Top Security Engineer Jobs

Design, review, and verify security for Cisco network devices across hardware, firmware, and software. Develop threat models, conduct architecture and code reviews, identify root weaknesses, create reusable security controls, and test implementations with reproducible evidence. Assess embedded and IoT device security using C/C++ review, Python tooling, CWE, MITRE EMB3D, and OWASP IoT frameworks. Collaborate globally with engineering teams, mentor others, prioritize risks, and potentially develop AI-enabled workflows, static-analysis rules, secure wrappers, and CI/CD guardrails.

Designs and manages security controls for AWS and Kubernetes environments, including sandboxing, infrastructure-as-code, cluster hardening, threat modeling, audits, CI/CD security, incident response, and compliance. The role collaborates with engineering and infrastructure teams, mentors engineers, and advocates for cloud security practices across the organization.

Lead multi-cloud security architecture, engineering, governance, continuous monitoring, threat defense, and security automation across AWS, Azure, and GCP. Design zero-trust controls, integrate CSPM, SIEM, SOAR, and vulnerability platforms, embed security into IaC and CI/CD pipelines, and manage federal A&A, SSP, SAR, POA&M, and continuous ATO artifacts. Serve as a technical liaison to agency leadership and Authorizing Officials while mentoring security engineers and aligning cloud security with federal compliance requirements.

Develop secure platform services and security features using Go, Scala, or Python; identify attack surfaces, harden products, debug system issues, and participate in security code and design reviews. Collaborate across engineering and product teams, contribute to secure coding guidelines, and assess AI-generated code and AI-powered features. The role offers mentorship in cryptography, threat modeling, distributed systems, API security, and system-level testing.

Designs, implements, maintains, and supports physical security and surveillance infrastructure across company facilities. Responsibilities include CCTV, access control, intrusion detection, alarm systems, network integration, troubleshooting, monitoring, risk assessments, compliance audits, policy development, and vendor coordination. Leads security infrastructure projects, manages documentation and budgets, and establishes global standards. The role requires approximately 30% domestic and international travel and is based in Jersey City, New Jersey.

Leads research, development, testing, and standardization of OT cybersecurity solutions for industrial control systems and critical infrastructure. Responsibilities include administering cyber infrastructure, assessing OT networks, conducting penetration testing and purple teaming, implementing security technologies, troubleshooting vulnerabilities, developing technical documentation and training, and supporting customers and internal teams. The role requires advanced hands-on cybersecurity experience, software development expertise, knowledge of IT/OT security frameworks, and occasional customer travel.

Design, build, and operate MongoDB Atlas features and distributed backend systems, with a focus on encryption, compliance, customer-managed keys, and cloud security across AWS, Azure, and GCP. Lead complex technical projects and fleet-wide production rollouts, collaborate with product, design, customers, and support teams, mentor engineers, resolve production issues, and participate in on-call support.

Leads full-stack engineering projects and developers building cloud-based, distributed microservices and cybersecurity solutions. Defines service boundaries, integration patterns, coding standards, and reusable frameworks; mentors engineers; evaluates emerging technologies; improves system performance and reduces technical debt. Works with product managers, architects, and Agile teams using modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, observability, and AI-assisted development tools.

Owns the engineering lifecycle and operations of enterprise authentication and application security platforms. Maintains Java applications, configures MFA and authentication protocols, certifies SafeWord releases, validates security patches, and tests RADIUS integrations. Develops Bash and SQL automation, troubleshoots production issues, and supports migration from virtual machines to containerized OpenShift platforms. The role also requires Linux administration, monitoring with Splunk and AppDynamics, security documentation, and cross-functional collaboration.

Conduct manual application and infrastructure penetration testing across web, mobile, APIs, cloud services, microservices, and AI/ML systems. Identify, validate, and safely exploit vulnerabilities; develop proof-of-concept exploits; research LLM-based security testing; document findings and risk ratings; communicate remediation guidance to technical and business stakeholders; and support threat modeling, adversarial testing, and pentest automation research.

Own and advance Muon’s security posture across multi-cloud infrastructure, endpoints, networks, workloads, containers, identity systems, and CI/CD pipelines. Lead cloud security posture management, secure architecture, IAM, encryption, segmentation, and monitoring across AWS, GCP, and Azure. Support CMMC Level 2 and NIST 800-171 compliance through documentation, evidence collection, and assessment preparation, while developing security policies and communicating risks to technical and business stakeholders.

Lead design, deployment, and operation of endpoint, network, cloud, and identity security. Run vulnerability management, SIEM detection engineering, incident response, and compliance (NIST 800-171/CMMC). Harden IAM, manage cloud security in AWS, perform security assessments, deliver awareness training, and maintain DLP and security policies.

Leads research, development, testing, validation, and standardization of OT cybersecurity solutions for industrial control systems and critical infrastructure. Responsibilities include administering cyber infrastructure, conducting security assessments, penetration testing, adversary emulation, vulnerability identification, and implementing security technologies such as EDR, IDS/IPS, SIEM, and vulnerability management. The role also develops technical documentation and training, supports Honeywell cybersecurity products, collaborates with customers and internal teams, and occasionally travels.

Designs, deploys, and operates global network access security using Forescout, Cisco ISE, 802.1X, MAB, RADIUS, and TACACS+. Responsibilities include troubleshooting authentication, managing ISE upgrades and certificates, enforcing segmentation and Zero Trust controls, securing corporate and manufacturing networks, and supporting Cisco access-layer infrastructure. The role also partners across security and networking teams, maintains documentation, supports change windows, and automates NAC operations.

Designs, implements, and administers F5 BIG-IP and inline break-and-inspect proxy solutions supporting DoD enterprise and cloud architectures. Configures and troubleshoots TLS and mutual TLS, applies cryptographic and PKI standards, and resolves architecture issues with DoD clients and stakeholders. The role requires Secret clearance, a high school diploma or GED, and up to 25% travel to CONUS and OCONUS locations.

Lead enterprise application security and DevSecOps initiatives across a strategic healthcare application portfolio. Implement automated security controls, testing, policy enforcement, and self-service capabilities in software delivery pipelines. Drive cloud, container, mobile, infrastructure-as-code, software supply chain, and vulnerability management programs using modern security platforms. Provide architecture guidance, mentor engineers, standardize security practices, lead platform implementations, and communicate security outcomes and risk posture to senior stakeholders.

Owns security engineering for SAP’s global Sovereign Cloud infrastructure. Responsibilities include designing cloud security concepts, automating secure provisioning, hardening operating systems, securing AWS, Azure, and Kubernetes environments, applying NIST and ISO frameworks, and partnering with operations teams and hyperscalers. The role also involves mentoring teams, maintaining current infrastructure expertise, and traveling up to 20% of the time.

Designs and develops AI-enabled application security solutions, vulnerability assessment pipelines, and DevSecOps integrations. Builds connections among source repositories, security tools, vulnerability platforms, enterprise workflows, and LLM systems. Establishes safeguards for AI-generated code and applications, addresses prompt injection and data exposure risks, leads risk assessments and remediation, and develops security metrics. Collaborates with application security, engineering, AI, and platform teams while providing technical leadership and incident response support.

The Application Security Engineer integrates security into Agile and DevSecOps processes, conducts secure code reviews, threat modeling, architecture analysis, and SAST, DAST, and SCA testing. The role develops secure coding standards, manages AppSec tooling, evaluates third-party components, guides API and cryptographic security, validates controls, documents compliance evidence, and partners with engineering, cloud, network, and cybersecurity teams. Periodic travel to test sites is required.

Lead enterprise network security architecture, governance modernization, and cybersecurity strategy across on-premises, hybrid, and multi-cloud environments. Design automated governance capabilities using Policy-as-Code, Process-as-Code, workflow optimization, and AI-assisted security analysis. Establish measurable methods for evaluating controls, policy compliance, risk, and governance maturity while influencing executives, architects, engineers, and business stakeholders. The role is fully onsite Monday through Friday and requires approximately 10% travel.

Designs and implements automation for federal security authorization and ATO processes. Responsibilities include automating evidence collection, validation, workflow routing, reporting, policy checks, and readiness dashboards; integrating security scans, SBOM/SCA, vulnerability, repository, and system-of-record tools; and maintaining testing, documentation, traceability, and release artifacts. Requires collaboration with security, engineering, platform, data, and government stakeholders.

The Cloud Product Security Engineer builds and operates security controls within cloud environments, focusing on preventive measures and incident response, while ensuring integration with cloud platforms and CI/CD workflows.

Design and implement secure cloud infrastructure, automated security tooling, and safe-by-default controls across AWS and Azure. Partner with engineering teams on security enhancements, investigate security events, conduct threat modeling and architectural reviews, and assess third-party integrations and AI tools. Build scalable guardrails, identify vulnerabilities, support remediation, and improve security practices through automation, education, and cross-functional collaboration.

Build and operate automated cloud security tooling, guardrails, and controls across AWS and Azure infrastructure. Partner with engineering teams to implement security enhancements, investigate incidents, conduct threat modeling and architectural reviews, assess third-party integrations and AI tools, and improve security practices. The role requires hands-on cloud security engineering, automation, container security, risk assessment, and cross-functional communication.

Build and automate cloud security controls across AWS and Azure, creating safe-by-default tooling, guardrails, and scalable infrastructure protections. Partner with engineering teams on security enhancements, threat modeling, architectural reviews, incident response, third-party and AI-tool assessments, and remediation. Use cloud security platforms, programming, containers, and orchestration technologies to identify and reduce security risks while supporting reliable product development.