Top Security Engineer Jobs

Build and operate high-signal detections across cloud, identity, endpoints, and SaaS. Improve detection platforms, automation, and triage tooling (including LLM-based workflows). Translate threat TTPs into telemetry and detections, participate in incident response/on-call, track metrics like MTTD and alert quality, and drive detection engineering improvements across the org.

Build and own detection tooling and logging/alerting systems, create and tune analytics for threat detection, investigate and triage incidents (on-call), drive incident response across teams, and help define and execute detection and response strategy with a detection-as-code mindset.

Design, implement, and operate Palo Alto Networks firewall solutions; configure policies and threat prevention; lead security integrations for acquired entities; analyze logs and incident response; use automation and AI-assisted tools to improve operations and documentation; follow change and incident management processes.

Lead platform cybersecurity for X-Bat across aircraft, mission systems, networks, ground systems, and support infrastructure. Define security architecture and requirements, drive RMF/STIG compliance, vulnerability management, and accreditation, and coordinate cross-functional integration and testing to ensure mission resilience and fielding readiness.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.

Design, build, and operate enterprise identity, endpoint, and security systems. Automate lifecycle management, access governance, EDR operations, and endpoint hardening. Develop AI/automation agents to eliminate manual work, run enterprise security metrics, support incident response, and establish secure-by-default SaaS onboarding standards.

Detect, investigate, and respond to security incidents; maintain logging and SIEM operations; build detections and visibility; support PCI/SOC2/ISO audits; manage endpoint, email, and GitHub security; collaborate across teams and improve on-call and security tooling.

Design and build agentic AI orchestration and MCP systems to automate SOC workflows. Architect proactive threat hunting, E2E incident response automation, purple-team feedback loops, and simulation testing. Serve as a technical escalation lead and collaborate across Cloud, DevOps, Compliance, and Security teams to drive automation-ready systems.

Design and implement defense-in-depth security architectures and embedded software on complex processors. Analyze adversary threats, propose countermeasures, implement and test software per U.S. Government guidance, work with NIST cryptographic algorithms and S-SOTA technologies, and provide technical leadership in a multi-disciplinary team.

Lead application security efforts end-to-end: own vulnerability management, API and supply chain security, integrate security into design reviews and CI/CD, develop automation and tooling (SAST/SCA/DAST/container/dependency), perform threat modeling, triage vulnerabilities, and support incident response and remediation across engineering teams.

Design, implement, and maintain secure networking across hybrid and multi-cloud (AWS/Azure/GCP). Build secure architectures for containerized applications, apply segmentation and zero-trust, configure cloud-native network controls, deploy IDS/IPS and monitoring, investigate incidents, remediate vulnerabilities, and automate security policy enforcement using IaC, CI/CD, and Python scripting. Mentor engineers and influence platform security strategy.

Design and harden on-device security for Specs including permissions, sandboxing, secure IPC, and trusted execution. Build privacy and integrity controls for on-device AI, improve fuzzing and automated security testing, conduct threat modeling, vulnerability assessment, and secure code review across OS, firmware, services, and device-cloud surfaces.

The Senior Staff Security Engineer will lead edge and network security strategies, overseeing design, operation, and incident response for Gusto's security posture, requiring substantial expertise in Cloudflare and AWS.

Build and maintain corporate security controls across identity, endpoints, and SaaS. Harden IAM (Okta, Google Workspace), run endpoint security for a macOS-first fleet, secure AI tool usage, reduce SaaS risk with SSPM and automation, and write Python/Terraform to automate access reviews, onboarding/offboarding, and audit evidence. Partner with Detection & Response and support SOC 2/ISO 27001 compliance and corporate incident response.

Support RMF compliance and achieve/maintain ATOs on NIPR/SIPR. Work with dev/integration teams to harden systems, perform vulnerability scanning and STIG assessments, produce security documentation (SSP, SCTM, POA&M, assessment plans), conduct source code reviews, and manage security controls and remediation tracking.

Support RMF compliance and hardening for modeling and simulation systems, produce security documentation (SSP, SCTM, POA&M, STIG assessments), perform vulnerability scanning and source code reviews, and achieve/maintain ATOs on NIPR/SIPR.

Support RMF compliance and ATO achievement for NIPR/SIPR systems. Develop and maintain security documentation (SSP, SCTM, POA&M, STIG assessments), perform vulnerability scanning and source code reviews, enforce security controls, and collaborate with development teams to harden systems throughout the lifecycle.

Design, implement, and scale security controls across infrastructure, applications, identity, and cloud. Perform security assessments, threat modeling, code reviews, incident response, and root cause analysis. Build automation and tooling for compliance, observability, and governance. Partner with product and engineering teams and help define security standards and documentation.

Serve as a Cybersecurity Systems Engineer for a U.S. Navy weapon system: apply MBSE and RMF to identify threats, assess and mitigate security risk, develop SSE deliverables, coordinate with government stakeholders, support integration/verification/testing, and present program status to senior leadership.

As a Security Engineer at Remitly, you'll enhance security controls across infrastructure and SaaS, automate tooling, manage MDM policies, and participate in security assessments and operational improvements.

As a Product Security Engineer, you'll develop secure tools for engineering teams, conduct security reviews, and automate security processes to enhance Cedar's healthcare technology solutions.

Support product security for in-service Boeing Commercial Airplanes by assessing risks and vulnerabilities, developing security requirements and documentation, coordinating penetration testing, producing certification artifacts, implementing sustainment activities, and overseeing configuration and data/network security to ensure safety, resiliency, and regulatory compliance.

Lead development, implementation, and sustainment of product security for commercial aircraft and ground systems. Conduct security risk assessments, develop and verify security requirements, implement PKI and cryptographic standards, perform CVE analysis and vulnerability mitigation, support secure software distribution, and coordinate with airlines, industry standards, and regulators.

Lead product security engineering for embedded avionics systems across lifecycle phases. Develop and implement security requirements, perform threat and risk analyses (RMF/JSIG/NISPOM), advise system/software/hardware teams on secure architectures, integrate standards and processes, drive risk reduction and technology maturation, produce customer/certifier artifacts, and support cross-functional teams. Onsite role requiring US Person status and ability to obtain Secret clearance.

Assess risks, develop and coordinate system security requirements, produce security documentation, support testing and sustainment of digitally-connected Boeing airplanes, and ensure configuration management and continued product security.