Top Security Engineer Jobs

Lead design, implement, and operate enterprise data security across cloud and SaaS using CASB, DSPM, and Microsoft 365 security. Configure CASB, integrate with identity and SIEM, deploy DSPM for data discovery/classification, and enforce DLP and governance controls. Collaborate with SOC/IR for threat detection and response, ensure regulatory compliance, and automate detection and remediation workflows.

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Lead FedRAMP/IC ATO and RMF lifecycle activities, conduct risk and security control assessments, manage vulnerability and continuous monitoring programs, integrate security into cloud and DevSecOps pipelines, support incident response and audits, maintain security documentation, and advise/mentor teams on compliance and secure architecture for government cloud and classified environments.

Design, deploy, and secure scalable cloud network infrastructure. Manage cloud networking, firewalls, access controls, monitoring, and compliance (PI/PHI). Automate with scripting/Ansible, troubleshoot performance issues, and maintain documentation while collaborating with DevOps and IT teams.

Implement and support data and system security measures focusing on encryption and PKI. Manage encryption tools (Vormetric, CloudLink), administer PKI solutions (ADCS and external providers), troubleshoot security issues, and provide customer-facing support and investigative problem solving.

Design, implement, and manage AWS cloud security controls; perform vulnerability assessments and penetration testing; monitor and respond to security events and incidents; automate security in CI/CD; develop policies and documentation; train engineers on secure practices; lead AWS security projects and ensure compliance with industry frameworks.

Design, develop, deploy and support the bank's data security capabilities (DLP, email encryption). Build Splunk dashboards/alerts/reports, implement use cases, test, document, troubleshoot production issues, and coordinate with teams and vendors for change requests and maintenance.

Operate and enhance the bank's security stack: manage IDS/APT/NDR appliances, support log management and SIEM, tune IDS rules, perform packet/network forensics, drive upgrades/migrations, respond to incidents, support audits, and collaborate with internal teams to troubleshoot and document security events and changes.

Perform application and cloud security architecture reviews (AWS focus), assess vulnerabilities via pentests and code review, recommend mitigations, develop secure cloud-native design patterns, integrate AI/LLM tools into review workflows, liaise with developers/architects, and mentor junior team members.

Lead global network security operations and projects, managing enterprise firewalls, segmentation, SD-WAN, SASE, ZTNA and NAC. Evaluate risks, ensure secure configurations, support incident response, modernize cloud/SaaS controls, collaborate with distributed IT teams, provide mentoring, and deliver security reporting and metrics.

Design, develop, and maintain network and security infrastructure. Architect, deploy, and support firewalls, VPNs, authentication, IDS, and encryption. Manage Checkpoint/Solaris/Cisco environments, ForcePoint/WebSense and MS TMG. Perform patching, capacity planning, vulnerability remediation, automation via PowerShell/Linux scripting, vendor case management, disaster recovery, and controls verification.

Perform offensive security testing and exploit development across enterprise systems, apps, and networks. Identify vulnerabilities, run production-safe exploitation, create remediation reports, support vulnerability management, conduct breach/attack simulations, collaborate with SOC and stakeholders, and provide threat context and metrics to reduce risk.

Design, implement, and maintain security toolsets; lead incident response and detection engineering; manage SIEM and log integrations; assess cloud and M365 security; identify and remediate security gaps; provide technical guidance, training, and documentation; track audit remediation and ensure compliance.

Design, implement, validate, and maintain standardized endpoint security baselines across Intune, MECM, and Jamf Pro. Configure Defender for Endpoint, BitLocker/FileVault, ASR, firewall, and compliance/Conditional Access settings. Test deployments, perform impact assessments, remediate vulnerabilities, troubleshoot policy conflicts, and produce implementation and rollback documentation while collaborating with cybersecurity, RMF/ISSO, and engineering teams.

Lead and scale Serval's infrastructure security: secure AWS, Kubernetes, container runtimes, and CI/CD; drive IAM, secrets and key management, network segmentation, workload isolation, vulnerability management, image provenance and supply-chain integrity; build and mentor a cloud/platform security team; embed security-by-design and policy-as-code across engineering and product.

Lead corporate security for endpoints, device trust, SaaS posture, workforce identity, and network access. Build teams, automate controls as code, implement allowlisting, binary authorization, 802.1x, and govern OAuth/MFA to enforce least-privilege across the company.

Lead and scale detection and response: design and operate monitoring, triage, investigation, containment, and remediation. Build and mentor teams across observability, detection, and threat intelligence. Create incident playbooks, on-call and escalation processes, tabletop exercises, and embed detection into product and infrastructure.

Lead SAP and Workday security initiatives including Emergency Access/Firefighter redesign, cross-application Segregation of Duties, PAM integration, secure AI (Joule) architecture, access governance, audits, remediation, and stakeholder alignment to meet SOX, GDPR, and compliance requirements.

Lead cybersecurity engineering across system lifecycles for classified DoD, SAP and SCI environments. Integrate security requirements into architecture and design, perform threat modeling and risk assessments, produce engineering artifacts (STIGs, control traceability), support RMF accreditation (JSIG), and integrate secure enclaves (SIPRNet, Type 1 crypto). Collaborate with ISSOs/ISSMs/SCAs and stakeholders to assess compliance and recommend mitigations.

Designs, implements, and manages policies and procedures for database and software security. Writes and audits Configuration Management (CM) plans and software change procedures; performs design reviews, configuration audits, and baseline status accounting. Implements CM processes in DevSecOps/Agile environments using tools like JIRA, Puppet, Confluence, and GitHub. Mentors team members. TS/SCI required.

Support development and implementation of AI governance, security policies, and controls. Integrate security tools across AI platforms, document AI use cases, and design privacy/compliance frameworks. Collaborate cross-functionally with data, engineering, and compliance teams to ensure responsible, secure AI adoption.

Design, deploy, and maintain data-centric security controls across cloud environments. Automate control validation and CI/CD security, perform risk assessments, build security monitoring and incident response, and create security documentation and training while collaborating with engineering teams to implement Zero Trust controls.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.

Design, implement, and harden system security for DoD clients. Lead RMF/ATO/IATO processes, perform vulnerability scanning and remediation, apply STIGs, and deploy firewalls/IDS/IPS/SIEM. Coordinate with ISSM, document security posture, and support certification and authorization activities for classified environments.

Design, implement, and sustain zero-trust and data-centric security across cloud environments. Automate control validation and CI/CD security, perform risk assessments and monitoring, respond to incidents, and create security documentation and training for engineering teams.