Top Security Engineer Jobs

Own and evolve Torus’s IT and OT security architecture across IAM, endpoint security, networks, vulnerability management, and compliance. Lead EDR operations, incident response, remediation prioritization, automation, and complex security-event coordination. Evaluate security tools and architecture improvements, maintain secure infrastructure, and mentor IT and security engineers. The role is hands-on, serves as a technical escalation point, and supports SOC 2 or similar compliance efforts.

Lead and implement security engineering controls across the platform: identify real risks, build secure-by-default libraries and guardrails, enforce least-privilege for services protecting patient data, harden developer machines, and partner with compliance to convert requirements into effective technical controls.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Owns product security for DoD autonomous systems, including end-to-end RMF and ATO execution, security architecture, requirements, threat modeling, STIG applicability, vulnerability management, monitoring, secure updates, SBOMs, and secure SDLC practices. Acts as the security subject-matter expert for engineering teams and government cyber or program offices, securing embedded hardware, software, air-gapped systems, and command-and-control platforms through authorization.

Provides senior security guidance and hands-on DevSecOps engineering for Cisco Intersight. Responsibilities include assessing application and delivery-workflow security, interpreting security mandates and audit requirements, conducting architecture and threat assessments, prioritizing vulnerability remediation, supporting compliance and build-environment security, and developing automation, reporting, hardening, and remediation solutions. The role collaborates with engineering, architecture, product, SRE, compliance, and corporate security stakeholders.

The Security Engineer will design and implement security controls, enhance security posture, collaborate with IT, and leverage AI tools for cybersecurity. Key responsibilities include managing documentation and leading security initiatives.

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Provide cybersecurity engineering support to develop, validate, and maintain secure systems. Manage cyber requirements, perform technical security assessments, support Incident Response and Assessment & Authorization (A&A) per NIST RMF, produce A&A documentation, mitigate risks, and advise architects and program stakeholders on security design and compliance.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design and implement complex network systems, enhance network performance, support troubleshooting, and ensure compliance with standards. Collaborate on various engineering projects.

Designs and implements enterprise cybersecurity controls, manages security applications and advanced tooling, investigates and leads incident response, and supports threat detection, vulnerability remediation, risk assessments, audits, and compliance. Develops security policies and standards, administers cloud security and data protection capabilities, delivers security projects, mentors team members, and communicates security strategies to business and technology partners. Participates in a 24/7 on-call rotation and provides local support across corporate sites.

Investigate and respond to security incidents through alert monitoring, digital forensics, log and network analysis, evidence preservation, threat containment, and recovery recommendations. The engineer collaborates with technical and non-technical stakeholders, supports vulnerability management and security assessments, improves detection systems, develops automation, documents findings, and participates in a 24x7 on-call rotation.

The Customer Security Engineer will deliver pentesting services, support customers throughout the process, and translate findings into actionable next steps to improve security.

Lead cybersecurity engineering and Risk Management Framework activities for DoD mission systems. Design secure architectures, integrate security requirements, maintain authorization documentation, validate NIST and DISA controls, analyze vulnerability assessments, coordinate remediation, and support continuous monitoring, inspections, assessments, and ATO renewals. Provide technical guidance on system risks, Zero Trust modernization, interconnections, and secure design to system owners, leadership, and engineering teams.

Own infrastructure security remediation and patch compliance across Windows, Linux, cloud, on-premises, network, and certificate assets. Plan and execute monthly, zero-day, and out-of-band patching with canary testing, change controls, maintenance windows, and rollback procedures. Operate enterprise security and ITSM tooling, coordinate vendors, manage certificate lifecycles, publish compliance and audit reports, and lead security-infrastructure governance meetings.

Defines enterprise technology strategy, architecture standards, security controls, and multi-year roadmaps across AWS, Azure, GCP, GitHub Enterprise, AI platforms, and infrastructure. Leads cloud governance, migration, modernization, FinOps, developer platform management, AI governance, and security architecture initiatives. Advises executives, ensures compliance and risk alignment, drives operational excellence, and mentors architects and engineers.

Define, build, secure, and operate Front’s internal software platform across AWS and Snowflake. Establish engineering standards, infrastructure-as-code, CI/CD, observability, secrets management, vulnerability controls, RBAC, security monitoring, DLP, incident response, compliance support, and AI client integrations. Partner with engineering, data, GTM Systems, IAM, Enterprise Security, and Legal while enabling self-service deployment and maintaining reliable internal infrastructure.

Provides onsite cybersecurity engineering for classified defense intelligence systems. Responsibilities include supporting DIA authorization and accreditation under RMF, obtaining IATT, ATC, and ATO approvals, designing secure systems and physical controls, configuring and validating security tools, developing test plans, analyzing scan results, remediating vulnerabilities, and supporting incident response. The role requires advanced Windows and Linux administration, security tool expertise, IAT Level 2 compliance, and a TS/SCI clearance with polygraph.

Two-year rotational program for graduating students to design, build, and enhance secure applications, systems, controls, automations, and infrastructure. Participants gain experience in secure software development, DevSecOps, identity and access management, vulnerability remediation, and cybersecurity while collaborating across engineering and security teams. The program emphasizes leadership development, Agile delivery, project ownership, mentorship, and cross-functional communication.

Designs, engineers, administers, and supports enterprise Exchange environments across Microsoft 365, hybrid, and on-premises systems. Owns mail flow, SMTP, transport, migration, identity integration, and messaging architecture. Administers Proofpoint, EOP, DMARC, SPF, DKIM, anti-phishing, and anti-spoofing controls. Leads incident response, root-cause analysis, security investigations, change and release management, vendor coordination, documentation, and collaboration with security operations and infrastructure teams.

Leads product cybersecurity for connected medical devices, robotics, embedded platforms, cloud services, and digital health ecosystems. Responsibilities include security requirements, architecture and design reviews, threat modeling, risk assessments, vulnerability management, penetration testing, remediation guidance, control validation, post-market security, and regulatory support. The role mentors engineering teams, influences security-by-design decisions, supports audits and submissions, and communicates technical risks to cross-functional and customer-facing stakeholders.

Assess and reduce security risks across AWS infrastructure, applications, CI/CD pipelines, containers, and AI/LLM integrations. Responsibilities include threat modeling, security reviews, integrating SAST/DAST/SCA tools, hardening cloud and Kubernetes environments, automating security and incident-response workflows, and remediating vulnerabilities from scans and bug bounty programs.

Support high-severity cyber and product security incident response across cloud, corporate, application, and customer-facing environments. Coordinate incident workstreams, communications, stakeholder engagement, containment, recovery, documentation, and post-incident reviews. Develop AI security incident response capabilities, support threat hunting and investigations, improve detection and response metrics, conduct tabletop exercises, and advance automation and resilience across hybrid multicloud environments.

Provides cybersecurity engineering and architecture support for classified information systems. Develops secure technical standards, evaluates technologies, performs gap and risk analyses, advises stakeholders, and leads cybersecurity initiatives. Collaborates with architecture, engineering, and operations teams to deploy compliant solutions, improve efficiency, and reduce technical debt. The role is 100% onsite in Tucson, requires an active Secret clearance, and includes up to 10% business travel. A DoD 8570.01 IAM Level III certification must be obtained within six months if not already held.

Identify and mitigate security risks across IoT devices and infrastructure through penetration testing, firmware extraction, reverse engineering, vulnerability research, threat modeling, and security assessments. Document findings, policies, and procedures; manage security solution deployment; triage externally reported issues; drive remediation; and collaborate with infrastructure, application, product, and other stakeholders to reduce security and privacy risks.