Top Security Engineer Jobs

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate automated infrastructure security capabilities across multi-cloud environments. Harden Linux hosts and containers, develop security controls with Terraform and production code, manage Kubernetes and cloud security platforms, implement monitoring and threat detection, and lead initiatives from threat modeling through reliable production deployment.

Secure applications, APIs, cloud services, and AI/LLM-enabled systems throughout the SDLC. Conduct threat modeling, architecture reviews, penetration tests, vulnerability triage, and remediation guidance. Integrate SAST, DAST, SCA, and secrets scanning into CI/CD pipelines; build secure automation and guardrails; support vulnerability disclosure; and coach developers on secure design and coding. The role protects sensitive clinical and genomic data while communicating security risks to engineering teams and leadership.

Leads security engineering architecture and strategy, including IAM, SSO, authentication, authorization, observability, and distributed event-based systems. Drives build-versus-buy decisions, improves security microservices and tooling, establishes engineering standards, and secures agentic AI infrastructure. Collaborates cross-functionally on priorities and tradeoffs while mentoring engineers, documenting practices, evaluating technologies, and advancing security across a cloud-based microservice architecture.

Leads security engineering implementations for identity management, authorization, observability, and microservice security. The role improves security services, frameworks, tooling, and standards; configures Auth0, Okta, Auth0-FGA, Chronicle, Terraform, and GCP; partners with product and engineering teams; and drives reliable, scalable security solutions across the organization.

The Senior Application Security Engineer will secure cloud-native software and CI/CD pipelines through SAST, DAST, SCA, container, API, and vulnerability scanning. The role partners with DevOps and development teams on secure coding, threat modeling, cloud security, compliance, and governance. Responsibilities include evaluating agentic AI coding tools, mitigating AI-specific risks, developing application security metrics, reporting to leadership, and mentoring junior engineers. The engineer will also support security standards including PCI-DSS, GDPR, CCPA, and SOC 2.

Supports and operates enterprise data security tooling, including CASB, SASE, DLP, EDR, XDR, and antivirus platforms. Responsibilities include executing configuration changes, troubleshooting end-user issues on macOS and Windows, providing first-tier support, coordinating with vendors and internal teams, maintaining documentation, and monitoring, reporting, and remediating security events. Scripting and experience with cloud platforms, Splunk, ServiceNow, and major security vendors are preferred.

Leads customer security engagements, designs and deploys Cisco security solutions, provides technical expertise and troubleshooting, automates security implementations, and supports ongoing customer success. The role requires deep experience with enterprise firewalls, VPNs, SASE, Cisco security platforms, cloud and on-premises environments, secure architecture, TCP/IP, and customer consulting. It also contributes to proposals, standards, delivery methodologies, and trusted-advisor relationships.

Designs, implements, and operationalizes AI security and GenAI data protection controls across enterprise AI usage. Engineers AI Gateway policies, detection logic, monitoring, coaching, redaction, quarantine, and blocking capabilities. Integrates telemetry with SIEM, SOAR, ITSM, identity, and data protection platforms. Assesses risks involving AI agents, MCP, APIs, non-human identities, and third-party integrations while improving control effectiveness, documenting standards, supporting audits, and partnering with technical and business teams.

Design and build security and infrastructure systems for an AI data platform: detect and respond to security events, automate security workflows, harden cloud and production environments, enforce access control, integrate security into development workflows, own incident handling, secure data and model interaction layers, and contribute to human-in-the-loop systems and core internal tooling.

Own cloud, application, and infrastructure security across AWS, Kubernetes, GitHub, and third-party tools. Conduct AI-assisted vulnerability scanning, penetration testing, access reviews, incident response, SIEM and EDR tuning, compliance automation, and security remediation. Build preventive controls through policy-as-code, CI/CD guardrails, detection engineering, and secure AI-use practices. Coordinate owners through verified remediation, manage pentests and bug bounty findings, support audits, and improve security readiness across engineering teams.

Designs and improves security across Azure and AWS environments, including cloud architecture, IAM, networking, workloads, infrastructure as code, automation, monitoring, detection, incident response, vulnerability management, and governance. The role establishes guardrails and secure standards, embeds controls into CI/CD, investigates cloud security events, supports compliance, and mentors engineers while partnering with platform, infrastructure, application, identity, and security operations teams.

Own and implement Sandbar’s backend security, including encryption, key management, confidential computing, identity, secrets, supply-chain security, incident response, compliance, and data-handling controls. Build features in Python real-time services, conduct threat modeling and design reviews, and guide secure engineering practices. The role requires deep cloud security, applied cryptography, production incident response, and backend ownership, with confidential computing and mobile or device security experience preferred.

Lead incident response, detection engineering, security telemetry, automated security operations, and exposure management. Build detections and response workflows as code, expand EDR, DLP, and AI-assisted SOC capabilities, establish AI security guardrails, and prioritize vulnerabilities across infrastructure, cloud, and endpoints. Partner with engineering teams to remediate risks and deliver measurable improvements in detection coverage, exposure reduction, and compliance automation.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Designs, implements, automates, and maintains secure, scalable infrastructure and identity platform solutions. Responsibilities include system architecture, infrastructure deployment, patching, backups, capacity planning, risk analysis, compliance audits, configuration and release management, telemetry, documentation, and technical issue resolution. The engineer collaborates with stakeholders on security assessments and compliance reviews while supporting reliable authentication, authorization, directory, and privileged access services across cloud and virtualized environments.

Designs, implements, and maintains network security infrastructure for a health system. Responsibilities include vulnerability scanning, threat and impact assessments, endpoint and host-based security, malware response, security policy enforcement, firewall and VPN uptime, and secure infrastructure design. The role also collaborates with management, technical teams, and end users on security requirements and participates in operational support and strategic projects.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Designs, implements, administers, and improves enterprise cybersecurity controls across identity and access management, cloud, applications, data protection, security operations, and governance. Conducts security assessments, vulnerability management, risk analyses, incident response, and threat investigations. Partners with technical teams and vendors, evaluates emerging technologies, develops security documentation and metrics, and mentors security analysts.

Architects and integrates Zero Trust cybersecurity capabilities for a mission-critical DoD Command and Control enterprise. Responsibilities include engineering SIEM and SOAR platforms, security data pipelines, detection rules, endpoint protection, vulnerability management, Linux infrastructure, automation, STIG and SCAP compliance, and RMF documentation. The role partners with SOC teams, engineers, government leaders, vendors, and coalition partners while supporting classified mission operations and producing security reporting.

Lead the design and delivery of scalable data solutions, including data pipelines, transformations, metadata frameworks, quality controls, and governance. Collaborate with stakeholders, product owners, and engineering teams to implement requirements, troubleshoot issues, test solutions, and improve engineering practices. Mentor junior engineers, lead proof-of-concepts, support CI/CD and automation, and ensure data architectures meet business and technical needs.

Provides engineering and administration support for enterprise cybersecurity applications, including Tenable Nessus vulnerability scanning and ServiceNow integrations. Manages scan policies, dashboards, reports, patching, backups, and Tier 2/3 support. Troubleshoots scanning issues, automates workflows, supports Assessment and Authorization activities, maintains security artifacts, and recommends improvements to cybersecurity operations and compliance.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.