Top Security Engineer Jobs

Designs, develops, and validates security controls for resource-constrained embedded devices and autonomous systems. Defines embedded, cloud, and mobile security architectures; applies cryptography, HSMs, and trusted execution environments; supports penetration testing, vulnerability assessments, and security validation. Requires hands-on embedded systems development, C/C++, Python, RTOS, Linux, and concurrent systems experience.

Designs, implements, and maintains global network and perimeter security infrastructure. Responsibilities include managing firewall rulesets, integrating security solutions, monitoring network performance, troubleshooting issues, supporting security projects, and collaborating with data center partners, application owners, and network teams. The role requires strong network security, Cisco networking, firewall, VPN, IDS/IPS, secure design, troubleshooting, communication, and stakeholder management skills. It is based in Chicago with at least three onsite days weekly and occasional nighttime or weekend on-call availability.

Manage HPE’s enterprise vulnerability management program by scanning infrastructure, cloud, applications, endpoints, containers, and networks; validating and prioritizing findings; coordinating remediation; monitoring emerging threats; and reporting risk metrics to leadership. The role administers vulnerability platforms, supports audits and compliance, integrates findings into application security workflows, and develops automation and AI-driven capabilities to improve vulnerability analysis and remediation efficiency.

Security Engineering Intern responsible for completing a scoped security project, developing automation and investigation tools, researching vulnerabilities, analyzing findings, validating AI-assisted outputs, collaborating with engineers, and documenting and demonstrating solutions. The role requires programming, web and systems knowledge, foundational security understanding, AI familiarity, and current enrollment in a bachelor’s or master’s program.

Leads the technical strategy, architecture, development, and operation of SnapIAM, Snap’s centralized identity and access management platform. Designs cloud access controls, workload identities, access governance, and least-privilege systems; leads migrations and multi-team initiatives; establishes engineering standards; contributes production code; and mentors engineers. Partners with infrastructure, engineering, and security teams to improve reliability, adoption, developer productivity, and secure access management across cloud environments.

Designs, implements, validates, and maintains cybersecurity and information system security solutions across the program lifecycle. Assesses assets, risks, threats, and vulnerabilities; supports RMF accreditation and authorization; develops remediation estimates; and applies security standards including NIST 800-53, JSIG, and NISPOM. Coordinates with engineering, network, software, testing, administration, and program management teams. Requires active TS/SCI clearance, DoD 8570 IAT Level II certification, and 9 or more years of related experience.

Leads strategic cybersecurity engineering across enterprise IT and manufacturing OT environments. Designs and improves endpoint, network, cloud, remote access, and identity controls; assesses industrial architectures and risks; coordinates with plant operations, engineering, OEMs, and global security teams; supports incident response, compliance, change management, and secure operational continuity while balancing safety, quality, production stability, and legacy technology constraints.

Designs, tests, and implements cybersecurity controls, defenses, and countermeasures for classified Intelligence Community systems. Responsibilities include continuous monitoring, incident response planning, log analysis, access management, system authorization tracking, and maintaining firewall and encryption protocols across complex networks and security enclaves. Preferred experience includes SecDevOps, cloud security, AWS, Azure, and AWS Security Specialty certification.

Design, test, and implement cybersecurity controls, defenses, and countermeasures for classified Intelligence Community systems. Responsibilities include continuous monitoring, incident response planning, log analysis, access management, system authorization, firewall and encryption maintenance, and investigating potential security compromises. Preferred expertise includes SecDevOps, Splunk, scripting, cloud security, AWS, Azure, and cloud certifications.

Design, integrate, and verify anti-tamper/product security solutions for embedded computing assets across defense platforms. Develop requirements, test plans, documentation, and collaborate with platform engineers and customers to field hardware/software protections, including cryptography, secure communications, reverse engineering, and FPGA-based mitigations. Must support development through verification and fielding.

Develop and mature SaaS and AI security programs, including security baselines, identity and access controls, data protection, risk assessments, monitoring, and remediation. Assess SaaS platforms, integrations, AI agents, models, and workflows for security risks. Partner with engineering, legal, privacy, procurement, and business teams to establish responsible AI controls, standards, and guidance. Automate assessments and evidence collection, communicate risks to stakeholders, and mentor junior security engineers.

Lead application security for Snap’s Lens runtime and web clients. Own security architecture, threat modeling, sandboxing, isolation, web security, memory-safety improvements, vulnerability research, fuzzing, exploitability analysis, and bug bounty operations. Partner across native and web engineering teams, mentor engineers, establish secure design patterns, and drive complex security initiatives through resolution.

Build and operate security platform services, asset and identity ownership systems, automated security reviews, vulnerability triage workflows, and AI guardrails. Develop production automation with approval, testing, monitoring, and on-call support. Partner with engineering, infrastructure, IT, and product teams while contributing code reviews, design reviews, runbooks, and technical guidance.

Build and operate corporate security controls for identity, access, endpoints, and SaaS applications. Automate authentication and joiner-mover-leaver workflows, secure macOS and mobile devices, develop agents and security tooling, detect and remediate misconfigurations, respond to security events, and partner with IT and engineering teams on secure SaaS and AI integrations. Participate in on-call rotations, conduct code reviews, maintain runbooks, and influence security improvements across the organization.

Leads enterprise cryptography, PKI, key management, and data protection strategy. Designs HSM and KMS integrations, encryption architectures, certificate automation, lifecycle controls, and post-quantum migration plans. Partners with engineering teams on secure libraries, threat modeling, security testing, vulnerability remediation, and shift-left security practices. Advises senior stakeholders on cybersecurity risks and mentors teams while ensuring systems are reliable, observable, auditable, and resilient.

Lead the design, development, deployment, and security of Java and Python applications supporting global financial systems. Responsibilities include cryptographic infrastructure, security validation, performance tuning, DevOps automation, cloud and on-premises pipelines, testing, architecture, documentation, operational stability, and agile delivery. The role also involves mentoring, continuity exercises, requirements gathering, and ensuring scalable, resilient, and secure application designs.

Lead security design for machine-learning features, maintain safeguards maps, and red-team LLM systems for jailbreaks, prompt injection, prompt leaks, and toxicity. Develop evaluation cases, mitigation strategies, security metrics, and production fixes with ML engineers. Monitor AI attack research, review safeguard changes, and ensure defenses remain effective across models and prompts.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Lead product security incident response for post-release vulnerabilities, including deep investigations, exploit analysis, CVE assignment, CVSS scoring, coordinated disclosure, remediation tracking, and postmortems. Coordinate engineering, product, release, security, and external research teams during significant security events. Improve secure development practices and vulnerability response processes across the SaaS platform while participating in on-call coverage.

Lead product security incident response for post-release vulnerabilities, including deep-dive investigations, exploit analysis, remediation coordination, CVE assignment and disclosure, advisory review, and incident leadership. Partner with engineering, product, release, customer-facing, and external security teams to reduce exposure windows, verify fixes, conduct postmortems, and improve secure development processes and PSIRT capabilities.

Leads product security incident response for post-release vulnerabilities, coordinating investigations, remediation, release fixes, CVE scoring and coordinated disclosure. Partners with engineering, product, release, customer-facing, and external security teams during significant incidents. Conducts exploit analysis, validates mitigations, authors postmortems, and improves secure development practices and SDLC processes.

Designs, implements, and maintains highly available HSM and cryptographic infrastructure supporting payment operations. Responsibilities include architecture, deployment, lifecycle management, migrations, troubleshooting, documentation, key management, automation, compliance, risk assessments, audits, and incident response. The role collaborates across teams to establish security standards and resiliency practices while using validated AI-assisted tools for threat modeling, security analysis, and documentation.

Build and own automated security compliance systems, including evidence collection pipelines and continuous control monitoring. Lead technical engagements with auditors for international certifications and regulations, develop scalable compliance strategies, apply AI to control validation and evidence mapping, manage stakeholder remediation efforts, and create compliance documentation. The role requires hands-on software engineering, cloud security expertise, risk management experience, and fluency in Japanese.

Designs, configures, maintains, and secures IT systems, networks, workstations, and cloud environments supporting DoD programs. Provides Tier 1 and Tier 2 user support, administers accounts and access controls, implements RMF security controls, performs patching and system hardening, monitors logs, supports ATO activities, responds to incidents, and maintains compliance with DAAG, NIST SP 800-53, and DoD directives.