Top Security Engineer Jobs

Leads enterprise cybersecurity engineering and secure-design reviews across applications, cloud platforms, APIs, integrations, and third-party solutions. Conducts threat modeling, risk assessments, vulnerability remediation, and architecture evaluations; advises senior stakeholders on mitigations, compensating controls, and secure implementation. Promotes automation and AI-assisted security validation throughout the software development lifecycle, while ensuring data sensitivity, auditability, and resiliency. Partners with product, engineering, business, vendor, and technology teams and leads cybersecurity communities of practice.

This internship involves owning impactful information security projects, collaborating with internal teams and customers, independently solving ambiguous security problems, and delivering improvements that protect Palantir and its customers. Candidates will apply engineering and programming skills while developing practical security expertise and may need to obtain a US security clearance.

Provides cybersecurity advisory and engineering support for healthcare operations and acquired entities. Responsibilities include risk assessments, vulnerability management, incident response coordination, remediation, security control implementation, enterprise security tool administration, compliance tracking, and integration support. The role also develops AI-powered security automations, uses approved AI tools to improve workflows and threat detection, and collaborates with IT, infrastructure, application, compliance, and security teams.

Threat model and secure Snyk’s GCP and AWS cloud infrastructure by creating Terraform, Kubernetes, CI/CD, and GitOps fixes. Use AI coding agents and MCP-connected cloud data to automate security remediation across repositories. Harden IAM, Kubernetes, containers, and deployment pipelines; implement CSPM and security testing; benchmark against CIS, ISO 27001, and NIST 800-53; review AI-generated changes; and consult with platform teams to drive secure implementations.

Design and implement product security/anti-tamper software solutions for defense platforms. Define architectures, requirements, interfaces and algorithms, integrate and test security features across hardware and software, and collaborate with platform engineers and architects to field secure tactical capabilities.

Harden and maintain AWS GovCloud, Microsoft GCC High, cloud, endpoint, container, and CI/CD environments for defense applications. Investigate vulnerabilities, secure software supply chains, lead threat modeling, enforce configuration and patching policies, monitor SIEM and cloud security alerts, and support federal compliance with CMMC, NIST, and FedRAMP standards. Collaborate across product, platform, and compliance teams to integrate security into the SDLC and support incident response.

Design and implement IAM and AAA architectures, integrate authentication technologies, automate IAM workflows (including Agentic AI), develop security automation and full-stack solutions, perform security assessments and incident response, and provide technical guidance across engineering and cybersecurity teams.

Designs, implements, and secures enterprise network infrastructure, including firewalls, trust zones, routing, switching, VPNs, wireless, load balancers, and data center networks. Leads network and security projects, performs technical planning and packet-level analysis, supports network operations at Tier 2, documents implementations, gathers stakeholder requirements, and mentors junior engineers. Ensures solutions consider NIST 800-171 compliance and contributes to network automation using tools such as Python, Ansible, and Terraform.

Own and harden Legora's corporate security posture across identities, non-human and human accounts, SaaS, endpoints, and AI use. Build guardrails-as-code (Python/Terraform), enforce least-privilege and phishing-resistant MFA, govern LLM/agent usage, run DLP and access reviews, and automate remediation for risky OAuth grants and device risk.

Own vulnerability management across endpoints, servers, and cloud infrastructure; harden AWS environments; improve identity management; support application security scanning, secure code reviews, and threat modeling. Triage security tickets and incidents within SLAs, track remediation, implement security controls, support audits, and lead cross-functional security initiatives with engineering, IT, and compliance.

Leads Authority to Operate activities and maintains information system security posture under RMF and ICD 503. Performs continuous monitoring, vulnerability and compliance auditing, security control validation, POA&M management, and security documentation. Coordinates remediation with technical teams, supports accreditation packages, analyzes logs and scan results, and provides security design guidance. The role also manages privileged-user nominations and serves as the primary contact for accreditation and continuous monitoring activities.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Develops and strengthens threat detection, response, and remediation capabilities for CrowdStrike infrastructure. Responsibilities include researching attacker techniques, creating network and host-based detections, implementing security analytics and automation, investigating and remediating threats, supporting cloud security across major providers, tracking operational metrics, and collaborating on complex cross-functional programs. The role requires expertise in SIEM/SOAR technologies, cloud-native systems, programming, operating systems, networking, web security, and security engineering principles.

Detect, investigate and remediate security incidents across corporate IT. Perform digital forensics and hunting, design and deploy corporate security controls and alerts, secure identity providers, endpoints and networks, and operate security tooling to prevent malware, phishing and unauthorized access.

Supports product cybersecurity integration for military aerospace programs, including F-15, F/A-18, T-7A, and MQ-25. Responsibilities include evaluating secure architectures and system designs, coordinating with engineering stakeholders, customers, suppliers, and subject matter experts, developing and verifying products, analyzing data, creating test procedures, executing tests, resolving problems, and preparing technical documentation. The role is fully onsite, may require occasional domestic travel, and involves obtaining a U.S. Secret clearance.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

The role involves leading vulnerability detection efforts, developing detection solutions, collaborating with teams, and managing projects in the cybersecurity space.

The role involves implementing data protection measures, managing insider risk, and overseeing identity governance to secure sensitive data.

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

The Senior Kubernetes Engineer will manage and enhance Kubernetes clusters, automate deployments, ensure security, and collaborate with teams to deliver reliable containerized applications.

Design, implement, and operate enterprise network and access security across hybrid environments (on‑prem and multi‑cloud). Manage firewalls, ZTNA, NAC, proxies, and microsegmentation; investigate security events; automate security operations with Python/Ansible/Terraform; develop standards, documentation, and remediation; mentor junior engineers and collaborate with infrastructure, cloud, and security teams.

Lead product cybersecurity engineering for Boeing avionics across the full lifecycle: derive security requirements, design secure architectures, perform risk/threat analysis and testing, produce PSE artifacts, coordinate with systems/software/hardware teams, and drive risk reduction and technology maturation to meet program and certification needs.