Top Security Engineer Jobs

Own end-to-end product security for an internet-connected battery fleet spanning hardware, firmware, software, and cloud. Responsibilities include threat modeling, design reviews, device identity, provisioning, code and OTA signing, authentication, certificate lifecycle, vulnerability analysis, attacker-oriented testing, security standards, tooling, and technical assessments for utility and certification engagements.

Designs, deploys, tests, and maintains perimeter security systems for a US Navy enterprise transport network. Configures firewalls, DMZ infrastructure, SSL inspection, and Cisco switches; supports device replacement, refresh cycles, outage resolution, root cause analysis, risk mitigation, vendor coordination, and engineering change orders. Maintains operating procedures and participates in security working groups. This is an onsite role in Suffolk, Virginia, requiring an active Secret clearance and US citizenship.

Designs and implements enterprise network security architecture across a large DoD environment. Leads segmentation, zero-trust, access control, firewall, intrusion prevention, encryption, secure connectivity, wireless security, and cloud integration initiatives. Evaluates security gaps, directs complex modernization projects, develops implementation and migration plans, supports RMF and compliance activities, and provides technical leadership, mentoring, stakeholder briefings, and comprehensive architecture and operational documentation.

Deploys, integrates, and sustains enterprise Forescout Network Access Control solutions supporting national security missions. Responsibilities include developing access-control policies, configuring CounterACT appliances, integrating security and network-management platforms, troubleshooting network and endpoint issues, supporting DoD Comply-to-Connect initiatives, and creating technical documentation and engineering designs. The role also collaborates with government stakeholders and engineering teams to improve network visibility, endpoint compliance, security, and operational resilience.

Leads development and architectural evolution of an AI-powered code security scanner. Responsibilities include building user-facing dashboards and workflows, implementing secure authentication, extending backend scanning and orchestration services, integrating LLM-based security analysis, automating vulnerability validation and reporting, enhancing scalability, and mentoring junior engineers.

Lead development and architectural evolution of an AI-powered code security scanner. Build secure user-facing applications, reporting dashboards, backend orchestration and scanning services, LLM integrations, vulnerability analysis workflows, authentication, authorization, and cloud-native solutions. Mentor engineers and drive platform modernization, scalability, automation, testing, and long-term enhancements for enterprise applications in regulated environments.

Designs and implements cybersecurity controls for containerized, Kubernetes, microservices, cloud, and DevSecOps environments. Responsibilities include security monitoring, log analysis, threat and risk assessment, vulnerability assessments, incident response, compliance with RMF, NIST, FedRAMP, and related standards, and collaboration with engineering, development, and compliance teams. Requires active TS/SCI clearance with polygraph and at least seven years of cybersecurity engineering experience.

Designs and executes end-to-end red team and adversary simulation campaigns across applications, identity, cloud, and enterprise environments. Identifies and chains vulnerabilities, develops custom tooling and payloads, bypasses security controls, and emulates advanced persistent threat actors. Partners with detection, response, engineering, and blue teams on purple team exercises and remediation. Serves as a technical escalation point, communicates business risk to executives, and mentors other security engineers.

Administers and evaluates enterprise security tools, including MDM and NAC; monitors SIEM systems, logs, and network traffic; supports incident response, vulnerability management, security investigations, compliance reviews, and device hardening. Develops security architecture, policies, documentation, reports, and remediation strategies. Provides security guidance to infrastructure teams and business units while assessing new threats, technologies, and security controls.

Maintains and secures network and telecommunications infrastructure, including routers, switches, firewalls, VoIP systems, and other security devices. Provides Level 2 network and telecom support, monitors infrastructure, performs security scans and performance testing, conducts capacity planning, maintains security updates, troubleshoots issues, identifies root causes, and coordinates vendor support and installations.

Designs, implements, operates, and improves application security controls across enterprise applications and platforms. Responsibilities include securing SDLC and CI/CD pipelines, managing WAF and API protections, hardening containers, conducting vulnerability assessments, developing application monitoring, investigating security incidents, and partnering with development, DevOps, operations, and IT leadership.

Designs and scales AI-driven security GRC automation, including compliance evidence collection, control testing, risk assessment, audit preparation, and workflow integration. Builds scripts, bots, APIs, and AI/LLM solutions; integrates GRC platforms with security and IT systems; establishes quality controls and guardrails; monitors automation risk and performance; and partners with technical and business stakeholders to improve security compliance maturity.

Build and operate Base’s identity and authorization platform, including Okta workforce SSO, cloud federation, entitlements-as-code, workload identity, PKI, authentication policies, and least-privilege authorization primitives. The role partners with IT, security, and application teams to provide secure identity, groups, and tokens across internal systems, cloud infrastructure, services, and field devices.

Lead secure design reviews, threat modeling, and security risk assessments for products and features. Partner with engineers, product managers, and designers to develop secure architectures, provide remediation guidance, promote security culture through training and mentoring, oversee vulnerability management, and explain security events. Build security tooling, automate secure development practices, and establish architectural patterns and processes that reduce security risk across DigitalOcean’s engineering organization.

Lead and evolve the insider threat program by engineering detection, automating investigation workflows, tuning UEBA/SIEM/DLP/UAM/SOAR detection content, conducting threat hunting and DFIR, collaborating with HR/Legal, and using data analytics (e.g., Pandas) to investigate anomalous activity and reduce internal risk.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Build and execute Latent’s security roadmap across cloud, AI, data, application, product, IT, and incident response. The role develops security automations, IAM workflows, secure SDLC practices, AWS and CI/CD hardening, vulnerability management, endpoint controls, and incident detections. It partners closely with engineering, product, legal, GTM, IT, and employees to secure healthcare and AI systems while enabling rapid business growth.

Develops and validates security controls protecting organizational information. Responsibilities include vulnerability management, Python-based security automation, penetration testing, risk assessment, application security, cloud security, and CI/CD security integration. The engineer collaborates with development and infrastructure teams to identify risks, prioritize remediation, validate controls, and improve defenses. The role is on-site in Eau Claire, Wisconsin, with occasional overtime and on-call support.

Leads enterprise technology delivery for ServiceNow Security Incident Response and Data Loss Prevention capabilities. Oversees engineering teams, platform implementation, integrations, workflow automation, roadmaps, governance, operational readiness, risk management, compliance, and executive communications. Partners across cybersecurity, data protection, technology, risk, compliance, legal, vendors, and business teams to deliver scalable security workflows, case management, reporting, and continuous platform improvements.

Demonstrate and deploy autonomous drone dock solutions for correctional facilities. Conduct discovery, site assessments, product demonstrations, trials, proofs of concept, and customer deployments while integrating systems with facility security operations. Support FAA airspace approvals, cybersecurity reviews, and operational planning. Gather customer feedback, develop success plans and SOPs, and collaborate with sales, engineering, product, and customer success teams. The role requires extensive travel, correctional security expertise, drone knowledge, and the ability to operate in high-pressure secure environments.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Leads implementation and integration of Zero Trust application and network security controls across enterprise and DoD environments. Develops secure infrastructure, troubleshoots complex network issues, configures firewalls and application delivery platforms, implements micro-segmentation, and improves system security, reliability, and availability. The role also leads cross-functional teams and supports mission-critical national security networks.

Protect production and non-production systems, networks, and data through security monitoring, vulnerability remediation, incident investigation, security testing, and policy development. The role deploys and troubleshoots security tools, performs server hardening and penetration tests, scans for unencrypted payment-card data, supports compliance audits, and automates security evidence collection and repeatable processes.

Develop and improve Tailscale’s security and privacy features, identify and resolve technical vulnerabilities, conduct security audits, perform threat modeling, and guide engineering teams on secure coding. The role spends at least half its time writing software and requires knowledge of application security, web vulnerabilities, client-side security, API flaws, cryptography, and networking protocols.

Own detection and response across infrastructure by building log pipelines, SIEM detections, alert runbooks, response SLAs, and incident processes. Lead investigations and containment, automate identity and access monitoring, improve detection and containment times, and coordinate with engineering, customers, and vendors. The role requires building a security operations function from scratch, managing detections as code, and exercising independent judgment in a small organization.