Top Security Engineer Jobs

Own end-to-end network security across enterprise, on‑prem, cloud, and vessel communications. Design firewalls, segmentation, VPN/ZTNA, AWS VPC controls, and cryptographic key management for constrained maritime links. Improve observability (flow logs, telemetry), support a NOC, and automate segmentation/configuration via scripting and infrastructure-as-code.

Designs and implements network security solutions (firewalls, IDS/IPS, proxies, routers) for client networks. Maintains security hardware/software, conducts packet analysis and routing protocol configuration, investigates incidents, manages security policies, and supports customer change requests and remediation.

Lead and oversee system security engineering and certification activities for SAP/SCI systems. Chair cybersecurity working groups, assess designs for compliance with NIST/RMF and JSIG, provide risk management and accreditation support, assist program protection planning, and coordinate with approval authorities to obtain Authorization to Operate.

Own and strengthen Doctronic's security posture for a HIPAA-compliant, SOC 2 Type II environment. Maintain compliance, run audits, perform penetration testing and vulnerability assessments, handle incident response, vendor security reviews, build security automation and monitoring, and partner with engineering to embed security across the SDLC.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Lead the company's security posture across application, infrastructure, and operational domains. Perform code reviews, threat modeling, and penetration testing; design security controls, monitoring, and incident response; establish compliance frameworks (SOC 2, PCI-DSS); build internal security tooling; and hire/manage security contractors and future hires while embedding security into the development lifecycle.

Lead information security risk management activities including system security testing, vulnerability scanning, reverse engineering, log analysis, incident response, scripting to automate analysis, and ensuring SOX/PCI compliance while supporting audits and legal/investigator coordination.

Designs and implements security architectures, configures firewalls and IDS, performs vulnerability management and patching, automates security tasks with scripts, supports incident response and CSIRT documentation, and manages certificates, keys, and identity management systems.

Lead and implement security guardrails for AI-enabled development and AWS cloud infrastructure. Design IAM and least-privilege controls, secure AI/ML pipelines, integrate security into CI/CD and developer tooling, run cloud/IAM audits, build AI-driven security monitoring and incident response, ensure HIPAA and other compliance, and mentor engineering teams.

Designs, implements, and operates enterprise security technologies; conducts risk assessments and penetration testing; monitors and responds to incidents; manages vulnerability remediation and security controls; partners with network and operations teams to strengthen overall security posture and compliance.

Define and maintain Secure SDLC policies, manage hardened cloud container image repository, embed automated SAST/DAST/OSS scanning into CI/CD, drive container security and image hardening, manage vulnerability triage and remediation, support threat modeling and application security reviews, and enable development teams to remediate security issues before release.

Design, implement, operate, and improve enterprise security technologies and processes. Monitor and respond to incidents, perform vulnerability assessments and penetration testing, harden networks/hosts, support audits and compliance, produce security reporting, and provide training and runbook documentation to strengthen organizational security posture.

Design, implement, operate, and improve enterprise network security controls (WAF, NAC, IDS/IPS). Monitor and tune security platforms, support secure network design with IT Networking, investigate security events, participate in incident response, maintain documentation and lifecycle management, and support vulnerability remediation and change management.

Design, deploy, tune, and operate enterprise security technologies; conduct risk assessments and penetration tests; monitor, detect, and remediate incidents; support vulnerability management, compliance, and incident response; produce security reports and runbooks; provide cross‑functional security guidance and after‑hours on‑call support.

Contribute to corporate information security by assessing designs, selecting controls, performing threat modeling and vulnerability management, supporting risk and vendor assessments, and advising engineering teams on secure solutions and governance.

Senior SAP Security Engineer responsible for gathering requirements, designing SAP roles, performing user administration, testing and documentation, supporting SAP GRC components and SOX compliance, and coordinating multiple projects. Strong communication and GRC experience required for upgrade and implementation projects.

Manage and operate the organization's security tool stack, handle platform management, and perform upgrades and patching. Requires hands-on experience with McAfee, Websense, Proofpoint, F-Secure (on Proofpoint), McAfee on Exchange, and Voltage. Strong communication skills and availability for a 12+ month contract; interviews by phone/Skype.

Senior network/security engineer to support firewalls, proxies, VPN provisioning, DNS/DHCP and IP segmentation, F5 BIG-IP load balancing, Websense and other security appliances. Participate in architectural/solution design, handle break-fix of high-severity issues, maintain proactive/reactive solutions repository, and produce documentation. Must have strong communication skills.

Serve as the primary security contact for software, firmware, and product teams; guide secure development and firmware security architecture; define security requirements and support certifications; identify and prioritize vulnerability remediations; investigate threats and implement mitigations; participate across the solution lifecycle; perform penetration testing. Travel ~15%.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Designs, implements, and operates cyber and physical security processes, assesses risk using industry standards, develops policies and SOAR workflows, supports compliance, and performs day-to-day security operations to reduce MTTR and protect altafiber assets.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Design, implement, and maintain enterprise data protection and security controls. Assess vulnerabilities, perform security assessments/audits, integrate security across the development lifecycle, review logs/tool outputs, document processes, support remediation, and provide SME support for incident response and compliance in a payments environment.

Lead engineering and integration of perimeter security controls across on-premises and cloud infrastructure. Collaborate with stakeholders to align capabilities with policies, coordinate deployments to minimize service disruption, work in agile sprints, produce technical documentation, provide Tier 4 support and on-call coverage, and drive operational excellence.

Lead Infrastructure Security Engineer on the Identity Governance and Administration team to design, implement, and maintain identity management solutions (SailPoint IIQ, PingOne, ForgeRock). Collaborate with product owners, architects, ops and security to ensure compliance, perform root-cause analysis, onboard applications, integrate security features, and mentor team members while working in agile delivery.