Top Security Engineer Jobs

Operate and improve security tools across corporate, cloud, and hotel environments. Lead technical incident response, vulnerability remediation, MSSP oversight, security control improvements, audit readiness, and hotel security risk reporting. Build automation for alert enrichment, phishing analysis, investigations, prioritization, documentation, and reporting while maintaining secure authorization and human review controls. Partner with technology, IT, property teams, and external providers to strengthen monitoring, response processes, integrations, and security documentation.

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Lead the design, implementation, and continuous improvement of global network security architecture across enterprise, cloud, remote-access, and industrial IT/OT environments. Administer firewalls, segmentation, VPN, SASE/SSE, IDS/IPS, and related controls; conduct assessments and hardening; support incident response; manage changes, upgrades, resilience, and documentation; and coordinate security initiatives with infrastructure, cloud, SOC, plant engineering, and external providers.

Operate and improve a high-throughput AI security platform running on AWS EKS. Responsibilities include Kubernetes operations, troubleshooting, upgrades, Terraform and Helm infrastructure management, autoscaling, performance testing, observability, SLOs, incident response, and implementation of cloud security controls such as IAM, secrets management, encryption, network controls, image hardening, patching, ATO evidence, and continuous monitoring.

Lead QA efforts for Cisco Meraki MX/Catalyst network security and SD-WAN features. Design and execute test strategies, build automation for CI/CD, validate security services (malware, IPS, URL filtering, SSL/TLS), and drive performance and scalability testing using traffic generators and AI-driven techniques.

Lead detection engineering, threat hunting, digital forensics, incident response, and security automation across cloud, bare-metal, and AI infrastructure. Build detection rules, response playbooks, SOAR pipelines, and AI-powered investigation workflows; conduct complex incident investigations, harden systems, improve telemetry, participate in on-call operations, perform post-incident reviews, and mentor security engineers.

Designs, deploys, and operates cloud and on-premises cybersecurity controls for Microsoft datacenter infrastructure. Responsibilities include threat detection and investigation, incident response, security policy improvements, automation, security hardware and software maintenance, metrics analysis, and on-call support. The role leads cloud and identity security roadmaps, Zero Trust adoption, infrastructure-as-code initiatives, and durable improvements following security incidents.

Lead application security engineer responsible for designing and implementing Zero Trust application and network security across enterprise/DoD environments. Develop and troubleshoot network infrastructure, integrate security controls (firewalls, application delivery, micro-segmentation), improve reliability and availability, lead cross-functional teams, and ensure compliance with DoD/ federal security requirements. Requires Secret clearance.

Own security governance by translating policies, regulations, and risk expectations into measurable technical controls. Maintain security policies, standards, control frameworks, traceability, exceptions, and validation criteria. Define governance-as-code requirements and collaborate with engineering on policy enforcement. Serve as a subject matter expert for security control families, assess gaps and emerging risks, and partner with security, compliance, audit, legal, and business teams.

Manage identity security operations, governance, engineering, incident response, playbooks, tooling, and continuous improvement. Maintain identity and authentication systems, configure applications and infrastructure, monitor operational performance, support security reporting, and lead modernization initiatives. Collaborate with IT and security teams on projects, standards, reference architectures, risk mitigation, and compliance. Provide technical leadership and 24/7 availability for critical security incidents.

Manage deployments, operations, incident response, and on-call support for products in classified U.S. government environments. Oversee AWS, private cloud, container, and virtual machine infrastructure. Develop Python scripts, containerized services, and monitoring automation while improving reliability, scalability, and DevOps practices. Maintain security and compliance through vulnerability scanning, patch management, documentation, and escalation management. The role is fully onsite and requires an active U.S. Government Secret clearance.

Leads and improves enterprise cyber defense through threat intelligence, vulnerability management, incident response readiness, detection engineering, adversary emulation, security technology operations, and security awareness. Analyzes organizational exposure, prioritizes risk reduction, tunes cybersecurity tools and workflows, validates detections, coordinates incident response, communicates risk to stakeholders, mentors peers, and leads cybersecurity improvement projects.

Leads application security testing across the software development lifecycle, identifying vulnerabilities and secure coding weaknesses through SAST, DAST, SCA, threat modeling, penetration testing, and API assessments. Recommends remediation, communicates risks, automates security processes, and supports secure design across applications, cloud environments, vendors, and third-party solutions. Leads AI security initiatives involving LLM threat modeling and supply-chain reviews, trains developers, and monitors emerging security threats.

Provides cloud security consulting, architecture, implementation, migration, and support for enterprise clients. Configures and manages Prisma Cloud, develops security queries and automation, secures containerized environments, troubleshoots integrations, executes production cutovers, and recommends improvements to cloud security posture. Collaborates with customers, sales, engineering, and technical support while documenting implementations and resolving complex issues.

Owns the architecture, integration, monitoring, optimization, and lifecycle management of enterprise physical security technologies in a 24/7 GSOC environment. Responsibilities include managing access control, video, intrusion, intercom, visitor, analytics, and incident management systems; developing integrations and automation; building monitoring and reporting; leading upgrades and migrations; maintaining documentation and resiliency plans; coordinating vendors and internal teams; and providing technical guidance to security operations personnel.

Leads industrial cybersecurity operations across global managed services customers. Responsibilities include SIEM monitoring, SOC escalation, SOAR process and playbook development, incident triage, malware analysis, threat hunting, forensic support, alert tuning, remediation orchestration, and mentoring SOC analysts. The role operates as an L2 SOC escalation layer and supports ICS environments including SCADA, HMI, PLC, and RTU systems.

Engineer and improve AWS cloud security capabilities across identity, cryptography, PKI, CSPM, CNAPP, workload protection, threat detection, and automated remediation. Design scalable access controls, integrate security platforms, embed controls into infrastructure-as-code and CI/CD workflows, assess cloud risks, support governance and audit readiness, and partner with engineering, DevOps, architecture, compliance, and application teams.

Investigates information security incidents across statewide public safety systems, reviews system, firewall, server, and network logs, performs risk and vulnerability assessments, and implements offensive and defensive security solutions. Supports secure remote access, intrusion detection, patching, firmware updates, and security tool deployment. Documents findings and corrective actions while advising public safety IT staff and management.

Evaluates IT systems, applications, and software for compliance with information assurance and security requirements. Supports security documentation, validation, assessment, accreditation, risk-threshold analysis, security architecture reviews, troubleshooting, and software assurance evaluations. Requires RMF experience, Agile and JIRA familiarity, and an active TS/SCI clearance with polygraph.

Own security and compliance across Sage Care’s healthcare platform, applications, identity, cloud infrastructure, SaaS tools, and AI agents. Responsibilities include SOC 2 and HIPAA compliance, customer security reviews, application security, IAM, GCP and Kubernetes security, Terraform, PHI governance, detection and incident response, and AI threat modeling. The role requires hands-on security engineering, infrastructure expertise, regulatory compliance experience, and communication with engineers, auditors, and healthcare customer security teams.

Designs and supports low-voltage access control systems for new construction, renovations, and facility upgrades. Reviews drawings and requirements, conducts site surveys, selects equipment, prepares technical documentation, coordinates with contractors and IT teams, and ensures compliance with codes and manufacturer guidelines. Supports system integrations, estimating, project management, field changes, programming records, testing, configuration backups, as-built documentation, and project closeout.

Build and operate production-grade application security services, backend systems, internal tools, developer guardrails, and CI/CD security automation. Develop scalable applications and AI security controls that detect, prevent, and mitigate threats. Partner with Product and Engineering teams to solve complex security challenges through software engineering, while applying strong architectural, testing, reliability, and collaboration skills.

Serve as the principal technical authority for enterprise endpoint security across macOS and Windows. Architect endpoint privilege management, application control, runtime safeguards, and secure AI and developer-tool governance. Integrate EDR, SSPM, telemetry, and automation platforms; establish security architecture and technical standards; advise leadership and vendors; lead design reviews, escalations, and multi-quarter roadmaps; and mentor junior and mid-level cybersecurity engineers.

Leads the engineering, integration, testing, troubleshooting, and lifecycle management of physical security systems, including video surveillance, access control, alarms, APIs, databases, and building automation systems. Develops test plans, conducts factory acceptance testing, validates system architectures and interfaces, maintains engineering documentation and configuration baselines, and supports field teams and stakeholders. The role also provides technical training and requires occasional travel to customer and partner facilities.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS infrastructure alerts, investigates and triages incidents, develops SOAR playbooks and automation, performs threat hunting, malware analysis, threat modeling, and supports forensic investigations. Provides remediation guidance, tunes security monitoring controls, supports root cause analysis, mentors SOC analysts, documents procedures, and serves as an L2 escalation resource for industrial customers.