Top Security Engineer Jobs

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

The Senior Kubernetes Engineer will manage and enhance Kubernetes clusters, automate deployments, ensure security, and collaborate with teams to deliver reliable containerized applications.

Design, implement, and operate enterprise network and access security across hybrid environments (on‑prem and multi‑cloud). Manage firewalls, ZTNA, NAC, proxies, and microsegmentation; investigate security events; automate security operations with Python/Ansible/Terraform; develop standards, documentation, and remediation; mentor junior engineers and collaborate with infrastructure, cloud, and security teams.

Lead product cybersecurity engineering for Boeing avionics across the full lifecycle: derive security requirements, design secure architectures, perform risk/threat analysis and testing, produce PSE artifacts, coordinate with systems/software/hardware teams, and drive risk reduction and technology maturation to meet program and certification needs.

Build and own detection tooling and logging/alerting systems, create and tune analytics for threat detection, investigate and triage incidents (on-call), drive incident response across teams, and help define and execute detection and response strategy with a detection-as-code mindset.

Build and maintain product security across the SDLC: threat modeling, design and code reviews, pentesting, tooling and automation, bug bounty management, and AI-based security solutions to enable secure, fast product development.

Design, build, and operate enterprise identity, endpoint, and security systems. Automate lifecycle management, access governance, EDR operations, and endpoint hardening. Develop AI/automation agents to eliminate manual work, run enterprise security metrics, support incident response, and establish secure-by-default SaaS onboarding standards.

Designs, deploys, configures, and maintains enterprise Privileged Access Management solutions across hybrid-cloud environments. Automates vault operations, privilege elevation, and credential rotation using PowerShell and infrastructure-as-code. Integrates privileged accounts and target systems with enterprise PAM architecture, monitors performance, troubleshoots issues, manages upgrades, and ensures high availability and disaster recovery. Maintains least-privilege compliance, auditing, technical documentation, standard operating procedures, and operational guides.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Evaluates and secures AI tools, SaaS applications, marketing technology platforms, integrations, and third-party plugins. Conducts secure code reviews, SAST/DAST testing, threat modeling, architecture assessments, and vendor risk reviews. Develops AI security standards, reference architectures, policies, and playbooks while partnering with engineering, procurement, legal, marketing, and digital teams. Supports compliance with security and privacy requirements and coordinates risk, compliance, and audit initiatives.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Support and improve enterprise cryptographic platforms, including PKI, TLS certificates, cloud key management services, and HSMs. Manage certificate issuance, renewal, revocation, validation, key rotation, monitoring, and incident troubleshooting. Build scripting and API-based automation using Python, PowerShell, or Bash. Contribute to post-quantum cryptography readiness through cryptographic inventories, vulnerability assessments, crypto-agility reviews, and evaluation of emerging standards.

Leads application security, vulnerability management, threat detection, AI-driven security automation, and security engineering. Administers SAST, DAST, SCA, SIEM, EDR, IAM, and cloud security platforms; develops MITRE ATT&CK-mapped detections; investigates Tier 2/3 incidents; builds Python-based automation and AI agent integrations; supports architecture reviews, penetration testing, policy development, threat intelligence, compliance, and security reporting.

Supports cloud, application, endpoint, and infrastructure security across AWS environments. Responsibilities include monitoring CrowdStrike, Microsoft Defender, SIEM, IDS/IPS, and Datadog alerts; maintaining security tools and CI/CD scanning; triaging vulnerabilities; assisting with incident response; reviewing AWS security findings; supporting IAM, encryption, VPN, and certificate controls; and maintaining SOC 2 audit documentation. The role collaborates with DevOps and engineering teams on secure coding and security posture improvements.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Work as a Cyber Security Engineer Co-Op, assisting the Information Security team with compliance, operational tasks, and learning about security in financial services.

Lead product security assessments, threat model features, triage and own vulnerability lifecycle from bug bounty, SAST, fuzzing, and pentests. Build AI/LLM-driven automation and tooling to scale triage and enrichment, mentor engineers, and influence security across distributed cloud products.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

The role involves managing and engineering platform standards and certified images across Linux and Windows environments, deploying Terraform modules, and implementing security compliance measures. Responsibilities include patch management, vulnerabilities resolution, monitoring, and cross-team collaboration to ensure successful implementation of OS standards.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Design and build automated compliance engineering systems: continuous evidence collection and control monitoring, integrate cloud and identity tooling, apply LLMs/agents for validation, lead auditor engagements for certifications (ISO, SOC2, CSA STAR), drive remediation with stakeholders, and author compliance documentation and strategy.

Lead enterprise security architecture across endpoint, identity, network, cloud, and data. Define controls, review major initiatives, automate control deployment (IaC/PaC), mentor engineers, and drive zero-trust and cloud security strategy at scale.

Conduct threat models and security reviews for Cloudflare products, triage and manage vulnerability lifecycle (bug bounties, SAST, fuzzing, pentests), build AI/LLM-driven automation tooling for triage and enrichment, coordinate pentests and remediation with engineering, and act as the product security point of contact.

Lead design, deployment, and optimization of Cortex XSIAM detections and analytics. Develop XQL detections and threat hunts, build automated response playbooks, integrate security telemetry (endpoint, network, cloud, identity), collaborate with SOC and incident responders, mentor staff, and improve detection fidelity and MTTR at enterprise scale.