Top Security Engineer Jobs

Run and operationalize a threat-intelligence program for maritime/autonomy defense: track nation-state/APT adversaries, convert indicators/TTPs into detections and hunts, build ingestion/enrichment pipelines, fuse external intel with internal telemetry, author finished intelligence, perform infrastructure and malware analysis, and design deception and automation for high-fidelity alerts.

Lead enterprise incident response as senior incident commander across hybrid and multi-cloud environments. Own incident readiness, runbooks, exercises, and after-action governance. Drive detection engineering and telemetry in AWS, coordinate containment/recovery, improve detection quality, and brief executive leadership. Mentor teams and operationalize compliance and measurable response outcomes.

Lead application security and DevSecOps across product, cloud, and enterprise systems. Implement secure SDLC practices (threat modeling, code reviews, SAST/DAST/SCA), own software supply-chain security (SCA, SBOMs, signing), govern secrets and application controls, harden self-hosted deployments across AWS/Azure/on-prem, and embed scalable security tooling with engineering teams.

Build and secure AI-powered applications, agents, and integrations for company teams; define and own AI governance, inventory, monitoring, and DLP; teach safe AI usage and set company-wide guardrails; enable non-technical teams to adopt sanctioned, secure AI solutions with reliable backends, observability, and evaluative quality checks.

Design, develop, and operate high-fidelity detection content and security data pipelines across endpoint, cloud, network, identity, and DLP telemetry. Implement detection-as-code with CI/CD and automated testing, map coverage to MITRE ATT&CK, build SOAR playbooks for automated response, support incident response, and partner across teams to close visibility gaps.

Own continuous cloud security posture across commercial AWS and AWS GovCloud: detect and remediate misconfigurations, run cloud vulnerability management, build Terraform-based guardrails and policy-as-code, design least-privilege IAM and secrets/key management, build cloud-native detections and automated remediation, and support SOC investigations while mapping controls to government and commercial frameworks for audit readiness.

Provide security oversight for network and mainframe systems, evaluate security architecture, recommend/security hardware and software, perform security audits and penetration testing, support disaster recovery, and assist in creating and reviewing information security policies and standards.

Lead vulnerability management strategy and execution across cloud and hybrid environments. Own end-to-end vulnerability lifecycle, drive automation, perform data-driven prioritization with advanced SQL, and partner with engineering, risk, and incident response teams. Provide hands-on engineering, on-call support, mentoring, and offensive security research to reduce exposure and improve operational reliability.

Manage identity and access lifecycle, administer security technologies (Entra, Okta, endpoint/email protection), monitor alerts, perform risk assessments, support incident investigations, audits, policy development, and security hardening across corporate and community systems.

Perform enterprise risk assessments of networks, systems, and business applications. Collaborate with system owners and stakeholders to analyze, test, and document security controls across the agency environment.

Assess cloud designs and mobile features for security issues; evaluate builds for security best practices; design secure cloud services and automated security test frameworks; triage vulnerabilities; use SAST/DAST and AI tools; ensure regulatory compliance; engage third-party pentesting, red team, and threat modeling.

Operate within a Managed Security Services environment to perform incident response, vulnerability scanning and remediation oversight, manage security tools (SIEM, IDS/IPS, malware defenses), automate analysis and remediation, maintain policies and SOPs, provide training and audit support, and ensure SLAs are met.

Design, implement, and maintain enterprise security architecture; run vulnerability scans and penetration tests; monitor SIEM and respond to incidents; manage IAM, DLP, encryption, and endpoint hardening; ensure compliance (CMMC, SOC 2, GDPR, PCI-DSS); provide security training and incident reporting.

Design, implement, monitor, and manage DLP and Microsoft Purview solutions and DSPM capabilities. Develop and enforce data protection policies, monitor endpoints/cloud/on-premises, manage SIEM/EDR/XDR and other security tooling, support incident response, and collaborate with SOC, architects, and IT teams to strengthen data governance and compliance.

Design and implement security controls across product, platform, and infrastructure. Threat model designs, review code and architectures, find and remediate vulnerabilities, improve detection and response, and automate security workflows and developer-friendly tooling to scale security across the company.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Secure enterprise information by monitoring, implementing, and reviewing security systems. Evaluate security initiatives, identify and remediate vulnerabilities, develop global security strategies, perform risk assessments, and implement McAfee ePolicy Orchestrator policies.

Perform offensive and defensive security testing for vehicle software and backend systems, lead V&V efforts, set up penetration test benches, audit code, run fuzzing and vulnerability research, prioritize and drive mitigations, and work with internal teams and customers to develop secure automotive products per ISO 21434 and UN R155.

Secure cloud infrastructure and data pipelines for AI research and creator platform. Harden GCP/Kubernetes/containers, enforce IAM and secrets management, protect software supply chain, run op-sec program (threat modeling, red teams, IR), and ensure compliance for creator and training data.

Provide security oversight for network and mainframe systems to ensure confidentiality, integrity, and availability. Evaluate security architecture, recommend hardware/software, perform risk assessments and penetration testing, support security projects and disaster recovery, and assist in policy and standards creation.

Design, administer, and harden Okta-based identity architecture and SSO integrations; implement RBAC and access governance; manage cross-platform MDM and OS hardening; integrate identity telemetry with SIEM; implement privileged access and secrets controls; support compliance (CMMC, FedRAMP, NIST, ITAR) and audit evidence collection.

Install, configure, maintain and troubleshoot network security devices (LAN/WAN/MAN). Test and modify security configurations, provide consulting to state agencies, fulfill service-desk work orders, and maintain device OS/app security. Requires hands-on experience with Cisco ASA 5500-X and/or Juniper MAG and SRX devices. Must pass background check, be on-call and available onsite within 30 minutes, work flexible hours, and meet physical and driving requirements.

Provide Tier 2 network security support for shared firewall environments: configure and maintain Cisco, Juniper, and Fortinet firewalls; perform code upgrades, VPN setup, MACD, performance and rule analysis; validate designs, recommend minor architecture changes, and troubleshoot end-to-end network and application connectivity with 24x7 production support.

Design, build, and maintain enterprise security tooling and AI safety guardrails. Secure identity systems, endpoints, and telemetry; automate GRC evidence gathering; support vulnerability management; defend against advanced threats and collaborate cross-functionally to maintain enterprise security posture.

Lead and execute incident response, build and tune global detection pipelines for cloud and Kubernetes, architect AI-native Autonomic Security Operations, analyze multi-language code for vulnerabilities, mentor engineers, and participate in on-call rotations.