks to executives, customers, and assurance stakeholders.

Hands-on engineer responsible for securing internally developed applications, APIs, AI-enabled solutions, and integrations. The role performs vulnerability assessments, source-code reviews, architecture assessments, penetration testing, and remediation validation. Responsibilities include strengthening authentication, authorization, API protections, CI/CD security testing, cloud application architectures, logging, and monitoring. The engineer also evaluates LLM applications and AI agents for prompt injection, data disclosure, insecure tool execution, and excessive permissions, while communicating risks and corrective actions to stakeholders.

Design and maintain enterprise AI security and risk frameworks aligned with global regulations and standards. Translate requirements into policy-as-code, security baselines, technical controls, and continuous monitoring logic. Assess AI-specific threats such as prompt injection, data leakage, model extraction, shadow AI, and supply-chain vulnerabilities. Partner with AI/ML, infrastructure, security, Legal, Privacy, and assurance teams to embed governance into architectures, CI/CD workflows, and runtime environments. Own AI policy lifecycle, privacy safeguards, model adoption decisions, and cross-border data requirements.

Own Compass’s AI product security roadmap and secure generative and agentic AI systems across models, RAG pipelines, tool invocation, and user-facing outputs. Responsibilities include threat modeling, production guardrails, prompt-injection and jailbreak defenses, retrieval security, AI supply-chain assessment, autonomous-agent controls, detection engineering, secure development tooling, and executive-level risk communication. The role requires production security engineering experience with AI/ML systems, cloud and application security, adversarial ML, red teaming, and strong Python or Go skills.

Owns Compass’s AI product security strategy and roadmap. Responsibilities include threat modeling AI features, securing RAG and vector-store retrieval, building LLM guardrails, mitigating prompt injection and jailbreaks, constraining autonomous agents, assessing AI supply-chain risks, developing abuse detection and telemetry, and automating secure-by-default libraries, CI/CD checks, and evaluation harnesses. The role also advises engineering teams and executives on AI security risks and remediation.

Own the security roadmap for Compass’s generative and agentic AI products. Threat model AI features, RAG pipelines, multi-agent workflows, and automated decisioning; build protections against prompt injection, jailbreaks, unsafe tool use, and data exfiltration; secure retrieval layers and AI supply chains; develop monitoring, detections, CI/CD checks, libraries, and evaluation harnesses; and advise engineering teams and executives on AI risk.

Own Compass’s AI product security strategy and roadmap. Threat model AI features, RAG pipelines, agentic workflows, and automated decisioning; build guardrails against prompt injection, jailbreaks, unsafe outputs, and data exfiltration; secure retrieval and AI supply chains; design autonomy controls; implement monitoring and detections; and automate secure development patterns through libraries, CI/CD checks, and evaluation harnesses. Advise engineering teams and executives on AI security risks and architecture.