Top Security Engineer Jobs

Build and maintain security systems for an AI platform handling sensitive customer interactions. Responsibilities include application, infrastructure, and cloud security; access controls and authorization; audit logging; vulnerability scanning; dependency auditing; secrets management; automated detection; and security tooling. The role involves writing production code, collaborating with backend and infrastructure engineers, and addressing emerging AI-agent risks such as prompt injection and data leakage.

Lead AI application security across Fortinet by conducting threat modeling, code reviews, penetration testing, AI red teaming, and architectural assessments. Develop security guardrails, filters, policy controls, and CI/CD security checks for LLMs, chatbots, MCP implementations, and autonomous agents. Research emerging AI attack vectors, define mitigation strategies, coach teams, and ensure AI systems meet security, safety, privacy, and compliance standards.

Own security assessment and risk management for AI, LLM, Claude, MCP, and agentic systems. Define security controls, access governance, monitoring frameworks, standards, and training. Partner with AI Enablement and engineering teams on threat modeling, architecture reviews, and secure deployment. Build AI security monitoring tools, investigate risks such as prompt injection and data leakage, and track emerging attack vectors, defenses, and regulations.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Build and operate security detection and response capabilities across infrastructure. Responsibilities include developing SIEM alerts and integrations, administering detection tools, participating in security on-call rotations, automating triage workflows, supporting incident investigation and containment, and improving response playbooks. The role also focuses on detecting AI-related risks, increasing visibility into AI tool usage, reviewing telemetry needs for new systems, and collaborating with engineering and governance teams.

Own product and application security for an AI assistant handling sensitive data and autonomous actions across email, calendars, documents, Slack, and CRM systems. Responsibilities include threat modeling agent behavior, securing data pipelines and cloud infrastructure, hardening OAuth integrations, implementing encryption and access controls, establishing a secure development lifecycle, and leading incident response. The role partners closely with engineering and requires in-person work five days per week in San Francisco.

Lead Serval’s application security program across secure SDLC, threat modeling, vulnerability management, security architecture, and secure coding. Build and mentor product security teams, implement automated security tooling and CI/CD gates, manage vulnerability remediation and coordinated disclosure, and partner with Engineering, Product, and Infrastructure on authentication, authorization, tenant isolation, data protection, secrets management, and agentic AI security challenges.

Secure agentic AI systems, autonomous workflows, orchestration frameworks, MCP integrations, APIs, and AI-driven tool execution environments. Responsibilities include designing runtime controls, monitoring agent behavior, validating actions, tracing executions, assessing risks, and implementing guardrails against prompt injection, unsafe tool execution, memory poisoning, and unauthorized actions. The role collaborates with security, AI, platform, DevOps, and enterprise architecture teams while applying OWASP, MITRE ATLAS, and NIST AI RMF practices.

Secure enterprise AI, ML, GenAI, and agentic AI systems through risk assessments, threat modeling, runtime controls, security testing, monitoring, and development guardrails. Evaluate risks such as prompt injection, data leakage, unsafe tool execution, retrieval poisoning, and model abuse. Collaborate with engineering, cloud, application security, architecture, and business teams on secure deployments, AI governance, compliance, remediation, and secure use of AI development tools.

Designs and validates secure system architectures for mission-critical enterprise IT environments. Responsibilities include integrating RMF and security controls, developing A&A and ATO documentation, conducting risk assessments and threat modeling, applying STIGs and hardened configurations, testing controls, designing SIEM monitoring, supporting incident response, and advising leadership. The role requires collaboration across engineering, development, administration, and cybersecurity teams, with all work performed onsite in Springfield, Virginia.

Provides vulnerability management and continuous monitoring support for regulated cloud environments. Responsibilities include investigating vulnerabilities, managing scans and false positives, creating POA&Ms, communicating alerts and remediation strategies, configuring scanning tools, automating repeatable tasks, documenting findings, coordinating escalations, and supporting compliance frameworks such as FedRAMP. The role also liaises with clients, SRE teams, auditors, and internal security operations personnel.

Build and own the company’s product, cloud, and internal security foundations. Responsibilities include developing security controls, securing AI agents and enterprise integrations, managing vulnerabilities and incident response, leading customer security reviews, maintaining trust documentation, supporting SOC 2, ISO 27001, and ISO 42001 readiness, and partnering cross-functionally on security priorities, governance, and compliance.

Lead secure deployment and operation of AI and ML systems, including AI gateways, policy orchestration, security automation, and infrastructure-as-code controls. Establish an AI red-teaming program addressing prompt injection, jailbreaks, model extraction, poisoning, data leakage, and supply-chain risks. Own the AI security roadmap, advise senior leadership, apply the OWASP LLM Top 10, partner with platform teams, mentor engineers, and provide vulnerability remediation guidance.

Design and implement security across infrastructure, applications, data, and AI systems. Own authentication, authorization, tenant isolation, secure log ingestion and querying, and AI security risk mitigation. Lead security incident response and postmortems, establish practical security practices, and partner with engineering to integrate security into development. The role requires application or infrastructure security experience, knowledge of OWASP vulnerabilities, and experience securing distributed systems and APIs.

Lead fomo’s application security program through architecture reviews, threat modeling, secure SDLC implementation, code reviews, penetration testing, vulnerability management, security tooling, and incident response. Establish authentication, authorization, API security, and data protection standards; manage pentest and bug bounty relationships; mentor engineers; and define the AppSec roadmap and metrics.

Owns company-wide AI security by assessing tools, models, agents, and integrations; identifying prompt injection, data leakage, and misuse risks; implementing access, DLP, logging, and monitoring controls; partnering with Engineering on secure AI design; maintaining threat models, standards, risk tiers, inventories, and incident response playbooks; and advising teams on safe AI adoption.

Lead offensive security assessments, penetration testing, threat modeling, and attack-surface analysis across internet-facing services, APIs, embedded systems, firmware, and device interfaces. Identify vulnerabilities, guide remediation, validate fixes, and shape secure product-development practices. The role also drives risk-reduction initiatives, security architecture reviews, offensive security methodology, and strategic communication with engineering and executive stakeholders.

Designs and operates cybersecurity controls across identity, endpoints, networks, cloud, applications, data, and AI systems. Responsibilities include security architecture, vulnerability management, threat modeling, AI security governance, detection engineering, incident response, automation, resilience testing, compliance support, vendor evaluation, and cross-functional risk communication. The role participates in an on-call rotation and may require occasional travel to office, data-center, manufacturing, or network environments.

Build and deploy autonomous and semi-autonomous AI agents for an Agentic SOC, integrating SIEM, EDR, XDR, and threat intelligence systems. Translate SOC playbooks into agentic pipelines, optimize RAG workflows and LLM performance, and design human-in-the-loop escalation. Secure LLM architectures against prompt injection, data poisoning, tool abuse, and OWASP Top 10 for LLM risks. Develop scalable AI security solutions using cloud platforms and collaborate with analysts and threat hunters.

Build and deploy AI agents for security operations, translating SOC playbooks into agentic pipelines and optimizing RAG and LLM workflows. Design human-in-the-loop escalation, integrate SIEM, EDR, XDR, and threat intelligence systems, and secure AI architectures against prompt injection, data poisoning, and tool abuse. The role also involves production cloud deployment, orchestration, vector databases, and scalable AI services.

Lead defined-scope penetration tests across web applications, APIs, infrastructure, cloud environments, networks, mobile applications, IoT devices, and enterprise systems. Perform reconnaissance, vulnerability discovery, exploitation, evidence collection, reporting, and remediation validation. Investigate bug bounty findings, assess AI-enabled applications, document attack chains, and collaborate with engineering and security teams on remediation. Automate testing tasks, contribute to security processes, and communicate technical findings clearly.

Own security architecture and DevSecOps for SaaS, cloud, and AI applications. Lead vulnerability management, application security, red-team and adversarial testing, multi-tenant isolation, identity and data protection, compliance controls, and AI security. Partner with engineering, platform, SRE, data, and governance teams; participate in incident response, mentor engineers, and communicate enterprise risk to executives. The role requires hands-on coding and leadership across regulated, multi-cloud environments.

Defines Cisco’s enterprise-wide hardware security strategy and architecture across networking, data center, optical, AI, and cloud infrastructure. Designs roots of trust, firmware resiliency, device identity, secure enclaves, cryptographic protections, and anti-tamper mechanisms. Advises executives and engineering leaders, guides regulatory and certification efforts, collaborates with hyperscale customers, contributes to global standards bodies, and mentors hardware security architects.

Analyze hardware architectures, schematics, components, and silicon for security vulnerabilities and compliance gaps. Translate hardware security standards into engineering requirements, guide hardware and firmware teams and vendors, develop threat models and documentation, and manage concurrent security evaluations and design reviews. Focus areas include hardware roots of trust, secure boot, attestation, device identity, cryptography, resiliency, and hyperscaler platform security.