Top Security Engineer Jobs

Design, configure, and maintain security controls across endpoints, networks, applications, and cloud; investigate and remediate complex security issues; monitor threats and vulnerabilities; mentor junior engineers; collaborate with IT and business partners to embed security and communicate risks to stakeholders.

Lead Information Systems Security Engineer responsible for designing, building, and sustaining DSCA's security automation architecture in AWS. Translate RMF/NIST/DISA STIG regulatory requirements into Policy-as-Code and automated operational code. Serve as lead technical authority for enterprise-level cloud security engineering, configuration management, compliance validation, and orchestration.

Entry-level Information Security Engineer role to build and scale internal security systems, analyze security telemetry, design and implement detection technologies, perform risk analysis on infrastructure, and execute security engineering projects to improve intrusion detection, scanning, testing, and response for Appian's cloud and AI platform.

Participate in live security operations, cloud architecture defense, and compliance automation. Execute continuous monitoring, assess security risks and vulnerabilities across SaaS/PaaS/IaaS, design automation for control evaluations, and collaborate with cross-functional teams to advance Appian's global information security program.

Build and own end-to-end authentication and authorization for the member platform, implement delegated/agent-based access and application-layer encryption, drive threat modeling and remediation, write RFCs and lead design reviews, and ship production code that protects sensitive member data.

Lead product security strategy and hands-on implementation to protect a large AI platform. Design and build anti-abuse features (Sybil resistance, bot detection, reputation systems), perform threat modeling and architecture reviews, collaborate with product and infrastructure teams on secure APIs and identity, create secure-by-default tooling, respond to incidents and run postmortems, and mentor engineers in secure coding and operational security.

Perform DoD cybersecurity A&A documentation, apply DISA STIGs, run vulnerability testing (ACAS, red/blue team), conduct risk assessments, serve as ISSO, analyze combat-system connectivity, develop IAVM plans, use MBSE for cybersecurity analysis, and support policy and requirements development for Navy afloat/tactical systems.

Partner with product and platform teams to embed secure-by-design practices, build and deploy security tooling and application primitives, collaborate on platform mitigations, and help lead incident response efforts to raise the company's security posture.

Lead security for the full stack: design secure architectures, build CI/CD and IaC tooling, run threat modeling, red-team/pen tests, incident response, and operate the bug bounty program to prevent and remediate vulnerabilities.

Lead IIoT product security architecture and governance across the device lifecycle. Define secure hardware/firmware controls, enforce industrial security standards, perform threat modeling and risk management, coordinate vulnerability response and supply chain security, and advise cross-functional teams during incidents and product design.

Serve as a Staff-level Level 3 escalation and incident commander for APTs, ransomware, insider and cloud compromises. Lead threat hunting across endpoint, network, identity, and cloud; operationalize threat intelligence into SIEM/EDR/SOAR detections; automate triage and response workflows; run post-incident reviews; mentor team members; and participate in a 24/7 on-call incident response rotation.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Design, operate, and support HashiCorp Vault-based secrets and encryption management across cloud environments. Build Vault namespaces and CI/CD integrations (Terraform, Git, Jenkins), monitor with DataDog/Splunk, onboard applications, perform upgrades/maintenance, and enforce security, compliance, and cloud best practices while collaborating with cross-functional teams.

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Implement and maintain GRC solutions, evaluate and configure security controls, inspect system configurations for compliance, analyze machine-generated log/event data, collaborate with stakeholders to remediate risk, and support continuous monitoring and accreditation processes. SES.2 hires take on broader solution development and stakeholder/priority management.

Designs and implements security features and information assurance requirements for servers, workstations, and networks. Analyzes network topology and vulnerabilities, monitors IDS/firewalls and SIEMs, develops documentation and recommendations, supports regulatory reviews, and provides security engineering and integration services to customers.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Design and operate cloud infrastructure security for multi-tenant environments: architect multi-account AWS isolation, harden Kubernetes, deploy CSPM, enforce IaC guardrails, implement least-privilege IAM across platforms, and build incident response and logging pipelines for enterprise customers.

Implement and operate security controls on AWS, perform vulnerability scanning and remediation, support ATO evidence for NIST 800-53/FedRAMP, run continuous-monitoring and threat-detection tooling, partner with DevSecOps to automate security, and support incident response and forensics.

Responsible for reducing IT security risk and responding to incidents by enforcing security policies, administering and troubleshooting security tools, documenting procedures, researching mitigation controls, and monitoring/advising on security issues across servers, networks, cloud, authentication, encryption, and applications.

Lead design and implementation of security architectures, drive incident response and risk management, manage SOC1/2 compliance and third-party risk requests, mentor engineers, integrate AI tools to improve security operations, and coordinate cross-functional security initiatives.