Top Security Engineer Jobs

Leads F5’s enterprise incident response and cyber crisis management program, coordinating high-severity cyber and product security incidents from detection through recovery and post-incident review. Owns response governance, playbooks, metrics, executive reporting, tabletop exercises, and operational improvements. Provides technical leadership across cloud, identity, endpoint, application, API, Kubernetes, AI, and product security environments while coordinating engineering, legal, privacy, communications, customer support, and business stakeholders.

Partners with account executives to support public-sector customers through technical discovery, solution design, presentations, demonstrations, and proof-of-concept engagements. Provides expertise across Cisco’s security portfolio, including firewalls, ISE, Secure Access, and Duo. Builds relationships with technical and executive stakeholders, supports territory growth, represents Cisco at events, collaborates with internal and channel teams, and uses AI tools to improve discovery and demo processes.

Performs cybersecurity conformity assessments for hardware and software against EU regulations, prepares technical documentation, supports security practices during product development and production, maintains SBOMs, tracks vulnerabilities, and translates regulatory requirements for technical and business stakeholders.

Leads enterprise cybersecurity engineering across incident response, threat detection, identity and endpoint security, vulnerability management, cloud security, architecture, compliance, disaster recovery, and cyber resilience. Owns Microsoft security technologies, security monitoring, risk remediation, vendor relationships, security awareness, and executive reporting. Partners with infrastructure, IT, business, and external teams to strengthen controls, support audits, secure cloud modernization, and improve organizational cybersecurity maturity.

Administer and maintain security platforms, configure policies and access, remediate coverage gaps and platform issues, implement upgrades and integrations, develop basic automation, and support incident response through emergency security changes. The role also mentors Associate Engineers and participates in formal after-hours on-call rotations and material incident response activities.

Lead 24/7 SOC monitoring, detection, triage, incident response, PKI certificate lifecycle operations, firewall threat-intelligence integrations, and blockchain-intelligence tooling. Coordinate with Platform Reliability during Severity 1 security and availability events, tune security platforms, and mentor on-shift Security Operations Engineers.

Performs application security assessments, DAST with Burp Suite Enterprise, SAST with Veracode, vulnerability analysis, remediation guidance, secure software development support, architecture reviews, compliance monitoring, and security reporting for a federal customer. The role secures web applications, APIs, and supporting infrastructure while supporting enterprise vulnerability management and federal cybersecurity requirements.

Own enterprise security engineering across endpoint privilege management, EDR, SSPM, CAASM, application control, and AI tool guardrails. Develop detection and containment automation, monitor telemetry and SaaS configuration drift, validate asset coverage, integrate security signals through APIs, and support threat triage. Mentor engineers, provide escalation support, and create technical runbooks and operational playbooks. The role requires strong enterprise cybersecurity experience, scripting, operating system knowledge, security tooling expertise, and cross-functional communication.

Own and advance cybersecurity for satellites, flight software, ground systems, mission networks, communication links, and AWS infrastructure. Responsibilities include security architecture, threat modeling, vulnerability management, incident response, IAM, SIEM detection engineering, network defense, cloud security, DLP, security assessments, awareness training, and compliance with CMMC Level 2, NIST 800-171, and ITAR/EAR requirements. The role collaborates with aerospace, software, systems, and compliance teams and requires expertise in mission-system security.

Designs, installs, tests, troubleshoots, repairs, and maintains physical security systems, including access control, video surveillance, intrusion detection, gates, barriers, and turnstiles. Develops installation and engineering plans, reviews system logs, performs fault isolation, configures Lenel and Milestone/AXIS systems, and supports CONUS and OCONUS installation and maintenance activities.

Own security engineering for classified information systems across authorization boundaries, from security architecture through Assessment and Authorization and continuous monitoring. Conduct vulnerability scans, risk analysis, patching, STIG/SRG hardening, configuration reviews, incident response, and remediation. Develop security policies, support cloud security environments, and ensure compliance with RMF, DCSA, DSS, and intelligence-community requirements.

Maintains and develops cybersecurity infrastructure across networks, servers, workstations, applications, and cloud environments. Responsibilities include firewall administration, vulnerability scanning, SIEM and intrusion detection, security architecture, access auditing, SOX and PCI compliance, policy development, disaster recovery planning, security monitoring, and security awareness training. The role also leads concurrent projects, evaluates security products, collaborates with IT teams, and mentors security administrators and contractors.

Administer, configure, troubleshoot, and improve enterprise identity and access management technologies. Support identity lifecycle management, authentication, federation, privileged access, RBAC, MFA, SSO, and compliance controls across hybrid IT and operational technology environments. Investigate identity-related incidents, maintain IAM platform reliability, support integrations and upgrades, document systems and procedures, and collaborate with cybersecurity, infrastructure, HR, compliance, and business stakeholders.

Reviews and assesses classified information systems under the Risk Management Framework, evaluating security plans, controls, compliance, and risk documentation. Conducts security design reviews, threat and risk assessments, site inspections, and incident response support. Develops inputs for POA&Ms, traceability matrices, and risk assessment reports while advising government and technical stakeholders on information security requirements.

Design and build AI-powered cybersecurity platforms that ingest and normalize massive security telemetry, correlate events, predict threats, and generate explainable findings. Develop Python backend services, distributed storage systems, and AIDevOps pipelines for rapid experimentation. Integrate foundation models, agentic systems, RAG, embeddings, and graph-based models into analyst workflows. Collaborate with product teams, security experts, and engineers to deliver scalable, trusted threat detection and automation capabilities.

Designs, configures, deploys, tests, and supports secure WAN and LAN networks. Responsibilities include optimizing network performance and data flow, implementing load balancing, VPNs, firewalls, and NAT, monitoring latency, troubleshooting complex issues, supporting mission operations, and coordinating with systems engineering teams. The role also involves deploying hardware, defining requirements, leading large-scale efforts, and working rotating 24/7 shifts.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-to-cloud vulnerabilities, and automate security controls. The role supports CNAPP configuration, infrastructure-as-code and policy-as-code integration, secure coding standards, vulnerability remediation, cloud workload protection, and enterprise security architecture initiatives across technology and governance teams.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-code and cloud-workload findings, and automate security controls. Implement CNAPP, CSPM, IaC, and policy-as-code solutions using Terraform or comparable tools. Establish secure coding and cloud security standards aligned with NIST, CIS, and ISO frameworks while producing architecture diagrams and implementation plans.

Develop and manage DevSecOps security services, secure CI/CD pipelines, assess cloud security posture, correlate source-to-cloud vulnerabilities, and automate security controls. The role supports CNAPP, CSPM, infrastructure as code, policy as code, secure coding, cloud workload protection, and vulnerability remediation while contributing to enterprise security standards, architecture, and implementation plans.

Designs, deploys, and secures Microsoft Windows infrastructure for customer environments. Responsibilities include Active Directory and Group Policy management, Windows hardening, RBAC and least-privilege implementation, endpoint protection deployment, security assessments, remediation, patch processes, documentation, and customer knowledge transfer. The role requires extensive Windows security experience and may involve up to 30% travel.

Designs, develops, and validates secure embedded software, firmware, drivers, and platform security features for commercial PCs. Responsibilities include secure boot, cryptography, device identity, firmware updates, threat modeling, vulnerability remediation, security reviews, debugging, testing, documentation, CI/CD security automation, and mentoring engineers. Collaborates across hardware, BIOS, operating system, firmware, cybersecurity, and product teams to deliver secure Arm-based embedded systems.

Leads the design, development, testing, integration, and delivery of complex security software applications. Provides architecture leadership, evaluates designs for quality and compliance, integrates new technologies, manages development partners, troubleshoots application issues, and mentors junior engineers. The role focuses on Windows application development, software architecture, security features, and cross-functional project leadership.

Perform Common Criteria certification activities for Dune-based devices by translating security requirements into technical controls, evidence, tests, and remediation plans. Configure and troubleshoot firmware, networking, authentication, cryptography, and device services in certification environments. Develop automated tests, scripts, and repeatable workflows; investigate failures; document procedures and results; and collaborate with firmware, security, engineering teams, and external evaluation laboratories to resolve issues and maintain certification schedules.

Provides technical pre-sales leadership for data security solutions, including demos, proofs of concept, architecture workshops, and secure cloud or hybrid deployments. Advises customers on data security posture, Microsoft Purview, AI application security, and scalable architectures. Builds developer and platform-lead relationships, resolves technical blockers, develops technical win strategies, and collaborates with product engineering. Represents Microsoft in customer and developer communities.

Leads System Security Engineering integration across multiple FBM Reentry programs. Responsibilities include developing estimates and proposals, maintaining roadmaps, analyzing budgets and variances, coordinating schedules and status reporting, integrating cross-functional teams, and supporting technical program reviews. The role works with Navy customers, finance and planning teams, cyber teams, and program leadership to plan and execute engineering scope while managing technical, cost, and schedule constraints.