Top Security Engineer Jobs

Design, configure, deploy, monitor, and troubleshoot network security solutions. Lead NAC (Cisco ISE) and 802.1x implementations, migrate legacy platforms, provide assessments, capacity planning, documentation, and support multi-tier application integrations and threat remediation.

Design, assess, and manage information security programs including encryption, cloud and mobile security, DLP, vulnerability assessments, enterprise monitoring, RBAC/IAM, computer forensics, and IT audit/compliance for regulated industries.

Lead and execute information security functions including encryption, cloud and mobile security, DLP, risk/threat analysis, vulnerability assessments, enterprise security monitoring, RBAC and IAM, computer forensics, and IT audit/compliance (HIPAA, CMS, FISMA). Provide OS, database, network and application security expertise and support projects and programs in healthcare or financial services.

Design, implement, and maintain enterprise security platforms and identity solutions across hybrid environments. Modernize IAM and identity governance, enhance email security, collaborate with infrastructure and cloud teams, automate controls using scripting and APIs, and provide secure-by-design engineering guidance.

Lead secure software and cryptography engineering for crypto and tokenized asset custody. Implement and audit cryptographic code (C/C++, Go, Rust), perform threat modeling and crypto-focused code reviews, integrate with blockchain nodes/APIs, and design secure storage, networking, and deployment solutions using TEEs, HSMs, and containerized cloud environments.

Design and implement technical security controls across cloud, application, identity, and PKI environments. Assess architectures, perform threat modeling and risk assessments, produce control narratives/SSPs/POA&Ms, support audits (FedRAMP, SOC 2, ISO 27001), and work hands-on with DevOps, engineering, and operations to remediate, validate, and collect defensible evidence.

Design and implement technical security controls across cloud, application, identity, and PKI environments; perform threat modeling and risk assessments; translate security requirements into implementable controls; support audits (SOC 2, ISO 27001, FedRAMP), produce control narratives, SSPs and POA&Ms, and validate remediation with engineering and operations teams.

Perform security operations, SIEM administration, Azure/M365 security monitoring, threat intelligence, vulnerability management, threat hunting, email filtering, incident response/forensics, compliance/audit support, and security engineering for a regulated aerospace/defense and life sciences customer base.

Lead design, deployment, configuration, and management of security solutions for Navy/DoD IT environments. Conduct vulnerability analysis, SCAP scans, STIG implementation, risk assessments, accreditation, audits, TEMPEST testing, malware scanning, incident troubleshooting, and provide cybersecurity guidance to IT teams.

Designs, implements, tests, and maintains enterprise IAM/SSO solutions. Troubleshoots authentication/authorization issues, integrates federation protocols (SAML/OAuth/SCIM), applies patches, trains stakeholders, and advises on IAM best practices and compliance.

Lead the Data Leakage Prevention (DLP) engineering squad to design and deliver cyber security controls, manage vendors, engage stakeholders, and drive modernization to reduce risk. Develop and execute security strategy, monitor KPIs, ensure high availability of systems, enforce security best practices, and support transformation projects across cloud and on-prem environments.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Perform adversary-emulation informed cybersecurity operations and analytics to evaluate and improve detection, visibility, tooling, and automated defensive processes. Work with red teams, analyze network traffic, configure and maintain network infrastructure, build virtual environments, and develop automation and data-driven solutions to harden sponsor systems.

Design, implement, and maintain security architecture and RMF activities for network infrastructure. Develop A&A documentation (SSP, SCTM, BoE), perform vulnerability management with Nessus/SCAP, support continuous monitoring, incident response, and network integration. Ensure compliance with NIST SP 800-53 and related standards and assist ISSOs through ATO processes.

Lead administration and engineering of large enterprise Splunk deployments: manage data collection, maintain Splunk ES content and performance, deploy upgrades and add-ons, configure forwarders, support API integrations, develop documentation, enforce RBAC and compliance, and collaborate with analysts to improve detection and response.

Support and sustain endpoint security platforms for an Intelligence Community customer. Engineer, configure, and maintain Carbon Black EDR and other security products on Linux, assist with incident response and threat hunting, design secure architectures, oversee security sustainment and incident investigations, and provide technical reporting to senior management.

Maintain and secure Linux-based systems for network defense: automate tasks with shell scripts, configure logging and remote log collection, manage networking services (firewalls, SELinux), configure storage (partitions, LVM), deploy and update systems, and diagnose network issues using protocol knowledge and troubleshooting tools.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Implement and maintain data and digital security controls across network, infrastructure, applications, and databases. Perform firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project tasks to uphold DDS program requirements and security standards.

Design, deploy, troubleshoot, and optimize LAN/WAN and secure network topologies. Configure VPNs, firewalls, NAT, load-balancing, and monitoring tools. Collaborate with systems engineers, resolve complex network issues, and support 24/7 operations including hardware deployment worldwide.

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Design, implement, and maintain secure system architectures; translate RMF control baselines into implementable security requirements; analyze vulnerability/scanning results and drive remediation; provide security engineering input for cloud, Zero Trust, containerization, and CI/CD; maintain security artifacts and tooling; mentor junior staff and support authorization (RMF) activities to strengthen enterprise security posture.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.