Top Security Engineer Jobs

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.

Investigate digital security incidents, platform abuse, and threats affecting ClickUp’s product and internal systems. Collect evidence, identify indicators, determine impact, and drive remediation. Build AI-assisted and agentic workflows for forensics, incident response, and audits. Develop product defenses, automated controls, and response tooling while partnering with engineering, product, data, and operations teams. Mentor colleagues, communicate evidence-based findings, and improve security processes through automation.

Design and implement infrastructure security for AWS, Kubernetes, identity, networks, workloads, and CI/CD. Build agentic security tooling, lead detection and incident response, enforce least privilege, conduct architecture reviews, automate vulnerability and compliance monitoring, and guide teams toward secure designs. The role also investigates cloud security events, hardens infrastructure, creates audit evidence, and communicates technical risks to non-technical partners.

Run and maintain an enterprise Burp Suite DAST program, including authenticated scans, CI/CD integrations, and Linux troubleshooting. Use Veracode SAST and development tools to integrate security testing into pipelines. Design enterprise security controls, assess web applications against OWASP and related standards, and align security activities with NIST, FIPS, and FedRAMP requirements. The role supports a federal financial regulatory agency and requires U.S. citizenship and Public Trust suitability.

Designs, develops, tests, deploys, and maintains AI-powered cybersecurity capabilities, including threat detection, automated response, compliance monitoring, risk assessment, and SIEM enhancements. Develops and optimizes machine learning models, CI/CD pipelines, data workflows, and model monitoring processes. Supports AI governance, NIST and federal compliance, risk assessments, technical documentation, secure tool integration, and collaboration with SOC, engineering, and government stakeholders.

Build high-scale distributed backend services for Tanium’s AI Security solution. Develop LLM integrations, tool-calling frameworks, MCP integrations, RAG pipelines, APIs, and AI-agent capabilities. Contribute across backend and frontend systems, including common data services, time-series data, GraphQL integrations, security, auditing, and operations. Collaborate with product management and agile teams to design, test, debug, and ship maintainable enterprise software.

Design and build high-scale distributed systems for securing AI agents and endpoints. Develop backend services, LLM integrations, tool-calling frameworks, MCP integrations, RAG pipelines, and enterprise applications. Lead architecture, code reviews, troubleshooting, performance improvements, and full software development lifecycle activities. Collaborate with product, UX, security, and infrastructure teams while mentoring engineers and improving development practices.

Administer, configure, troubleshoot, deploy, and sustain enterprise endpoint-security capabilities, primarily using Elastic Defend. Manage policies, agents, alerting, logging, reporting, documentation, vulnerability and compliance support, and cybersecurity tool integrations. Collaborate with cyber, systems engineering, infrastructure, and mission teams while supporting Elastic engineering projects, modernization, technical documentation, and mission-critical Department of War cybersecurity operations.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Lead a Developer Enablement Application Security team to design secure systems, integrate application security into CI/CD, perform technical analysis and security reviews, deliver scalable solutions, and communicate risks and metrics to engineering teams and senior stakeholders.

Designs, implements, maintains, and improves cybersecurity controls and architectures across systems, networks, endpoints, cloud environments, and applications. Conducts risk and vulnerability assessments, documents security plans and standards, supports DevSecOps, evaluates emerging threats, and provides security guidance. The role also supports continuous monitoring, metrics reporting, compliance, and security posture improvement while collaborating with technical and business stakeholders.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Leads cloud security strategy and architecture for a SaaS platform handling sensitive health information. Responsibilities include implementing SIEM log sources, driving security initiatives, researching threats and technologies, defining security standards, advising cross-functional teams, conducting forensics and incident response, and monitoring permissions and configurations for least-privilege compliance. The role also mentors security and compliance staff and requires on-site work in Austin, Texas, or Madison, Wisconsin, with limited travel.

Lead technical direction for vulnerability management, including security tooling, automation, LLM-based workflows, risk assessment, remediation, and vulnerability investigations. Build production services integrating security data, coordinate remediation across engineering teams, participate in vulnerability response, conduct post-mortems, and mentor engineers. The role also evaluates exploitability, attack paths, CVEs, and remediation priorities across cloud, Linux, container, and Kubernetes environments.

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Lead the design and implementation of Aalyria’s security platform, including identity, authentication, authorization, PKI, workload identity, secrets, key management, audit evidence, and security standards. Build systems that operate securely in commercial, government, classified, and disconnected environments. Set technical direction across teams, mentor engineers, threat-model distributed systems, and operate production services through upgrades, maintenance, and incidents.

Build and operate Spacetime’s security platform, including authentication, authorization, PKI, workload identity, secrets and key access, SDKs, audit logging, and threat mitigations. Develop secure capabilities for commercial, government, classified, and disconnected environments. Collaborate with product and infrastructure teams, support production operations, participate in on-call and incident response, and maintain hardened supply-chain and deployment controls.

Lead Uber’s global cybersecurity incident command, cyber resilience, Purple Team, and insider threat programs. Manage incident commanders and engineers, direct high-severity incident response, coordinate containment and recovery across technical and business teams, and communicate risks to executives. Own readiness testing, adversary emulation, tabletop exercises, post-incident improvements, and response metrics. Guide automation and AI investments while maintaining human oversight, build organizational capabilities, and hire, coach, and develop the team.

Defines and implements cybersecurity architecture and administration processes for multi-domain cloud environments. Automates Continuous Authorization to Operate processes, evaluates cloud enhancements against RMF and DoD STIG controls, supports DevSecOps security assessments, and manages continuous monitoring. The role requires collaboration across infrastructure teams, Agile delivery, cloud security expertise, authorization activities, and mentoring or supervising team members.

Designs and estimates integrated commercial security system solutions for strategic accounts. Responsibilities include reviewing bids, preparing proposals and specifications, coordinating with sales, operations, installers, and authorities, ensuring code compliance, supporting commissioning, conducting QA/QC reviews, and improving project processes. Systems include access control, CCTV, intrusion detection, and fire alarms.

Owns and develops security-critical authentication software across Windows, macOS, Linux, mobile, and cloud platforms. Responsibilities include Rust-based Windows authentication components, Python Bluetooth services, cryptography, PKI, certificate logon, identity protocols, backend features, protobuf communication, threat modeling, mTLS, release packaging, and cross-platform testing. The role requires deep Windows internals and authentication expertise, applied cryptography knowledge, and strong Rust and Python skills.

Support, secure, troubleshoot, and optimize enterprise network infrastructure, including Cisco and Alcatel switches, Palo Alto firewalls, LAN/WAN, wireless, VoIP, and Microsoft Teams Phone. Responsibilities include network upgrades, monitoring, incident response, security controls, documentation, vendor coordination, and root-cause analysis. The role requires occasional after-hours and weekend maintenance or critical incident support.

Design and operate secure enterprise access to approved AI tools and model endpoints through web gateways, proxies, CASB, API gateways, and AI security controls. Implement routing, authentication, authorization, DLP, data inspection, policy enforcement, monitoring, and performance optimization for AI traffic. Partner with security, infrastructure, legal, risk, and application teams to onboard AI use cases, troubleshoot access and latency issues, develop reusable architectures, and support governance, auditability, and regulatory compliance.

Designs, implements, and improves secure enterprise and cloud environments. Responsibilities include cyberattack prevention and response, security automation, SIEM and AWS monitoring, vulnerability management, packet and log analysis, A&A documentation, NIST 800-53 control assessment, risk mitigation, POA&M development, continuous monitoring, and security compliance. The role also supports IDS/IPS, penetration testing, security dashboards, and cloud application approval processes.

Build and operate secure, reliable Azure GPU infrastructure for distributed AI training and reinforcement-learning workloads. Develop fleet-level automation, infrastructure-as-code, remediation, drift detection, and deployment tooling. Troubleshoot multi-node, multi-GPU, networking, performance, and reliability issues while translating ambiguous research needs into production solutions. Partner with engineers, researchers, and stakeholders on architecture, security, and delivery decisions, and contribute through code reviews, technical collaboration, and mentoring.