Top Security Engineer Jobs

Research Engineer improving AI security agents through agent reasoning, evaluation, benchmarking, model selection, security hardening, and reliability engineering. The role develops production-quality systems that detect vulnerabilities, resist prompt injection and data exfiltration, validate findings, and learn from customer engagements. Responsibilities span research and engineering, including experiments, graders, benchmarks, multi-step planning, model tuning, and security research for LLM-based applications.

Lead security engineering and compliance for SaaS products serving public agencies. Secure AWS GovCloud systems handling criminal justice information, implement identity, encryption, network, monitoring, backup, and access controls, translate SOC 2, CJIS, and NIST requirements into auditable controls, manage vulnerabilities and incident response, support customer assessments, and establish secure development standards. The role also partners with engineering, data, leadership, customers, assessors, and penetration testers.

Own and execute the application security program, including SIEM management, threat detection, architecture and code reviews, vulnerability management, security testing, incident response, forensic investigations, and security tooling. Partner with engineering and infrastructure teams to remediate vulnerabilities, promote secure coding, develop training, and improve enterprise security through cloud, container, compliance, and monitoring practices.

Designs, builds, tests, deploys, and supports IAM solutions for workforce and workload identities. Responsibilities include SSO integrations, identity governance, lifecycle management, RBAC and ABAC automation, access certifications, privileged access management, policy enforcement, and operational support with on-call participation. The role also develops automation using scripting and AI/LLMs, secures containerized platforms, implements Zero Trust controls, and integrates enterprise applications and SaaS solutions.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Develops and implements cybersecurity solutions for classified and unclassified Navy systems. Responsibilities include network architecture, firewall and switch configuration, vulnerability mitigation, system hardening, STIG application, security monitoring, Linux and Windows administration, virtualization, and RMF/ATO support. The engineer analyzes logs, recommends network and code improvements, supports design reviews, and collaborates with systems engineers, software developers, and cybersecurity teams.

Serve as a technical security escalation resource across JMARK and client environments. Investigate and coordinate incident response, manage vulnerabilities and patching, administer SIEM and other security platforms, monitor threats, and improve detection and security controls. Provide guidance on Cisco networking, firewalls, segmentation, and secure infrastructure while supporting security product evaluations, remediation tracking, documentation, and security education.

Design and implement logging and alerting systems across endpoints, infrastructure, networks, and cloud environments. Build automation for threat hunting and incident response, investigate and triage security events, lead incident response efforts, and develop threat intelligence on advanced adversary tactics. The role also requires secure, scalable software development using Python or Go and expertise across operating systems, Kubernetes, and cloud platforms.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Lead full-stack engineering projects and developers building cloud-based identity security solutions. Design distributed microservices and APIs, establish engineering standards, partner with architects and product managers, reduce technical debt, optimize performance, mentor engineers, and influence technology strategy. The role uses modern programming languages, databases, containers, cloud platforms, CI/CD, infrastructure as code, automated testing, and observability in an Agile environment.

Designs, deploys, troubleshoots, and supports enterprise network and security infrastructure, including routing, switching, firewalls, wireless, cloud networking, VPNs, and data center services. The role analyzes operational incidents, implements remediation, maintains documentation, communicates with management, supports roadmap decisions, and participates in on-call rotations. It requires extensive experience with multi-vendor network security technologies, cloud platforms, and customer-facing technical work.

Leads implementation, administration, and support of enterprise Cisco ISE and network access control solutions. Designs authentication, authorization, device profiling, posture assessment, guest access, network segmentation, and Zero Trust capabilities across wired, wireless, VPN, and cloud environments. Troubleshoots complex access and certificate issues, manages integrations and lifecycle activities, develops automation, supports cybersecurity projects, establishes standards and controls, partners with infrastructure teams and vendors, and mentors junior engineers.

Leads enterprise cybersecurity engineering efforts, including capturing security requirements, designing and configuring secure information systems, developing security architectures and roadmaps, evaluating security solutions, and integrating protections into cloud and on-premises environments. Oversees cybersecurity engineers across experience levels and supports system development lifecycle activities, compliance, automation, big data, and artificial intelligence initiatives.

Build and secure CI/CD pipelines by integrating SAST, DAST, SCA, container scanning, and infrastructure-as-code security controls. Secure cloud, container, and Kubernetes environments; develop automation; maintain pipeline security tooling; and support vulnerability remediation, compliance, audits, and documentation. Collaborate with development, QA, operations, customer, and security teams to promote secure software delivery and coding practices in government and regulated environments.

Supports the integration, testing, configuration, and operation of cloud and on-premises security controls. Evaluates cloud security tools through proof-of-concept testing, documents results, maintains architectural diagrams and runbooks, and assists with security-control deployments. Provides technical support to agency stakeholders, collaborates with project teams, and helps align security readiness with deployment schedules in a 24/7 operational environment.

Supports the integration, testing, configuration, and operation of defensive security technologies across hybrid cloud and on-premises environments. Evaluates cloud security tools through proof-of-concept testing, documents results, maintains architectural diagrams and operational runbooks, and assists with security-control deployments. Provides technical support to agency stakeholders and coordinates security readiness with project teams. The role may require nights, weekends, or varied shifts in a 24/7 operation.

Designs and implements defensible network security infrastructure for New York City government agencies. Responsibilities include reviewing security architecture, identifying gaps, developing risk management plans, building and testing cyber defense systems, implementing continuous monitoring, administering security tools, automating controls, integrating security procedures, coordinating with technical teams, and supporting cybersecurity vendor procurement. The role operates within a 24/7 environment and may require nights, evenings, or weekends.

Supports the security of industrial control and operational technology systems used in critical municipal infrastructure. Responsibilities include implementing security controls, configuring segmented networks and firewalls, supporting incident response, conducting risk and vulnerability assessments, maintaining documentation and asset inventories, providing technical guidance, and contributing to ICS security training. The role is based in Brooklyn and may require nights, weekends, or other shifts in a 24/7 operation.

Supports New York City’s Software Security Assurance Program by conducting SAST, DAST, and software composition analysis; identifying application and third-party component vulnerabilities; reviewing cloud vendor applications; integrating security requirements into development workflows; and maintaining security documentation aligned with OWASP, NIST, and CIS standards.

Designs, implements, and maintains enterprise security controls across network, cloud, endpoint, and identity environments. Engineers firewalls, IDS/IPS, secure web gateways, segmentation, IAM, cloud security configurations, logging pipelines, and detection integrations. The role also hardens infrastructure, validates assessment findings, owns security platforms, evaluates new technologies, develops standards and runbooks, and partners with Cyber Defense, Infrastructure, Application, and business teams on secure architecture, compliance, and risk reduction.

Owns the design, operation, security, and continuous improvement of enterprise cryptographic infrastructure, including PKI, HSMs, key management, certificate lifecycle automation, and cloud cryptographic services. Leads signing ceremonies, compliance efforts, post-quantum cryptography planning, cryptographic policy development, and CBOM maintenance. Partners with security, infrastructure, and compliance teams on audits, risk assessments, and incident response while mentoring engineers and guiding the technical roadmap.

Conducts information system security engineering for a Naval Information Warfare Center program, including defining security requirements and integrating controls into technology components. Supports system design reviews, cybersecurity assessments, and RMF activities across hardware and software development. Requires cybersecurity experience, IA certification, U.S. citizenship, and Top Secret/SCI clearance. Travel is approximately 20% for security assessments.

Gather requirements and implement security rules, troubleshoot connectivity, monitor software-defined perimeter solutions, test and deploy software clients, collaborate with vendors, upgrade AWS environments, document procedures, and automate monitoring and manual tasks through scripting.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Lead security engineering for RTOS, hypervisor, and embedded virtualization: design and review defenses, collaborate on CPU/SoC security, perform threat modeling and automotive TARA, review low-level C/C++ code, build fuzzing and test infrastructure, assess vulnerabilities, and drive security fixes and verification toward automotive safety and security standards.