Top Security Engineer Jobs

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Administer and maintain Tenable Suite (Security Center, Nessus Scanners, Nessus Manager) on Linux, perform vulnerability scans and analysis, prioritize and remediate findings with IT teams, generate reports, monitor alerts and incidents, and provide training and status reporting to stakeholders.

Lead Splunk-based data collection, ingestion, and monitoring efforts. Troubleshoot and remediate system and data issues, deploy/manage Splunk add-ons and forwarders, implement role-based access, produce deployment and accreditation documentation, and ensure compliance with DoD C&A and security guidance.

Design and implement Oracle IAM solutions across environments. Configure OAM/OAAM, customize login modules and admin UIs, implement federation, configure roles/policies in OIM, integrate applications via LDAP/database connectors, perform user loads/reconciliation, and provide knowledge transfer to BCA staff.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Design, implement, and maintain secure systems in classified environments by integrating security throughout the SDLC. Lead RMF A&A activities to achieve and maintain ATOs, perform DISA STIG hardening and SCAP vulnerability assessments, automate compliance, support continuous monitoring, and coordinate remediation with development and infrastructure teams. Engage with customer security stakeholders and support incident response and forensic activities.

Lead design, deployment, and sustainment of Comply-to-Connect (C2C) solutions. Manage appliances, servers, and infrastructure; produce network architecture diagrams; evaluate upgrades; monitor and troubleshoot performance; support A&A and system accreditation; collaborate with cross-functional teams and customers to integrate and communicate technical requirements.

Implement and design IAM solutions, gather requirements, configure SSO/SAML integrations (customer and internal), troubleshoot authentication issues, document designs, and support adoption of authentication technologies.

Design, implement, and document Identity and Access Management solutions and SSO/SAML integrations. Gather requirements, configure PoC/dev environments, resolve authentication issues, ensure platform stability under load, coach teams, and research new authentication technologies while supporting internal users and stakeholders.

Design, evaluate, and secure complex LAN/WAN and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model and test solutions, perform MTBF/MTTR analyses, analyze vulnerabilities, evaluate architectures, research COTS/GOTS, optimize wired and wireless networks, develop security documentation, and ensure compliance with government security requirements.

Provide systems engineering and programmatic support to the U.S. Navy FMS directorate, both on-site and off-site. Oversee system security solution development and compliance with TIG and Anti-Tamper frameworks, support risk management, develop and review SEPs/SEMPs and vendor AT plans, produce technical briefs and correspondence, and maintain program schedules.

Design, implement, and monitor secure on‑prem and cloud/hybrid systems; enforce NIST 800‑53 controls and SSPs for ATO; perform vulnerability scanning/remediation, log aggregation and SIEM correlation, incident response, IAM enforcement, and produce audit-ready security documentation.

Design, implement, validate, and maintain standardized endpoint security baselines across Intune, MECM, and Jamf Pro for Windows and macOS. Configure Defender, BitLocker/FileVault, ASR rules, Conditional Access, and compliance policies; test and rollout baselines, perform impact assessments, troubleshoot policy conflicts, document procedures, and collaborate with cybersecurity, RMF/ISSO, and engineering teams to meet federal security requirements.

Designs, deploys, and optimizes AI-driven security workflows and agents (using Microsoft Copilot tools) to automate threat detection, incident response, and alert enrichment. Develops prompts and automations for threat hunting, triage, compliance reporting, creates dashboards (Splunk, Sentinel), maintains runbooks/SOPs, participates in on-call rotations, and collaborates with SOC, engineering, and GRC teams.

Provide operational support, implementation, and strategic development of IAM solutions (PAM, SSO, IGA, CIAM, MFA, AD). Configure and tune tools, drive automation, mentor junior engineers, participate in on-call rotation, troubleshoot access incidents, and ensure alignment with security best practices and compliance.

Lead product security activities for vehicle and cloud products: perform ECU- and feature-level threat assessments and risk analyses, derive security requirements, develop and run manual and automated security tests on SIL/HIL setups, validate fixes, and produce UN R155/CSMS-compliant documentation to support homologation. Collaborate with software, security architecture, and GRC teams to define controls and risk treatments and ensure security validation across the product lifecycle.

Define and decompose product security requirements, develop and run manual and automated security validation tests (functional and abuse tests) at vehicle, system, sub-system and ECU levels using SIL/HIL. Build test cases in multiple languages, document results for compliance (UN R155, ISO 21434), triage findings, collaborate with development teams to recommend and validate fixes, and align documentation with CSMS and GRC processes.

Design, deploy, and automate network security controls across enterprise, cloud, and retail edge environments. Implement ZTNA, NGFWs, microsegmentation, and firewall policy-as-code. Integrate identity and authentication frameworks, triage security events, produce documentation and RCAs, mentor engineers, and participate in on-call rotation to maintain resilient security posture.

Design, implement, and manage RACF-based logical security across z/OS environments. Administer user/group and resource profiles, enforce least-privilege for datasets and subsystems, perform access reviews and compliance audits, analyze SMF/RACF logs and SIEM alerts, investigate incidents, integrate mainframe security with enterprise IAM/SSO/MFA, and support encryption and key management.

Own and administer enterprise WAN/LAN/wireless and multi-vendor firewalls across on-prem and cloud, ensure network performance and 99% uptime, manage GCP org governance, support CMMC Level 2 and SOC 2 audit readiness, resolve Tier 2+ network incidents, maintain network documentation, and contribute to automation and hybrid cloud networking solutions.

Implement and maintain security controls across AWS GovCloud and hybrid networks; manage network security (firewalls, WAFs), SIEM integration, vulnerability management, and incident response; ensure compliance with DoD standards (STIGs, RMF, NIST 800-53); support continuous monitoring, audit readiness, and cross-team security improvements.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Lead architecture and execution of detection and response capabilities across AWS and broader infrastructure. Build AI-augmented detection/triage pipelines, design SIEM/SOAR ingestion and alerting frameworks, drive incident response for high-impact events, close detection gaps, mentor engineers, and set team standards for responsible AI usage.

Lead and perform advanced penetration tests across the banks global technology environment. Hunt for high-risk vulnerabilities, exploit chains, document findings, articulate risk to stakeholders, mentor junior engineers, and collaborate with security and business partners to improve detection and response.

Serve as lead for security of Special Access Program networks: develop A&A packages, perform RMF assessments, conduct vulnerability testing and audit reviews, implement STIGs/patching/scanning, support threat and risk assessments, and produce security documentation and training. Use ACAS, SCAP, XACTA, and eMASS to maintain compliance and reduce vulnerabilities.