Top Security Engineer Jobs

Design, implement, and operate security platforms (firewalls, IDS/IPS, SIEM, MDM). Perform vulnerability assessments, monitor and analyze security logs, drive remediation, enforce security policies, and evaluate new security technologies.

Design, implement and maintain network security solutions (firewalls, IDS/IPS, proxies). Investigate compromises, manage security policies, support remediation, troubleshoot complex network and connectivity issues, and produce process documentation.

Lead security strategy, operations, and GRC across corporate and customer-facing transit systems. Drive security architecture, incident response (incident commander), threat intelligence, tabletop exercises, vendor risk management, and compliance across PCI DSS, SOC 2, and ISO 27001. Serve as primary auditor contact and communicate risk to leadership.

Manage and administer authentication, PAM, and identity governance systems; integrate IAM into CI/CD with DevSecOps; enforce cloud security policies (AWS/Azure/GCP); support incident response; document configurations and advise IT teams; automate identity governance and workflows using AI where applicable.

Perform incident response and threat hunting across endpoints, network, and cloud; administer SIEM, IDS/IPS, DLP, firewall/WAF, VPN, and anti-malware systems; remediate vulnerabilities and manage remote access; collaborate on investigations, process improvements, and security monitoring; provide internal customer support and promote security best practices.

Lead end-to-end onboarding and enterprise deployments of Clearly AI, integrating with Jira, ServiceNow, Confluence, and GitHub. Configure review workflows, run structured project management, optimize threat modeling/privacy/vendor-risk processes, translate deployment friction into product improvements, triage support, and create onboarding documentation to drive production adoption and measurable security outcomes.

Secure autonomous vessels and supporting infrastructure via vulnerability assessments, penetration testing, network architecture/hardening (VPN/mesh, firewalls), AWS security, SAST/SCA integration into CI/CD, monitoring (Datadog), incident response, security tooling, documentation, and DevOps support to embed security into the SDLC.

Support and coordinate IT security programs and policies. Provide information assurance and security guidance to developers, administrators, and owners. Assess security impacts of changes, maintain SSPs, conduct security assessments for A&A, support AO/DAO/SCA/ISSM to obtain and maintain ATOs, respond to security tickets daily, and use COTS/GOTS tools to report system status and compliance.

Design and mature product security for a cloud-scale, ML-powered SaaS platform. Perform threat modeling and security design reviews, triage vulnerabilities, conduct manual code reviews, implement automated defenses, and train engineering teams on secure development practices.

Develop and integrate anti-tamper (AT) system security solutions for advanced weapons. Identify AT-critical program information, derive and document AT requirements and architectures, create and execute V&V procedures, perform security assessments, and coordinate with systems, software, and hardware teams. Prepare technical briefings and support risk management for AT-related program risks.

Senior IT Security Engineer responsible for security risk assessments, application security reviews, penetration testing, secure software development, code reviews, threat modeling, and malware analysis. Works with web and microservice technologies (Node.js/Java), CI/CD and DevOps practices, databases (Oracle/MySQL/MongoDB), and produces security guidance, tooling, and metrics to support modernization and sustainment projects.

Perform continuous systems and network threat assessments, analyze threat intelligence, develop and implement security controls and mitigation strategies, participate in incident response, deliver security training, and maintain Risk Management Framework documentation to protect AFRL/DoD systems and networks.

Develop an application to embed secure hyperlinks for an eFiling project. Implement authentication/authorization (OWIN, JWT, OpenID Connect, Azure AD), integrate with MS SQL/NoSQL, MQ, SOAP/REST services, and use .NET/WCF stack. Onsite contract in Phoenix, short initial term; background check required.

Manage vulnerability data inflow from scanning teams, identify and research findings, coordinate remediation plans with infrastructure tower teams (compute, storage, network, voice), track and report remediation progress, and contribute to multi-disciplined service delivery teams.

Secure enterprise information by monitoring, implementing, and reviewing security systems. Identify and remediate threats and vulnerabilities, perform risk assessments, develop global security strategies, and implement security policies and controls. Focus on network security, multi-OS environments, and McAfee ePolicy Orchestrator operations across a global enterprise.

Support cyber operations for Missile Defense systems: monitor systems for STIG/patching compliance, review logs for anomalies, run vulnerability scans, assist audits and security tooling, maintain documentation, recommend mitigations, escalate complex issues, and support cyber policy implementation.

Lead Security Engineer to design and defend cloud, network, and systems infrastructure. Implement zero-trust, IAM/PAM, SIEM/EDR, vulnerability management, incident response, vendor/customer security assessments, and drive SOC 2 Type II compliance while partnering with engineering and legal.

Support product and application security by integrating security into development and operations. Build and maintain DevSecOps tools and CI/CD pipelines, manage GitLab source control, triage vulnerabilities, support regional and global engineering teams, and promote secure development best practices across product lifecycles.

Design and build security-focused tools, automate security workflows within the product using Python and Go, maintain Terraform-based range infrastructure and virtualization for testing, integrate diverse security tools, collaborate with cross-functional teams, communicate security features to non-security stakeholders, and work directly with end users to meet operational needs.

Manage and implement McAfee antivirus and endpoint security solutions. Configure and operate McAfee Endpoint DLP, HIPS, and Symantec endpoint encryption (PGP). Define SLAs, SOPs, and remote infrastructure management. Handle incident and change management via ticketing tools, lead a team, interact with customers, and support 24x7 operations.

Design, implement, and maintain network security solutions (firewalls, IDS/IPS, proxies, routers). Investigate security incidents, develop countermeasures, manage security policies, perform risk analysis, and support customer change requests and remediation.

Lead embedded security for vehicle platforms: assess product security, establish and maintain secure boot, integrate HSMs and key management, maintain BSPs, apply cryptographic standards, and collaborate with software/hardware/QA/product teams to embed security across the product lifecycle.

Lead administration, security, and lifecycle operations of Cisco-based network infrastructure. Manage firewalls, access controls, VPNs, WAFs, DDoS/protection, telemetry, and cloud security. Perform upgrades, incident response, vulnerability remediation, automation, documentation, and mentor junior staff while collaborating on secure hybrid cloud and datacenter architectures.

Provide security architecture design and consulting, lead implementation projects, perform on-site and remote technical implementations, handle work orders, change requests, and incidents, and research and oversee IT security systems and policies to support business needs.

Serve as security engineering representative on teams to design, implement, evaluate, and integrate IA architectures, secure networking, computing, and enclave environments. Apply IA policy and procedures, support security planning, assessment, risk analysis/management, identify data handling requirements, and enforce trusted relationships with external systems while interacting with customers and project teams.