Top Security Engineer Jobs

Lead security investigations for AI systems used in scientific discovery. Develop threat models, test defenses through adversarial assessments and technical analysis, define security requirements, evaluate evidence, and drive improvements with Security, Safety, and engineering teams. The role addresses dangerous misuse, model and data compromise, deployment risks, and safeguards for increasingly capable AI systems.

Define and scale Cisco’s AI security standards across products and platforms. Lead threat modeling, secure AI architecture, adversarial testing, supply-chain risk management, AI-assisted development security, evaluation frameworks, and release criteria. Advise engineering and product leaders on vulnerabilities, privacy, governance, and risk while influencing cross-functional teams without direct reports. Establish security patterns for RAG, agents, tool calling, identity, bounded autonomy, CI/CD gates, provenance, and post-deployment incident response.

The Application Security Engineer integrates security into software development, establishing secure coding practices and protecting applications across various platforms and systems.

The Application Security Engineer ensures security in software development, focusing on secure coding practices, securing applications, and enabling secure, compliant software for various systems.

The Application Security Engineer integrates security into software development by establishing secure coding practices and collaborating on secure application architecture across various platforms.

Designs, deploys, and maintains network security controls across enterprise, cloud, and hybrid environments. Responsibilities include firewall engineering, segmentation, secure connectivity, monitoring, incident response, vulnerability remediation, compliance support, automation, and security architecture reviews. The role partners with infrastructure, cloud, DevOps, and application teams and participates in a 24x7 on-call rotation.

Supports vulnerability management, application security testing, and penetration testing across on-premises and cloud environments. Responsibilities include vulnerability scanning and triage, SAST and DAST testing, web, mobile, and API penetration testing, manual validation, remediation coordination, CI/CD security integration, and reporting. The role collaborates with engineering, IT, risk, audit, and compliance teams to reduce security risk and meet regulatory expectations.

Designs and manages web and API security controls, including WAF, bot management, DDoS protection, and detection policies. Conducts threat hunting, analyzes security telemetry and logs, investigates incidents, responds to vulnerabilities, and develops detection logic, playbooks, procedures, and automation. Partners with engineering and security teams to improve security operations, monitoring, and response capabilities across Coupang’s large-scale global technology environment.

Designs and maintains secure, scalable identity and infrastructure platforms. Responsibilities include infrastructure architecture, performance analysis, automation, CI/CD support, configuration management, security risk assessments, compliance reviews, monitoring, troubleshooting, capacity planning, and identity and access management. The role supports enterprise directory services, authentication, authorization, privileged access, cloud and infrastructure integrations, audit readiness, governance, resiliency, and platform modernization.

Designs and maintains secure IT infrastructure supporting cybersecurity objectives. Develops security controls aligned with risk management frameworks, automates configuration and deployments, supports CI/CD security practices, and implements identity and access management solutions including Okta. Monitors observability data for incidents, contributes to resilient systems design, and promotes infrastructure security, compliance, governance, and scalability across enterprise platforms.

Supports global physical security technology and infrastructure, including access control, video surveillance, monitoring platforms, servers, and network equipment. Responsibilities include deployment, configuration, troubleshooting, hardware installation, firmware upgrades, patching, lifecycle management, incident response, documentation, vendor coordination, and on-call support. The role requires domestic and international travel of up to 25%.

Own the engineering security program for a remote SaaS platform, including SOC 2 Type II compliance and HITRUST readiness. Secure AWS infrastructure, Docker pipelines, Terraform, databases, and PHP/React applications; manage vulnerability scanning, threat modeling, detection, incident response, and penetration testing. Assess AI and LLM risks, establish secure AI-development guardrails, improve security controls, remediate findings, and train engineering teams on secure practices.

Designs and supports secure enterprise systems, applications, networks, and cloud platforms for USSTRATCOM mission environments. Responsibilities include cyber forensics, intrusion detection, incident response, vulnerability assessment, secure architecture, cryptography, DevSecOps, cloud security, identity management, and security automation. The role requires programming experience, cybersecurity certifications, technical documentation, and collaboration in classified NIPRNet, SIPRNet, JWICS, and SAP/SAR environments.

Deploys and monitors AWS cloud platforms under DoD RMF and JSIG requirements. Develops infrastructure-as-code and configuration-as-code using Ansible and Terraform, operates Splunk security monitoring on Kubernetes, performs vulnerability assessments, and collaborates with engineering and networking teams. Requires DoD network experience, Windows or Linux expertise, Splunk administration, cloud and Kubernetes experience, Security+ or higher certification, and an active TS/SCI clearance.

Develop and test software for large-scale networking platforms and distributed systems, with a focus on platform security and AI-powered infrastructure tools. Responsibilities include designing scalable solutions, developing Linux kernel drivers, troubleshooting and optimizing distributed systems, supporting production environments, and collaborating with distributed engineering teams. The role requires C/C++, Python, Linux, networking, container, and AI-assisted development experience, with preferred knowledge of Sonic OS, Linux kernel security, trusted hardware, and Cisco networking certifications.

Assists with designing, implementing, and maintaining secure systems, networks, and applications. Performs security monitoring, incident response, digital forensics, vulnerability assessments, risk analysis, and security control development. Documents breaches, evaluates impact, recommends security tools, and supports security policies and procedures. The role participates in on-call incident response, requires occasional travel, and involves obtaining and maintaining a Secret U.S. security clearance.

Secure Realtor.com’s AI platforms across AWS and GCP by designing agent guardrails, identity controls, containment, supply-chain protections, detection, and incident response. Lead threat modeling, secure CI/CD, AI red teaming, and secure-by-default platform frameworks. Partner with enterprise cybersecurity, build security automation using AI agents, educate teams, evaluate emerging threats and vendors, and advise leadership on AI governance and risk.

Lead product security for spacecraft, flight software, embedded systems, and engineering platforms. Responsibilities include threat modeling, secure architecture and code reviews, vulnerability assessment, CI/CD security tooling, software supply-chain risk management, and development of Python or Go automations. Support NIST Risk Management Framework artifacts and Authorization to Operate processes while advising engineering teams on secure development and remediation. The role is fully onsite in Dulles, Virginia and requires an active TS/SCI clearance.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads the architecture and delivery of GitLab’s static analysis engine and evaluation tooling. Owns program modeling, vulnerability detection quality, SAST rules, AI-assisted development guardrails, and benchmark validation. Sets technical direction, mentors engineers, coordinates complex initiatives, contributes to research and open source, and participates in on-call rotations. The role requires deep program analysis, application security, systems programming, performance optimization, containerized CI/CD, and experience building trustworthy LLM tooling.

Coordinate government security accreditation and certification activities for cryptographic devices and embedded aircraft systems. Serve as a technical liaison among government agencies, prime contractors, and engineering teams; review security designs and deficiencies; support COMSEC key-management processes; develop and assess test plans; guide systems through ATO and DoD RMF processes; and perform hardware and software security assessments for embedded and cyber-physical systems.

Develop software, automation, deployment pipelines, threat intelligence systems, network-data ingestion tools, research labs, and continuous testing infrastructure supporting threat research and detection engineering. Work with network packet data to emulate adversary behavior, improve R&D efficiency, deploy enterprise software, and participate in code reviews. The role requires strong Python, software engineering, networking, and cybersecurity expertise.

Develops and owns vehicle security requirements, network and module security architecture, secure software interfaces, and security-related features such as Digital Key and SOTA. Creates and executes verification and validation plans, analyzes test results, resolves platform security defects, and manages software and feature delivery to prototype vehicle fleets. The role collaborates with OEMs and systems engineering teams and requires expertise in automotive communication protocols, embedded systems, and security mechanisms.

Own company-wide infrastructure security, establish the security roadmap, and implement controls across cloud infrastructure, identity and access management, autonomous agents, software delivery, supply chain, and employee devices. Build monitoring, detection, incident response, threat modeling, and architecture review practices while partnering with engineering, research, and compliance teams to manage risk and maintain practical, auditable controls.

Leads enterprise cybersecurity operations across secure and isolated environments. Responsibilities include vulnerability management, security scanning, DISA STIG implementation, continuous monitoring, audit-log and account reviews, RMF and ATO support, security hardening, incident and remediation coordination, SIEM analysis, technical documentation, stakeholder communication, and mentoring security and engineering personnel.