Top Security Engineer Jobs

Supports enterprise cybersecurity Assessment and Authorization projects by documenting security controls, architectures, SSPs, CONOPS, contingency plans, user guides, SOPs, POA&Ms, and RMF artifacts. Coordinates with technical teams, contractors, assessors, and customer security organizations to achieve and maintain ATD, IATT, and ATO. Tracks accreditation status and supports security reviews across complex network, cloud, virtualization, and enterprise computing environments.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Leads application security across engineering teams by conducting architecture reviews, threat modeling, secure code reviews, and white-box testing. The role matures the Secure SDLC, integrates security tooling into CI/CD pipelines, develops security automation, leads security champions, mentors engineers, evaluates AI security risks, and supports compliance with SOC 1, SOX, CIS v8, and PCI DSS.

Performs system security engineering throughout the acquisition and development lifecycle. Responsibilities include program protection, supply chain risk and vulnerability assessments, counterfeit parts prevention, criticality analysis, security planning, vulnerability mitigation, supplier oversight, authorization support, technical documentation, and leadership of cybersecurity activities. The role requires U.S. Government security engineering experience, RMF expertise, a qualifying DoD certification, and an active Secret clearance.

Provide Tier 3 network security engineering for INSCOM: install, configure, and harden network and security infrastructure; troubleshoot switching, routing, VPNs, and Next-Gen firewalls; manage ACLs and firewall policies; configure F5 BIG-IP (LTM/ASM); perform packet analysis; apply STIGs/NIST hardening; collaborate across teams and support enterprise SDLC.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Build and maintain hardened, minimal container images across Linux distributions and application runtimes. Remediate CVEs, troubleshoot package and dependency issues, reduce attack surfaces, and develop automation for image building, scanning, testing, versioning, SBOM generation, and publishing. Validate compatibility with Kubernetes and containerized environments, collaborate with infrastructure and security teams, establish hardening standards, and document curated-image usage.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Supports mission-critical cybersecurity operations through technical data exploitation, network and mobile data analysis, vulnerability assessments, and systems evaluation. Develops actionable recommendations using Python, Perl, databases, and financial technology platforms. Integrates technical and financial datasets, identifies trends, prepares analytic reports and briefings, and collaborates with analysts and project managers on cyber initiatives. This is a full-time onsite role in McLean, Virginia requiring active TS/SCI clearance with a full-scope polygraph.

Owns the external attack surface management platform, including asset discovery, exposure analysis, risk prioritization, remediation coordination, integrations, automation, reporting, onboarding, and operational standards. Partners with security, cloud, network, infrastructure, application, and business teams to validate findings, reduce risk, investigate externally exposed assets, and improve platform effectiveness.

Monitors, investigates, and responds to security events and vulnerabilities across company systems and networks. The role analyzes alerts and logs, supports incident response, conducts vulnerability scanning and remediation tracking, manages cybersecurity tools, researches security solutions, maintains incident and risk management processes, and prepares investigation and incident reports. It also partners with operational, development, and deployment teams to identify information security violations and improve secure system practices.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Develop and maintain secure software applications, integrate security throughout the software development lifecycle, identify and remediate vulnerabilities, review code, build automated tests, and support secure deployment processes. The role collaborates with engineering and security teams on architecture, risk assessment, threat mitigation, documentation, and technical decisions. Candidates need production software development experience, programming skills, API and database knowledge, secure coding expertise, testing experience, and strong communication skills.

Conducts security control assessments for government information systems using NIST standards and the Risk Management Framework. Tests controls, reviews evidence, identifies vulnerabilities and risks, recommends corrective actions, executes assessment tools, prepares reports, and briefs stakeholders. The role also supports incident investigations, security testing, technical review boards, and process improvements. Requires cybersecurity expertise, network and systems knowledge, technical reporting skills, and a TS/SCI clearance with polygraph.

Leads complex security event investigations and incident response across Linux, macOS, cloud, and Kubernetes environments. Develops detections, automation, runbooks, and response workflows; coordinates containment and remediation; conducts post-incident reviews; partners with threat intelligence and detection engineering teams; mentors junior engineers; and leads operational improvements for a 24/7 SOC.

Leads the engineering, integration, deployment, and support of AI-powered security operations platforms. Designs security automation, SOAR integrations, RAG architectures, agent orchestration, evidence pipelines, observability, governance, and cloud-based security workflows. Partners across security, risk, data, and technology teams to improve investigations and reduce response times while managing AI-related risks. Provides technical leadership, establishes engineering standards, mentors staff, and communicates complex security risks to senior stakeholders.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, incident response, and compliance evidence. Partner with developers, vendors, cloud teams, and compliance stakeholders to close critical findings and embed secure delivery practices through automation and security AI tooling.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, and security automation. Partner with development, cloud, compliance, and security teams to remediate critical findings, support audits, improve secure coding, and provide security guidance. The role also involves leveraging AI-enabled tools for vulnerability triage and remediation.

The ISSO coordinates RMF authorization and reauthorization activities, guides system owners on data categorization, eMASS and DITPR registration, security controls, and compliance. Responsibilities include reviewing security plans, managing POA&Ms, assessing risk acceptance, conducting ACAS and SCAP scans, reviewing STIGs, performing vulnerability analysis, supporting continuous monitoring, and writing SSPs. The role requires extensive Microsoft technical experience, active Top Secret clearance with SCI eligibility, DoD 8570 IAM certification, a bachelor’s degree, and at least 10 years of experience.

Serve as the primary technical security engineer for a DoD system, managing ACAS and SCAP vulnerability scans, STIG compliance, patching, POA&M remediation, incident response, system documentation, and NIST RMF compliance. Collaborate with the ISSO, maintain security and configuration records, investigate alerts, and use PowerShell, Python, or Bash to automate security and compliance activities.

Lead security incident response from detection through recovery, investigate cloud, container, identity, and application threats, and coordinate cross-functional containment. Build automation using Python, Go, or Bash; improve SIEM integrations, playbooks, detections, logging, and response tooling. Conduct forensic investigations, threat assessments, post-incident reviews, tabletop exercises, and remediation efforts across Replit’s cloud-native environment.

Leads teams developing, deploying, and maintaining information assurance and cybersecurity solutions. Oversees security tool integration, troubleshooting, assessments, audits, vulnerability identification, and compliance activities. The role requires advanced network and system security expertise, cross-functional leadership, project management experience, strong communication skills, a bachelor's degree, professional security certification, and Top Secret clearance.

Owns Walden Robotics’ corporate security program, including CrowdStrike operations, incident response, vulnerability management, third-party assessments, AWS security, SOC 2 readiness, risk management, security awareness, and vendor coordination. The role is the first dedicated information security hire and requires hands-on technical execution, cross-functional leadership, policy development, audit support, threat modeling, and mentoring.

Performs systems security vulnerability assessments, risk mitigation, security design reviews, and program security activities for the Sentinel ICBM program. Supports risk assessment initiatives, system security lifecycle requirements, program milestones, and stakeholder communication. Requires an active Secret clearance, U.S. citizenship, and eligibility for Top Secret and SAP access. The role is based in Roy, Utah, with approximately 10% travel.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.