Top Security Engineer Jobs

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Produce client briefings, mentor junior operators, and improve operational tooling and efficiency.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Provide written and oral client briefings, mentor junior operators, and create scripts to improve operational efficiency.

Conduct offensive cyber operations, red team and penetration tests, network exploitation, malware analysis, and tool development. Analyze network/system weaknesses, brief clients and management, and train junior operators to improve operational tradecraft and efficiency.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Build and own Corporate IT and security for a research org: design endpoint/device management, implement Zero-Trust IAM, secure communications and email, enable secure collaboration with external AI labs, and turn compliance into research enabler while remaining a hands-on operator.

Design and operate secure research infrastructure for multi-cloud, high-compute AI workstreams. Harden CI/CD and IaC, implement supply-chain protections (SBOM, signing), sandbox automated agents with least privilege, enforce zero-trust segmentation and data protection, and enable compliance to support partnerships with frontier model providers.

Senior network/security engineer responsible for Palo Alto firewall and Panorama administration, proxy engineering, DLP and SCM integration, packet-level troubleshooting (tcpdump/Wireshark), SIEM log correlation (Splunk/ELK), Zero Trust network design, and ensuring IRS/NIST boundary protection compliance. Leads firewall normalization, Panorama 12.x integration with Strata Cloud Manager, and DLP plugin upgrades.

Protect Lambda's AI cloud by building and tuning SIEM/EDR detections, responding to incidents, hardening production systems, reviewing architectures and code, and shipping security tooling (Python/Go). Partner across engineering teams to mature detection, incident response, and automation for AI-specific threats.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Provide systems, technical, and security engineering for Navy surface weapons, combat, and fire control systems. Develop integration and design documents, implement security measures, produce Program Protection Plans, derive and manage requirements, and coordinate changes with stakeholders to protect critical technologies.

Design, deploy, and manage cybersecurity tools and monitoring across IT environments. Lead evaluations, proofs-of-concept, and integration of security technologies. Support incident response, forensics, vulnerability assessments, documentation, and security policy development. Train infrastructure staff and coordinate with Corporate Security.

Design, configure, and maintain security controls across endpoints, networks, applications, and cloud; investigate and remediate complex security issues; monitor threats and vulnerabilities; mentor junior engineers; collaborate with IT and business partners to embed security and communicate risks to stakeholders.

Lead Information Systems Security Engineer responsible for designing, building, and sustaining DSCA's security automation architecture in AWS. Translate RMF/NIST/DISA STIG regulatory requirements into Policy-as-Code and automated operational code. Serve as lead technical authority for enterprise-level cloud security engineering, configuration management, compliance validation, and orchestration.

Entry-level Information Security Engineer role to build and scale internal security systems, analyze security telemetry, design and implement detection technologies, perform risk analysis on infrastructure, and execute security engineering projects to improve intrusion detection, scanning, testing, and response for Appian's cloud and AI platform.

Participate in live security operations, cloud architecture defense, and compliance automation. Execute continuous monitoring, assess security risks and vulnerabilities across SaaS/PaaS/IaaS, design automation for control evaluations, and collaborate with cross-functional teams to advance Appian's global information security program.

Build and own end-to-end authentication and authorization for the member platform, implement delegated/agent-based access and application-layer encryption, drive threat modeling and remediation, write RFCs and lead design reviews, and ship production code that protects sensitive member data.

Lead product security strategy and hands-on implementation to protect a large AI platform. Design and build anti-abuse features (Sybil resistance, bot detection, reputation systems), perform threat modeling and architecture reviews, collaborate with product and infrastructure teams on secure APIs and identity, create secure-by-default tooling, respond to incidents and run postmortems, and mentor engineers in secure coding and operational security.

Perform DoD cybersecurity A&A documentation, apply DISA STIGs, run vulnerability testing (ACAS, red/blue team), conduct risk assessments, serve as ISSO, analyze combat-system connectivity, develop IAVM plans, use MBSE for cybersecurity analysis, and support policy and requirements development for Navy afloat/tactical systems.

Partner with product and platform teams to embed secure-by-design practices, build and deploy security tooling and application primitives, collaborate on platform mitigations, and help lead incident response efforts to raise the company's security posture.

Lead security for the full stack: design secure architectures, build CI/CD and IaC tooling, run threat modeling, red-team/pen tests, incident response, and operate the bug bounty program to prevent and remediate vulnerabilities.

Lead IIoT product security architecture and governance across the device lifecycle. Define secure hardware/firmware controls, enforce industrial security standards, perform threat modeling and risk management, coordinate vulnerability response and supply chain security, and advise cross-functional teams during incidents and product design.

Lead governance and security for enterprise Power Platform: design controls, build automation and remediation using PowerShell/APIs, improve security visibility, partner with stakeholders, and mature operational processes across large-scale environments.

Serve as a Staff-level Level 3 escalation and incident commander for APTs, ransomware, insider and cloud compromises. Lead threat hunting across endpoint, network, identity, and cloud; operationalize threat intelligence into SIEM/EDR/SOAR detections; automate triage and response workflows; run post-incident reviews; mentor team members; and participate in a 24/7 on-call incident response rotation.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.