Top Security Engineer Jobs

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Designs and improves enterprise security across endpoints, SaaS, cloud, identity, AI tooling, corporate networks, and infrastructure. Develops SIEM, SOAR, and EDR detections, alerts, automation, monitoring, and incident response workflows. Leads security investigations and remediation, strengthens access controls and hardening standards, reviews SaaS and vendor security, and establishes governance for AI-related risks including data exposure and prompt injection.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Troubleshoot customer technical support cases, reproduce issues in a lab spanning Windows, Linux, macOS, VMware, Active Directory, AWS, and Azure, and document resolutions clearly. Manage high-volume caseloads, follow up on open cases, meet SLAs, maintain documentation in Confluence, Jira, and Salesforce, and eventually support severity-one and enterprise customers. The role requires strong networking, systems administration, virtualization, cloud, SQL, communication, and organizational skills.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Sets application security direction and standards across engineering teams. Builds scalable security tooling, automation, and observability; leads threat modeling, risk assessments, code reviews, and multi-team remediation. Develops strategies for AI-powered systems and agentic development risks, API security, and software supply chain security. Partners with engineering and security teams, prioritizes investments, communicates risk to leadership, and mentors AppSec engineers.

Protect Talos assets by identifying security gaps, automating testing and remediation, analyzing vulnerabilities, tracking remediation, conducting threat modeling and secure code reviews, and collaborating with engineers and architects to secure multi-cloud hybrid infrastructures.

Designs and assesses security for complex systems, cloud infrastructure, applications, media workflows, APIs, vendor tools, and third-party integrations. The engineer leads high-risk AppSec and CloudSec assessments, develops threat models and reusable security controls, establishes hardening baselines, advises secure content-production workflows, tests tooling, researches AI security implications, and mentors engineers. The role is primarily office-based Monday through Thursday in Glendale, California, with remote work on Fridays.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.

Leads enterprise incident response as senior incident commander for high-severity events across hybrid and multi-cloud environments. Directs triage, containment, eradication, recovery, evidence handling, executive communications, and post-incident reviews. Owns incident response readiness, playbooks, exercises, after-action governance, and measurable improvement programs. Advances AWS detection engineering, monitoring, logging, telemetry, automation, identity security, and threat-informed mitigation while coordinating infrastructure, cloud, endpoint, identity, and application teams.

Execute security engineering across application, cloud, and infrastructure environments by applying patches, upgrading dependencies, hardening configurations, implementing security controls, and managing WAF and network-isolation changes. Review AI-generated SAST and SCA pull requests, coordinate regression testing, support patching cycles and golden-image refreshes, track remediation through verification, and collaborate with application and platform teams. Follow established runbooks, standards, risk prioritization, and CISA guidance while developing broader security expertise.

Own and harden on-premises and hybrid infrastructure across network, server, cloud, identity, and security platforms. Lead patching, vulnerability remediation, zero-day response, OS hardening, PKI and certificate management, segmentation, firewall and wireless security, privileged access, logging, and Azure security posture improvements. Support HIPAA, penetration test, and risk assessment remediation while maintaining 24/7 reliability, documenting procedures, and coordinating with Security, DevOps, project managers, and data center teams.

Designs and integrates cybersecurity controls across network, cloud, virtualization, and enclave environments. Leads RMF and Assessment & Authorization activities, maintains accreditation artifacts, conducts vulnerability and compliance assessments, coordinates remediation, reviews architectures for security risks, supports continuous monitoring and change management, and responds to cybersecurity threats and intrusions.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability and risk assessments, scan-result remediation, threat detection, event correlation, infrastructure security, and communicating security issues to technical teams and senior management. The role requires Secret clearance, Security+ certification, vulnerability-scanning experience, and knowledge of NIST and DoN Risk Management Framework policies.

Develops and implements cybersecurity and infrastructure controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, security event correlation, advanced threat detection, and applying NIST, RMF, and Department of the Navy policies. The engineer analyzes network, system, and application vulnerabilities, recommends security strategies, and communicates technical risks to diverse stakeholders.

Develops and implements cybersecurity controls for mission-critical unmanned systems supporting Navy and Marine Corps operations. Responsibilities include vulnerability scanning and remediation, risk assessments, threat detection, event correlation, security analysis, and infrastructure protection. The role requires applying NIST and RMF policies, communicating security risks to technical and senior audiences, and securing network, system, application, and communications architectures in contested environments.

Own corporate IT and security across employee devices, identity, SaaS, networks, endpoint protection, vulnerability management, incident response, access reviews, and SOC 2 compliance. Build onboarding and offboarding workflows, maintain inventories and controls, coordinate audits and remediation, lead vendor security reviews, respond to customer questionnaires, and partner with Engineering on application and cloud security. Automate operational processes and support safe adoption of AI tools while serving as the primary employee IT and security contact.

Designs and operates identity security controls across enterprise platforms, including conditional access, privileged access, workload identities, and phishing-resistant authentication. Analyzes security logs, supports FIDO2 rollouts, manages identity risk, and participates in attack path management. The role also researches AI-assisted security tooling, automates operational workflows, documents standards and runbooks, and collaborates with Security, Systems, DevOps, Network, and Development teams.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Design, implement, and automate scalable cloud security solutions and baselines across AWS/Azure/GCP. Build guardrails, IAM, detection/monitoring, configuration management, and data protection using IaC (Terraform) and everything-as-code. Collaborate with Product Engineering and security teams, produce technical documentation, and operationalize security tooling.

As a Solutions Architect, engage with customers to architect cloud solutions, optimize workloads, and provide technical leadership while collaborating with engineering teams.

Design and harden on-device security for Specs including permissions, sandboxing, secure IPC, and trusted execution. Build privacy and integrity controls for on-device AI, improve fuzzing and automated security testing, conduct threat modeling, vulnerability assessment, and secure code review across OS, firmware, services, and device-cloud surfaces.

As a Senior Security Engineer at Klaviyo, you'll build secure detection systems, automate response operations, and enhance security observability, driving incident response and threat detection efforts.

The Security Engineer role involves identifying vulnerabilities, automating tasks in penetration testing, and creating security reports for various audiences.