Top Security Engineer Jobs

Support and sustain endpoint security platforms for an Intelligence Community customer. Engineer, configure, and maintain Carbon Black EDR and other security products on Linux, assist with incident response and threat hunting, design secure architectures, oversee security sustainment and incident investigations, and provide technical reporting to senior management.

Maintain and secure Linux-based systems for network defense: automate tasks with shell scripts, configure logging and remote log collection, manage networking services (firewalls, SELinux), configure storage (partitions, LVM), deploy and update systems, and diagnose network issues using protocol knowledge and troubleshooting tools.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Implement and maintain data and digital security controls across network, infrastructure, applications, and databases. Perform firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project tasks to uphold DDS program requirements and security standards.

Design, deploy, troubleshoot, and optimize LAN/WAN and secure network topologies. Configure VPNs, firewalls, NAT, load-balancing, and monitoring tools. Collaborate with systems engineers, resolve complex network issues, and support 24/7 operations including hardware deployment worldwide.

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Design, implement, and maintain secure system architectures; translate RMF control baselines into implementable security requirements; analyze vulnerability/scanning results and drive remediation; provide security engineering input for cloud, Zero Trust, containerization, and CI/CD; maintain security artifacts and tooling; mentor junior staff and support authorization (RMF) activities to strengthen enterprise security posture.

Administer and maintain Tenable Suite (Security Center, Nessus Scanners, Nessus Manager) on Linux, perform vulnerability scans and analysis, prioritize and remediate findings with IT teams, generate reports, monitor alerts and incidents, and provide training and status reporting to stakeholders.

Lead Splunk-based data collection, ingestion, and monitoring efforts. Troubleshoot and remediate system and data issues, deploy/manage Splunk add-ons and forwarders, implement role-based access, produce deployment and accreditation documentation, and ensure compliance with DoD C&A and security guidance.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Design and implement Oracle IAM solutions across environments. Configure OAM/OAAM, customize login modules and admin UIs, implement federation, configure roles/policies in OIM, integrate applications via LDAP/database connectors, perform user loads/reconciliation, and provide knowledge transfer to BCA staff.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Design, implement, and maintain secure systems in classified environments by integrating security throughout the SDLC. Lead RMF A&A activities to achieve and maintain ATOs, perform DISA STIG hardening and SCAP vulnerability assessments, automate compliance, support continuous monitoring, and coordinate remediation with development and infrastructure teams. Engage with customer security stakeholders and support incident response and forensic activities.

Lead design, deployment, and sustainment of Comply-to-Connect (C2C) solutions. Manage appliances, servers, and infrastructure; produce network architecture diagrams; evaluate upgrades; monitor and troubleshoot performance; support A&A and system accreditation; collaborate with cross-functional teams and customers to integrate and communicate technical requirements.

Implement and design IAM solutions, gather requirements, configure SSO/SAML integrations (customer and internal), troubleshoot authentication issues, document designs, and support adoption of authentication technologies.

Design, evaluate, and secure complex LAN/WAN and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model and test solutions, perform MTBF/MTTR analyses, analyze vulnerabilities, evaluate architectures, research COTS/GOTS, optimize wired and wireless networks, develop security documentation, and ensure compliance with government security requirements.

Design, implement, and document Identity and Access Management solutions and SSO/SAML integrations. Gather requirements, configure PoC/dev environments, resolve authentication issues, ensure platform stability under load, coach teams, and research new authentication technologies while supporting internal users and stakeholders.

Provide systems engineering and programmatic support to the U.S. Navy FMS directorate, both on-site and off-site. Oversee system security solution development and compliance with TIG and Anti-Tamper frameworks, support risk management, develop and review SEPs/SEMPs and vendor AT plans, produce technical briefs and correspondence, and maintain program schedules.

Design, implement, and monitor secure on‑prem and cloud/hybrid systems; enforce NIST 800‑53 controls and SSPs for ATO; perform vulnerability scanning/remediation, log aggregation and SIEM correlation, incident response, IAM enforcement, and produce audit-ready security documentation.

Design, implement, validate, and maintain standardized endpoint security baselines across Intune, MECM, and Jamf Pro for Windows and macOS. Configure Defender, BitLocker/FileVault, ASR rules, Conditional Access, and compliance policies; test and rollout baselines, perform impact assessments, troubleshoot policy conflicts, document procedures, and collaborate with cybersecurity, RMF/ISSO, and engineering teams to meet federal security requirements.

Designs, deploys, and optimizes AI-driven security workflows and agents (using Microsoft Copilot tools) to automate threat detection, incident response, and alert enrichment. Develops prompts and automations for threat hunting, triage, compliance reporting, creates dashboards (Splunk, Sentinel), maintains runbooks/SOPs, participates in on-call rotations, and collaborates with SOC, engineering, and GRC teams.

Lead product security activities for vehicle and cloud products: perform ECU- and feature-level threat assessments and risk analyses, derive security requirements, develop and run manual and automated security tests on SIL/HIL setups, validate fixes, and produce UN R155/CSMS-compliant documentation to support homologation. Collaborate with software, security architecture, and GRC teams to define controls and risk treatments and ensure security validation across the product lifecycle.