Top Security Engineer Jobs

Lead and scale Serval’s cybersecurity detection and response program. Design and operate monitoring, triage, investigation, containment, remediation, incident response, and recovery processes. Build and mentor teams across observability, detection and response, and threat intelligence. Establish playbooks, escalation paths, on-call operations, tabletop exercises, and continuous improvement. Partner with Engineering, Product, and Infrastructure to embed reliable telemetry and security capabilities across cloud, corporate, and production environments.

Lead corporate security for endpoints, device trust, SaaS posture, workforce identity, and network access. Build teams, automate controls as code, implement allowlisting, binary authorization, 802.1x, and govern OAuth/MFA to enforce least-privilege across the company.

Designs and implements security architectures and embedded software for complex processors. Responsibilities include analyzing adversary threats, developing countermeasures, integrating hardware and software, defining system requirements and architectures, and validating solutions. The role involves cryptographic algorithms, secure coding, operating system security, security protocols, and defense-in-depth solutions. Engineers may provide technical leadership and apply model-based systems engineering practices. This is a full-time onsite position supporting defense electronics and national security missions.

Own spacecraft and embedded-platform security architecture, threat modeling, PKI, cryptography, secure boot, firmware, FPGA, RF, and supply-chain security. Build production security tooling, foundational services, test frameworks, and validation platforms for resource-constrained systems. Lead penetration testing, security assessments, secure development practices, and organization-wide hardening initiatives while mentoring engineers and addressing novel space-based threats.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Designs, implements, and supports IAM solutions across Okta, Microsoft Entra ID, Active Directory, and integrated applications. Responsibilities include SSO, MFA, passwordless authentication, federation, provisioning, deprovisioning, identity governance, access reviews, PAM, RBAC, automation, troubleshooting, documentation, audits, and Zero Trust improvements. The role partners with technical and business teams to deliver secure, scalable access solutions and requires five or more years of IAM experience.

Provides onsite administration, implementation, troubleshooting, and maintenance of enterprise network, security, server, cloud, identity, and endpoint infrastructure. Manages switches, firewalls, wireless access points, Nutanix systems, protocols, patching, documentation, incidents, and Tier 3 support. Leads infrastructure projects, performs root-cause analysis, supports technology deployments, and travels to regional sites across Los Angeles and San Diego Counties.

Build software and tooling for trusted boot, device provisioning, credential verification, key management, and hardware-based device security. Work with NVIDIA secure boot, UEFI, TPMs, ARM TrustZone, and HSMs while writing and debugging Linux software and scripts. Identify attack surfaces, investigate hardware and software issues, and collaborate with security, firmware, cloud, manufacturing, and engineering teams. Own scoped projects from design through testing.

Own the application security program strategy, roadmap, architecture standards, tooling, threat modeling, security champions program, and developer training. Integrate security tools into CI/CD pipelines, manage findings and remediation, coordinate penetration testing, maintain audit evidence, and report risk and program metrics to leadership. Operate autonomously while influencing development, infrastructure security, IT leadership, and external vendors. Support secure AI adoption and risk-based security decisions across the organization.

Performs information assurance and cybersecurity engineering for DoD and Intelligence Community systems. Responsibilities include RMF implementation, security authorization packages, SSP development, vulnerability and risk assessments, continuous monitoring, STIG hardening, POA&M remediation, compliance reporting, and security documentation. The role supports 24/7 operational and test environments, collaborates with engineering and security teams, and requires occasional after-hours support.

Build and operate a scalable AI security platform, including infrastructure, APIs, SDKs, distributed systems, and security primitives. Design identity, authentication, authorization, encryption, data protection, and AI-agent safety controls. Partner with security and engineering teams to create reusable platform capabilities, improve reliability and developer experience, and shape the architecture of Robinhood’s AI Security platform.

Designs and operates security controls for payment infrastructure, APIs, cloud environments, and enterprise systems. Responsibilities include security monitoring, threat hunting, vulnerability assessment, incident response, network and application security engineering, identity management, compliance support, secure code review, threat modeling, and security automation. The role also partners with product, engineering, sales, and customers to communicate security capabilities, support assessments, and develop marketable security features.

Architects and modernizes enterprise endpoint security platforms, including Trellix ePO infrastructure, agent ecosystems, detection-as-code pipelines, and automated containment workflows. Develops MITRE ATT&CK-aligned behavioral detections, attack surface reduction baselines, telemetry integrations, and disaster recovery architectures. Provides Tier 3 troubleshooting for operating-system, kernel, driver, and defensive-agent issues. Produces engineering specifications, migration guides, CI/CD pipelines, and operational runbooks. Requires extensive experience, DoD TS/SCI clearance, Security+, and DoD 8140 compliance.

Develops mission-focused cybersecurity projects by extracting and analyzing network, computer, mobile, technical, and financial data. Performs technical data exploitation, vulnerability assessments, trend analysis, and reporting to support operational planning. The role uses scripting, databases, cryptocurrency and financial transaction knowledge, and information security research while coordinating with cyber project managers and communicating findings to technical and non-technical stakeholders.

Conduct vulnerability triage, reproduction, root-cause analysis, and proof-of-concept development. Build LLM harnesses connecting models to research tools, context, and execution environments. Develop automation for code and binary analysis, experimentation, evidence collection, and reporting. Improve reliability through logging, controls, reproducibility, and evaluations while maintaining reusable research tools, environments, scripts, and documentation.

Leads cybersecurity engineering activities, including security policy enforcement, access administration, firewall and intrusion detection management, vulnerability scanning, security reviews, compliance auditing, encryption, and security infrastructure projects. The role manages multiple cross-functional initiatives, recommends security products, analyzes logs and access data, documents security procedures, and mentors security engineers and contractors.

Designs and operates enterprise identity and cloud security solutions using Okta and AWS. Leads application onboarding, authentication controls, automation, CI/CD, monitoring, incident response, resiliency, audit readiness, vulnerability remediation, and production support. Partners across cloud, infrastructure, application, and cybersecurity teams; influences architecture and platform roadmaps; mentors engineers; and drives improvements in security, reliability, onboarding velocity, governance, and operational effectiveness.

Secures and maintains the authorization posture of Navy Platform Information Technology flight control systems. Responsibilities include resolving authorization conditions, authoring and testing contingency plans, mitigating end-of-life risks in air-gapped environments, coordinating STIG implementation with engineering teams, and updating eMASS, VRAM, and risk assessment packages. The role requires DoD cybersecurity engineering experience, NIST and DISA STIG knowledge, relevant certifications, and the ability to obtain or maintain a Secret clearance.

Leads cybersecurity engineering and infrastructure initiatives, including security policy enforcement, access administration, firewall and proxy management, vulnerability scanning, logging, intrusion detection, encryption, and OS hardening. Reviews security models and products, audits application access for SOX and PCI compliance, manages multiple cross-functional projects, documents security procedures, and mentors security personnel and contractors. This is a hybrid role requiring at least two weekly office days in Reading, Pennsylvania.

Implements, maintains, supports, and designs information security systems and tools in cloud and SaaS environments. Coordinates security system development, testing, deployment, troubleshooting, integrations, and configuration with risk managers, application experts, technology teams, business stakeholders, and vendors. The role also supports production systems, improves security processes and documentation, and applies information security and risk management practices.

The Information Security Tools Engineer implements, maintains, supports, tests, and deploys security systems in cloud and SaaS environments. The role coordinates with risk managers, application experts, technology and business teams, and vendors; troubleshoots production security systems; contributes to system design, process maturity, and documentation; and supports enterprise security programs.

Implements, maintains, supports, tests, and deploys information security systems and tools in cloud and SaaS environments. Coordinates with risk managers, application experts, security and technology teams, business stakeholders, and vendors. Provides troubleshooting expertise, supports production security systems, contributes to system design, and improves team processes and documentation. The role requires Azure security integrations, operational technology management, enterprise project delivery, risk management, VMware knowledge, and artificial intelligence control systems experience.

Leads enterprise and cloud incident response, intrusion analysis, forensic evidence collection, malware investigation, threat detection, vulnerability analysis, and remediation coordination. The role analyzes network alerts and threat intelligence, conducts damage assessments, preserves evidence, performs cyber defense trend analysis, and produces incident reports and after-action reviews. It also develops security guidance and knowledge-base content while supporting customer cybersecurity operations on-site in McLean, Virginia.

Designs, programs, tests, commissions, and troubleshoots physical security systems, including access control, CCTV, and intrusion systems. Produces layouts, security designs, programming documentation, bills of materials, and closeout documents. Reviews designs and construction drawings, supports installation teams, trains clients, resolves technical issues, and communicates project status. Requires site visits for walkthroughs, bids, installation oversight, meetings, and commissioning.

Supports enterprise cybersecurity Assessment and Authorization projects by documenting security controls, architectures, SSPs, CONOPS, contingency plans, user guides, SOPs, POA&Ms, and RMF artifacts. Coordinates with technical teams, contractors, assessors, and customer security organizations to achieve and maintain ATD, IATT, and ATO. Tracks accreditation status and supports security reviews across complex network, cloud, virtualization, and enterprise computing environments.