Top Security Engineer Jobs

Designs and operates secure AI applications and backend microservices on AWS. Responsibilities include threat modeling, secure design reviews, vulnerability remediation, secure API development, AI guardrails, prompt testing, RAG pipelines, monitoring, audit logging, and incident readiness. The role collaborates with engineering, product, cloud infrastructure, and security teams to embed secure-by-design practices throughout the software development lifecycle.

Lead technical strategy and hands-on delivery of an enterprise AI Security Governance program across visibility, prompt protection, agent control, shadow AI, and compliance. Architect and deploy controls (AI detection/response, DSPM/AISPM, data-path controls), automate security operations, close high-severity AI data and access gaps, and produce executive- and auditor-ready risk narratives while mentoring engineers and collaborating cross-functionally.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

Designs and maintains cloud and application security controls across AWS and Azure. Leads IAM, network segmentation, PAM, workload protection, CI/CD, container security, incident response, threat modeling, code scanning, and penetration testing. Partners with engineering and product teams to improve security posture, secure development practices, compliance, and cyber resilience. Provides technical guidance, training, metrics, and hands-on architecture, code review, and validation support.

Design, implement, and operate security controls across Oracle Cloud Infrastructure, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include IAM and federation, key management, workload hardening, Cloud Guard monitoring, logging and SIEM integration, data security, vulnerability management, regulatory compliance, threat modeling, incident response, security automation, documentation, and team mentorship.

Own product security across robots, embedded systems, firmware, cloud infrastructure, APIs, mobile applications, and fleet operations. Lead threat modeling, secure architecture reviews, vulnerability research, penetration testing, code review, incident response, detection engineering, and security tooling. Establish security standards, automate testing, investigate incidents, and partner closely with engineering teams to harden systems and ship secure fixes.

Designs, implements, and maintains security controls across enterprise Azure environments. Responsibilities include securing cloud infrastructure, identities, applications, networks, data, and DevOps pipelines; managing Azure security tools and IAM controls; identifying vulnerabilities; developing monitoring and detection capabilities; investigating incidents; reviewing infrastructure-as-code; supporting compliance; automating security processes; and mentoring junior engineers.

Support Sentinel (GBSD) program performing systems security and CPLM integration. Assess supply chain security, standardize engineering data, align CPLM with ERP/logistics, use JIRA for agile execution, and serve as technical liaison between Engineering, Manufacturing, and Logistics to resolve data silos and protect program information.

Own Kikoff’s data security roadmap across AWS, Snowflake, RDS, and internal pipelines. Design and implement encryption, tokenization, least-privilege access, access brokering, row- and column-level controls, audit logging, secure data flows, and AI agent permissions. Partner with Legal and Compliance on privacy and regulatory requirements, threat-model new systems, and create reusable secure engineering patterns. Support data mapping, retention, deletion, and cross-border data controls in a regulated fintech environment.

Design and maintain security architectures for defense systems, conduct risk assessments and vulnerability analyses, integrate encryption and access controls, perform security testing and remediation, manage RMF/CMMC certifications, lead anti-tamper and reverse-engineering efforts, and coordinate exportability and compliance across the SDLC and program lifecycle.

Lead embedded systems security for sensor and mission solutions: ensure compliance with government policies (JSIG, DAAPM), develop/validate cybersecurity requirements, support ST&E, perform reverse engineering/anti-tamper analysis, manage A&A documentation and POA&Ms, guide exportability and international requirements, and drive secure architecture, testing, and policy alignment across hardware and software lifecycles.

The Senior Security Engineer will evaluate and maintain security tools, implement SOAR capabilities, automate threat hunting and incident response, develop detection mechanisms, manage a cloud SIEM, and lead incident response activities. The role also supports cloud security, phishing awareness campaigns, secure implementation guidelines, documentation, stakeholder collaboration, and 24/7 on-call incident escalation support.

Leads industrial cybersecurity operations as an L2 SOC escalation resource. Monitors SIEM and ICS infrastructure, evaluates incidents, develops SOAR playbooks, performs threat hunting and malware analysis, supports forensics, tunes detection rules, recommends remediation, and mentors SOC analysts. The role requires extensive SOC, incident response, SIEM/SOAR, and security automation experience, including Python, with hybrid work in Duluth, Georgia.

Leads industrial cybersecurity operations across global managed services customers. Responsibilities include SIEM monitoring, SOC escalation, SOAR process and playbook development, incident triage, malware analysis, threat hunting, forensic support, alert tuning, remediation orchestration, and mentoring SOC analysts. The role operates as an L2 SOC escalation layer and supports ICS environments including SCADA, HMI, PLC, and RTU systems.

Provides Level 2 SOC escalation and industrial cybersecurity services for OT environments. Monitors SIEM and ICS infrastructure, evaluates and enriches security incidents, develops SOAR playbooks and automation, performs malware analysis and threat hunting, supports forensic investigations, tunes detection rules, coordinates remediation, and mentors junior SOC analysts. The role also documents procedures, communicates security trends, and advises customers on defense-in-depth and control improvements.

Owns enterprise integration architecture across custom applications, technology platforms, ERP systems, data and AI platforms. Designs secure data flows, integration patterns, and architecture standards; supports software selection and partners with engineering, product, cybersecurity, and business teams. Advises stakeholders on retail and consumer packaged goods processes, including CRM, category management, retail execution, and field workforce management. The role requires 10–12 years of relevant experience and has no travel requirements or direct reports.

Lead identity security engineering strategy across user, development, and production environments. Guide IAM architecture, privileged access management, threat detection, adversarial testing, compliance automation, and security-control validation. Mentor engineers, define identity security roadmaps, build automation and proofs of concept, collaborate with business and security leaders, and modernize protective controls using offensive and defensive security expertise.

Lead security engineering for a growing enterprise environment across network, endpoint, identity, cloud, and acquired business units. Responsibilities include Palo Alto segmentation, SIEM and SOC engineering, vulnerability remediation, Okta and privileged-access hardening, VPN security, incident response, tabletop exercises, and mentoring a junior analyst. The role coordinates with DFIR and vCISO partners and drives measurable improvements in detection, containment, patching, and security operations.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Supports AWS GovCloud IL5 cybersecurity compliance and security operations. Performs RMF impact analysis, maintains SSPs, POA&Ms, SARs, and control evidence, validates STIGs and cloud configurations, monitors vulnerabilities and logs, supports IL5 migrations, audits, ATO activities, and continuity planning, and documents remediation and compliance findings.

Support cybersecurity and systems security engineering for U.S. Navy afloat and undersea platforms. Analyze vulnerabilities, design and assess security solutions across lifecycle phases, support testing and accreditation, recommend risk mitigations aligned with DoD/Navy requirements, and produce technical documentation and briefs to strengthen mission resilience.

Design, implement, and mature API security capabilities across applications, platforms, and AI use cases. Evaluate and deploy API security tools, perform threat modeling and assessments, identify insecure API patterns, drive remediation, and advise on non-human/agentic identity, authentication, and service-to-service trust models.