Top Security Engineer Jobs

Lead design, implementation, and operational management of enterprise firewall and network security architectures. Provide expert Palo Alto and Cisco Firepower support, manage firewall rules, support VPN and remote-access solutions, lead migrations and automation efforts, support compliance audits (PCI, SOC), and produce documentation while partnering with infrastructure, cloud, and application teams.

Own and implement security measures across cloud infrastructure and the software lifecycle: threat modeling, risk assessments, security testing, incident response, secure CI/CD, and developer enablement to remediate vulnerabilities and ensure compliance with standards.

Design, implement, and maintain network security solutions (firewalls, IDS/IPS, proxies, VPNs); perform packet analysis, incident identification and remediation, manage security policies, and support customer billable projects.

Serve as senior technical authority leading DOJ Security Assessment and Authorization (SAA) and RMF programs: guide system categorization, select and implement security controls, oversee assessments and continuous monitoring, advise leadership on risk, support incident response and audits, mentor security staff, and ensure audit-ready authorization artifacts.

Provide advanced network security engineering for a U.S. Government customer: procure, deploy, configure, and maintain hardware and network devices (firewalls, proxies, VPNs, load balancers); perform site surveys, create technical design packages, lead teams, plan hardware projects, perform security planning, risk analysis, and design trusted inter-system relationships. Support SIGINT-focused complex systems and validate hardware in coordination with systems and test engineering.

Lead security operations and IT administration across Windows, Linux, and cloud environments. Maintain the System Security Plan, support audits (NIST 800-171, ISO 27001), perform log review, vulnerability scanning, access and configuration management, incident response, and manage Microsoft 365, XDR, and Linux systems while documenting configurations and procedures.

Design, implement, and support enterprise network security solutions (firewalls, IPS/IDS, proxies, load balancers). Provide after-hours support, troubleshooting, packet analysis, vulnerability management, and collaborate with global partners on security projects and remediation.

Design, build, and maintain developer-focused security tooling and automation. Deploy and optimize Wiz and Fastly WAF across CI/CD and Kubernetes, integrate cloud security tooling, perform code reviews and threat modeling, and build AI-assisted workflows to scale product security.

Provide Nexpose and Nessus implementation, configuration, tuning, and reporting. Collaborate with staff to identify risks, develop mitigation plans, improve scanning processes, manage projects, and transfer knowledge to technical teams. Produce technical and management reports and ensure environment meets agency requirements.

Lead day-to-day cybersecurity operations and long-term security strategy. Manage MSSP/MSP relationships, drive cloud and application security (AWS/Azure), oversee detection/response (SIEM/EDR), tune alerts, conduct incident response, maintain policies, run awareness training, and report security posture to leadership.

Design, implement, and scale enterprise security architecture across identity, endpoints, network, SaaS, and AI systems. Lead zero-trust transformation, automate security workflows, build AI-augmented detection and response tooling, perform risk assessments and threat modeling, and mentor junior engineers while partnering cross-functionally to improve telemetry, monitoring, and incident response.

Manage and optimize the Tripwire deployment, perform discovery and health checks, develop remediation plans, and lead incident response including advanced malware detection, mitigation, and security event analysis. Work under variable schedules to troubleshoot, configure, and maintain security tooling and analytics.

Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.

Contract Security Engineer focusing on malware detection, reverse engineering (Windows), incident response, and security event analytics using ArcSight SIEM and McAfee ePO, plus automation scripting and network/protocol analysis.

Install, configure, maintain, and monitor IDS/IPS, SIEM, EDR, HBSS/ESS and related security devices; perform intrusion detection analysis, incident response planning, network troubleshooting, reporting, and countermeasure development; maintain DISA-mandated products and provide LAN/WAN support and TDY/shift coverage.

Lead and execute red team exercises and penetration tests across applications, infrastructure, and physical environments. Mentor teammates, develop automation tools, partner with detection/response teams, prioritize and drive remediation, and conduct adversarial simulations to improve detection and incident readiness.

Lead product security reviews, perform manual code and penetration testing, threat model and assess AI/LLM-integrated architectures, drive incident response and remediation, build security automation tools, mentor engineers, and publish security research.

Lead control testing, reporting, and remediation for IT risk and security. Maintain assurance programs, develop metrics and training, drive regulatory and contractual compliance, and coordinate stakeholders to ensure effective IT controls.

Lead deployment and implementation of CyberArk Privileged Identity Management (v7–9) for large customers: gather requirements, design and architect the solution, perform compliance checks, produce alerts/reports, investigate and perform RCA for incidents, provide technical leadership, and administer Windows/VMware environments. Travel to customer sites as required.

Contract Network Engineer in Columbia, SC (6-12 months). Responsibilities include administering network environment, rights management, diagnosing and troubleshooting computer and network issues, configuring/troubleshooting Windows client/server systems, developing admin procedures/policies, and strong verbal/written communication. Preferred experience with security standards (PCI/NIST/Pub1075), networking protocols, MS Exchange, PowerShell, disaster recovery, and change management.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Design, harden, and operate cloud infrastructure for a medical AI platform. Own security posture, compliance, and resilience of production systems; improve security observability and implement defense-in-depth controls across services and data platforms handling sensitive medical information.

Perform security engineering for design, implementation, and assessment of secure networks/enclaves. Conduct technical security assessments, risk analysis, and recommend mitigations. Validate security requirements, integrate cybersecurity components, and support trusted relationships among systems.

Configure, tune, and manage Nexpose and Nessus enterprise vulnerability scanning environments. Produce technical and management reports, develop procedures and process improvements, identify security risks, assist mitigation, and transfer knowledge to technical staff while collaborating across teams and managing project deadlines.

Lead strategy and technical execution of vulnerability management, offensive security, and AI-augmented defenses. Own full VM lifecycle, integrate scanning and asset systems, automate remediation, generate security insights, define KPIs/SLAs, advise executives, and mentor engineers to improve organizational security posture and compliance.