Top Security Engineer Jobs

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Build Revel’s security program from the ground up, securing its product, infrastructure, cloud, on-premises, hardware-integrated environments, and software delivery pipelines. Responsibilities include threat modeling, security architecture, Infrastructure as Code, detection and incident response, vulnerability management, compliance with ITAR/NIST/CUI/CMMC requirements, customer security reviews, and security enablement. The role will establish foundational processes and may eventually lead a growing security team.

Design, develop, test, and maintain out-of-the-box data connectors and parsers to ingest security logs into CrowdStrike Next‑Gen SIEM. Build lab environments, troubleshoot ingestion issues, collaborate on logging and normalization best practices, produce technical documentation, provide on‑call support, and work with customers and internal teams to resolve data ingestion incidents.

Build and govern Compa’s secure AI foundation across identity, access, data, endpoints, SaaS, cloud, and networks. Secure non-human identities, agent access, data flows, AI integrations, and third-party models. Design controls for prompt injection, data exfiltration, excessive agency, OAuth abuse, and unsafe tool use. Implement logging, detection, enforcement automation, and enterprise security architecture while partnering with technical, legal, privacy, and business teams.

Lead hardware and embedded security across device design, manufacturing, deployment, updates, and decommissioning. Develop security baselines, conduct architecture reviews and threat modeling, define requirements, validate controls, and drive remediation with hardware engineering teams. Focus areas include secure boot, firmware, FOTA, hardware root of trust, device identity, provisioning, cloud-connected devices, and secure-by-default engineering practices.

Designs and implements product security controls, secure applications, infrastructure, detection strategies, and incident response workflows. Investigates threats using endpoint, network, cloud, telemetry, threat intelligence, and forensic evidence. Conducts threat hunting, tactical forensics, vulnerability assessments, and cybersecurity infrastructure improvements while partnering with Product, Engineering, and Infrastructure teams. The role also establishes security standards, improves resilience, and embeds security practices across Airwallex’s applications and services.

Designs, tests, integrates, and supports large-scale WAN and LAN networks for the U.S. House of Representatives. Responsibilities include network architecture, traffic and bandwidth analysis, technology evaluations, cost-benefit studies, RFP/RFQ support, complex issue resolution, performance monitoring, telecommunications standards, project coordination, and technical guidance for junior engineers. The role requires extensive routing, security, optical transport, network protocol, and telecommunications expertise.

Leads product security engineering for defense training systems across requirements, architecture, assessment, testing, certification, and sustainment. Develops cybersecurity controls aligned with DoD RMF, JSIG, and NISPOM; conducts threat and risk assessments; identifies vulnerabilities; tracks mitigation; advises stakeholders; and supports cyber validation, audits, and certification. The role collaborates with engineering, customer, supplier, and industry partners while independently completing cybersecurity tasks.

Leads security engineering across multiple technology domains, clarifies security requirements, supports multi-level network security, and advises stakeholders during vulnerabilities and disruptive events. Performs threat modeling, risk assessment, vulnerability and penetration testing, and validates AI-assisted security recommendations. Designs and implements enterprise security solutions while ensuring security testing, control validation, traceability, auditability, and resiliency throughout software development lifecycles and toolchains.

Lead product security improvements across global engineering teams by embedding security into the SDLC. Responsibilities include threat modeling, architecture and code reviews, cloud and data security assessments, vulnerability remediation, compliance risk analysis, security training, metrics development, and communicating application security posture. The role also mentors engineers and security champions while supporting Zero Trust architecture and continual improvement of security testing practices.

Designs, develops, and troubleshoots secure software and security engineering solutions using Java, Spring, and AWS. Builds scalable cloud applications, writes production code, resolves high-impact incidents, improves architecture and coding practices, and implements security policies and best practices. The role also requires CI/CD, testing, database, REST API, Agile, and application resiliency expertise, with preferred experience in Terraform, Docker, Kubernetes, monitoring tools, and third-party integrations.

Experienced Product Security Engineer supporting anti-tamper and product security for Boeing defense platforms. Responsibilities include developing requirements, documentation, test plans, and procedures; participating in verification; defining secure hardware and software architectures; and leading integration engineers across multiple programs. The role is fully onsite in Berkeley/St. Louis, Missouri, requires U.S. citizenship and the ability to obtain a Secret clearance, and involves collaboration with platform architects, chief engineers, customers, and suppliers.

Owns Opendoor’s enterprise identity security platform, including workforce authentication, passwordless access, authorization policies, non-human and AI agent identities, lifecycle automation, and identity infrastructure as code. Builds Okta integrations and first-party tooling, manages secure access standards, feeds identity telemetry into detection systems, supports incident response, and mentors security and IT engineers. The role requires strong software engineering, enterprise IAM expertise, and hands-on experience with Okta, passkeys, Terraform, and identity protocols.

Build production security tooling and infrastructure using Terraform, Bash, Go, and Python. Partner with product engineers to design secure features, review Terraform and IAM configurations, automate security workflows, and advise teams on pragmatic vulnerability remediation. The role emphasizes developer enablement, scalable security libraries and tools, cloud security, containerization, and responsible AI use.

Leads the design and delivery of cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops automation for vulnerability management, detection, and compliance monitoring; advises on incident response and forensics; embeds security into enterprise platforms; evaluates security technologies; establishes engineering standards; and supports security tools through investigation and troubleshooting.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Implements and sustains cybersecurity programs at a manufacturing plant. Responsibilities include vulnerability remediation, incident response, disaster recovery, cybersecurity readiness assessments, OT patching and firmware updates, stakeholder coordination, risk communication, issue tracking, and continuous improvement while minimizing disruption to production operations.

Plans and leads penetration tests, red team operations, purple team exercises, and adversary-informed security assessments across applications, APIs, cloud, identity, infrastructure, endpoints, mobile, wireless, and AI systems. Develops offensive security tooling and automation, uses AI-assisted testing workflows, evaluates attack paths and secure architecture, assesses AI/ML security, emulates adversaries, communicates risks, and supports remediation and defensive readiness.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Build and operate security services and guardrails for AI and machine learning workloads on AWS. Develop production Python code, design cloud security controls, manage Terraform infrastructure, lead technical designs and vendor evaluations, and ensure reliable, scalable implementations. The role also addresses generative AI misuse through input validation, abuse detection, identity and access controls, encryption, logging, monitoring, and policy enforcement.

Lead expansion and maintenance of a Zero Trust security program across hybrid on-premises and cloud environments. Manage identity and access controls, deploy and tune SIEM/EDR/XDR/IAM tooling, automate security operations, reduce alert fatigue, and collaborate with IT, DevOps, and business teams to strengthen enterprise security across endpoints, cloud, SaaS, identity, network, and data protection.

Own and improve Octus’s enterprise security technology across endpoints, identity, SaaS, email, DLP, AI tools, cloud, and applications. Responsibilities include managing security platforms, hardening systems, tuning SIEM detections, responding to incidents, driving remediation, supporting audits and client reviews, assessing vendor risk, automating workflows, and mentoring teammates. The role requires broad hands-on cybersecurity expertise across Mac and Windows environments, identity platforms, secure web gateways, DLP, compliance frameworks, scripting, and REST APIs.