Top Security Engineer Jobs

Lead strategy and technical execution of vulnerability management, offensive security, and AI-augmented defenses. Own full VM lifecycle, integrate scanning and asset systems, automate remediation, generate security insights, define KPIs/SLAs, advise executives, and mentor engineers to improve organizational security posture and compliance.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Provide network and mainframe security oversight, evaluate infrastructure and applications for security, recommend hardware/software, participate in security projects, support disaster recovery testing and documentation, and assist in creating and reviewing information security policies and standards.

Lead design, implementation, tuning, and administration of enterprise ArcSight SIEM (ESM/Logger/SmartConnectors). Develop content (reports, filters, dashboards, FlexConnectors), optimize deployments, translate use cases to detection content, and support DoD information assurance and log management requirements.

Provide system administration and security engineering for Focused Operations (FO) FISMA systems across on-prem and cloud. Maintain forensic and threat detection tools, manage firewalls/switches, PKI and patching, implement automation/orchestration, perform health monitoring, follow RFC/change control, produce security reports and documentation, and support incident remediation and system testing.

Lead implementation and integration of UEBA and SOAR for a Zero Trust initiative at USSOCOM. Provide Tier 3/4 engineering, RMF/ATO lifecycle management, DISA STIG interpretation, telemetry integration, assessments of enclave and network infrastructure, and collaborate with ISSOs and stakeholders to improve processes and ensure product quality and security.

Protect and maintain the firm's global information infrastructure by managing firewalls, IPS, proxies, endpoint security, SIEM monitoring, incident response, security audits, documentation, and collaborating with IT teams and end-users.

Design, implement, and manage company-wide network and IT security standards to meet PCI compliance. Assess and remediate vulnerabilities, perform pen tests, create incident response plans, lead security meetings, and support network security events and audits.

Install, configure, and support security appliances and solutions (Next‑Gen firewalls, Cisco ASA, IPSEC VPNs, IDS/IPS, secure mail/web gateways, AV, mobile security, DLP). Document and communicate technical details clearly; maintain and troubleshoot network security infrastructure.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Manage and implement McAfee endpoint security (antivirus, DLP, HIPS) and Symantec endpoint encryption (PGP). Define SLAs and SOPs, perform remote infrastructure management, handle incident/change management using ticketing tools, lead a team, interact with customers, and support 24x7 operations.

Perform detection and response for security events and incidents, analyze malware and network traffic, manage SIEM and IDS/IPS, run vulnerability and web app scans, perform penetration testing, maintain security metrics, develop encryption standards and security advisories, and support incident response and remediation.

Own and mature Odysseys application security posture: perform code reviews, run SAST/DAST/SCA assessments, remediate vulnerabilities, embed security into CI/CD, maintain SOC 2 Type II compliance, evaluate AI/data pipeline risks, and partner cross-functionally to translate findings into actionable remediation.

Own Coinflow's defensive and offensive security posture: deploy and operate SIEM and SecOps dashboards, run continuous internal pentests, triage CVEs and manage dependency upgrades, integrate SAST/DAST/secret scanning into CI, define secure-by-default patterns, and produce audit-ready evidence for PCI DSS, SOC 2, ISO 27001, and DORA compliance.

Designs, implements, and supports network security for tier-one financial clients. Requires deep knowledge of routing protocols, Cisco and Juniper appliances, F5 load balancers, proxies, multicast/market-data networks, diagnostic tools, and strong problem-solving, leadership, and communication skills.

Serve as the Endoluminal business unit's product security lead for embedded and cloud-connected medical products. Provide hands-on security architecture, threat modeling, risk assessment, code and design reviews, vulnerability management, pen testing, and incident response. Translate corporate security standards into product implementations and collaborate across engineering, compliance, and centralized security teams while mentoring engineers and shaping security operating practices.

Design, test, and implement secure operating systems, networks, and databases; perform risk assessments, penetration and vulnerability analysis, and encryption work; develop cyber architectures, integrate forensic tools, and provide engineering recommendations for enterprise-wide national security systems.

Design, operate, and govern Northwood's identity architecture and Okta tenant, implementing SSO, MFA, RBAC, MDM policies, privileged access, and integrations to meet CMMC/ITAR/FedRAMP requirements while feeding identity telemetry into SIEM and supporting audits.

Manage enterprise-level vulnerability remediation across multiple areas, coordinating discovery, prioritization, and remediation tracking to reduce security risk and ensure compliance.

Design and implement enterprise data security architectures focused on databases (SQL Server), Databricks, and object storage. Develop encryption, IAM, DLP, IRM/DRM, tokenization, and SecOps controls; secure data pipelines, perform vulnerability assessments, automate security tasks, and maintain policies and documentation while collaborating with development teams.

Provide Security Operations for a managed security services environment: incident response, vulnerability scanning and remediation oversight, toolset administration (SIEM, IDS/IPS, scanning tools, malware mitigation), policy and SOP maintenance, automation of security workflows, client audits, training, and SLA management.

Lead development and maintenance of enterprise cybersecurity strategy, tools, and processes. Install, monitor, and support security applications (firewalls, EDR, DLP, IDS/IPS, vulnerability scanning), conduct testing, monitor performance, coordinate remediation, provide technical guidance, and participate in 24/7 rotational support while producing metrics and reports to ensure compliance.

Support RMF/A&A efforts to achieve ATOs, act as liaison to ISSOs, administer security toolsets on Windows and RHEL, run SCAP/STIG scans, track patches and vulnerabilities, lead POA&M and PTI/PTT activities, support continuous monitoring, and assist incident response and IA training.

Lead enterprise security operations: secure endpoints, servers, networks and third-party services; manage IAM, vulnerability management, EDR, intrusion detection, and incident response; support pen testing, compliance, audits, physical security, and employee security training while collaborating with engineering, ops, and legal.

Lead detection, response, and remediation of security incidents; maintain and improve security architecture, policies, and controls across cloud and on‑prem environments; manage security technologies (SIEM, IDS/IPS, vulnerability scanning, endpoint, WAF); perform threat hunting, vulnerability management, audits/pen tests response, and security project management; provide technical risk guidance and lead teams.