Top Security Engineer Jobs

Provides hardware security consulting and guidance to Cisco hardware engineering teams. Reviews architectures from systems through components, identifies vulnerabilities, translates security standards into engineering requirements, and develops security documentation and reference architectures. Leads multiple security initiatives, educates engineering communities, and supports HW-CSDL compliance. Requires substantial hardware engineering experience and knowledge of secure boot, hardware roots of trust, cryptography, and resilient hardware and firmware design.

Assists with designing, implementing, and maintaining secure IT systems, networks, and applications. Performs security monitoring, incident response, digital forensics, vulnerability and risk assessments, and security control implementation. Documents breaches, researches security tools, supports policy development, and participates in on-call incident response. The role requires a bachelor’s degree or equivalent experience, basic cybersecurity knowledge, and the ability to obtain and maintain a Top Secret clearance.

Designs and enforces cloud, network, application, and infrastructure security controls across AWS, Azure, GCP, and on-premises environments. Responsibilities include hardening systems, managing IAM and network controls, conducting vulnerability assessments, overseeing remediation, securing applications and data, maintaining security standards, and supporting SIEM, DevSecOps, patching, logging, and compliance activities.

Conduct security design reviews, threat modeling, penetration testing, and adversarial assessments of services, applications, APIs, infrastructure, mobile platforms, and AI agents. Build AI-powered automation to scale security assessments, identify complex attack paths, and improve security controls. Collaborate with engineering and security teams to address systemic weaknesses, evaluate cloud-native architectures, and communicate actionable findings across technical and non-technical stakeholders.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Leads hardware and supply chain security strategy across procurement and manufacturing. Defines supplier risk criteria, secures provisioning and key-injection workflows, manages chain of custody, implements anti-counterfeit controls, validates firmware authenticity, aligns processes with NIST SP 800-161, and mentors security personnel. The role also supports vendor evaluations, test equipment security, and security organization growth for space-based communications systems.

Build foundational security systems across cloud infrastructure, identity, application security, observability, and internal platforms. Responsibilities include AWS security guardrails, Terraform-based infrastructure, AI workflow sandboxing, secrets management, identity and access systems, application security, multi-tenant isolation, security monitoring, detection, and incident response. The role requires independent project ownership and strong engineering and security instincts.

Leads hands-on security architecture and implementation for AWS cloud, software delivery, applications, and AI platforms. Builds secure-by-default Terraform/OpenTofu controls, identity and access patterns, CI/CD protections, vulnerability management, threat models, AI security evaluations, detection mechanisms, and incident remediation. Partners with engineering, CyberOps, Identity, GRC, and Privacy teams while mentoring engineers and translating security requirements into automated, reusable guardrails.

Administer and improve enterprise data loss prevention and data security controls across Microsoft 365, Google, email, endpoints, browsers, networks, and SaaS applications. Configure policies, investigate alerts, tune detections, manage exceptions, support incident response, develop reporting and playbooks, and automate administrative and validation workflows. Partner with security, privacy, legal, compliance, IT, and business teams to protect sensitive data while minimizing disruption and false positives.

Staff Security Engineer responsible for securing AWS cloud, Infrastructure as Code, software delivery, applications, and AI platforms. The role defines security architecture, builds reusable Terraform/OpenTofu controls, strengthens identity and logging, secures GitHub Actions, conducts threat modeling, and develops protections for agentic AI systems. It also leads vulnerability remediation, detection and response improvements, incident root-cause analysis, security evaluations, and compliance evidence generation while mentoring engineers and influencing cross-functional teams.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Designs, develops, and secures production-grade generative AI platforms, LLM, RAG, and agentic AI applications. Builds model-serving infrastructure, orchestration frameworks, observability and guardrails, and cloud-native services. Implements AI security, governance, threat modeling, vulnerability remediation, secure deployment, CI/CD, and DevSecOps practices across cloud and hybrid environments.

Designs, builds, and evaluates secure generative AI applications, agentic workflows, and multi-agent systems. Responsibilities include threat modeling, prompt-injection and data-exposure assessment, identity and access controls, tool authorization, execution isolation, monitoring, auditability, and human approval controls. The role develops prototypes, architecture patterns, documentation, and evaluation methods while guiding engineers and leading design reviews. It requires strong Python, AI/ML, cybersecurity, cloud architecture, and governance expertise, with Secret clearance eligibility.

Conduct offensive security testing across web applications, APIs, hosts, cloud infrastructure, embedded devices, and industrial control systems. Perform penetration testing, code audits, reverse engineering, threat modeling, vulnerability research, and security design reviews. Build proof-of-concept exploits, static analysis rules, CI checks, and automated security tooling. Present findings and collaborate with engineering teams and vendors to remediate vulnerabilities.

Build and lead Qualitate’s security program as its first dedicated security engineer. Secure AWS or GCP infrastructure, implement logging, monitoring, detection, access controls, encryption, and vulnerability remediation, and review application architecture. Lead ISO 27001 certification, automate compliance evidence, respond to incidents, address penetration-test findings, secure LLM-based systems, and develop production security tooling while partnering with engineering, compliance, and legal.

Leads information security engineering across IAM, cloud infrastructure, applications, data, and security operations. The role designs security controls, monitors and responds to incidents, assesses vulnerabilities, supports compliance, integrates security throughout the software development lifecycle, and develops organizational security awareness. It partners with platform and software engineering teams on strategic initiatives, risk mitigation, secure coding, DevSecOps, and maintaining a secure SaaS environment.

Build and maintain security systems for an AI platform handling sensitive customer interactions. Responsibilities include application, infrastructure, and cloud security; access controls and authorization; audit logging; vulnerability scanning; dependency auditing; secrets management; automated detection; and security tooling. The role writes production code, partners with backend and infrastructure engineers, and helps address AI-agent risks such as prompt injection and data leakage.

Build and operate cloud platform security controls across AWS, GCP, Azure, and Kubernetes. Develop cloud guardrails, workload protections, AI security controls, CI/CD scanning integrations, infrastructure-as-code solutions, and automated remediation. Lead threat modeling, detection validation, incident response readiness, and security initiatives from scoping through production ownership. Collaborate with engineering teams on secure coding and risk remediation while mentoring team members.

Develops and maintains security across applications, platforms, and cloud environments. Responsibilities include application and platform security testing, incident response planning, cyber resiliency, monitoring and alerting, secure cloud infrastructure operations, COMSEC or cryptographic key management, vulnerability coordination, compliance monitoring, and security policy development. The role requires an active TS or higher clearance, a bachelor’s degree, cloud experience, and at least 10 years of experience.

Develop browser plugins for Windows with cross-browser compatibility across Chrome, Firefox, and Internet Explorer. Apply Windows API, registry, privilege, authentication, encryption, SSL/TLS, PKI, X.509, and digital-signature security expertise. Write and test software using C#/.NET, Managed C++, Java, Python, and JavaScript. Collaborate in Scrum environments using version control and strong communication skills.

Conduct application security reviews, source-code audits, penetration tests, architectural reviews, and vulnerability assessments. Guide development teams on secure SDLC, threat modeling, DevSecOps, and vulnerability mitigation. Lead static and dynamic application security testing programs, design security tools and controls, manage responsible disclosure cases, research emerging attack vectors, and coach teams on application security practices.

Designs, implements, and supports enterprise IAM capabilities across Microsoft Entra ID, Active Directory, and identity governance platforms. Integrates applications using SSO and automated provisioning protocols; manages RBAC, lifecycle processes, Conditional Access, MFA, PIM, and least-privilege controls. Troubleshoots complex identity and federation issues, automates operations with PowerShell and Microsoft Graph, supports migrations and production changes, and creates technical and audit documentation. Collaborates across engineering, application, risk, and audit teams while mentoring peers and participating in Agile delivery.

Designs and maintains secure network architectures across multi-domain and cloud-connected environments. Develops RMF documentation and accreditation artifacts, conducts vulnerability assessments and threat modeling, validates security controls, and supports network hardening, segmentation, cross-domain interfaces, patch management, and continuous monitoring. Collaborates with infrastructure, systems, cloud, ISSO, and ISSM teams, while supporting ATO packages and mentoring team members.

Designs and builds endpoint security platforms for FanDuel’s global device fleet. Responsibilities include threat modeling, architecture, production software development, infrastructure-as-code, GitOps policy deployment, security monitoring, detection pipelines, incident investigation, and risk reduction. The role partners across security and enterprise technology, mentors junior engineers, and advances zero-trust maturity through automation and secure device baselines.

Supports cybersecurity engineering, risk management, compliance, authorization, and technical assessment activities for missile defense systems. The role analyzes cyber risks, policies, regulations, architectures, and security gaps; develops mitigation recommendations and authorization artifacts; guides eMASS approval packages; and briefs technical issues to senior leadership and government stakeholders.