Top Security Engineer Jobs

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Build, integrate, operate, and maintain security monitoring and auditing systems for F5 Distributed Cloud. Collaborate across security, engineering, operations, compliance, and business teams to define monitoring and alerting needs. Improve visibility, incident response, availability, and forensics capabilities; manage vulnerabilities and DevSecOps strategies; and support incident response and forensic investigations across large-scale distributed cloud systems.

Designs, develops, and supports secure AI-powered applications, agents, APIs, integrations, and workflow automations. Builds Generative AI solutions using LLMs, prompt engineering, retrieval patterns, and enterprise data. Responsibilities include full software delivery lifecycle participation, AI output evaluation, stakeholder collaboration, secure engineering, governance, monitoring, risk controls, and operational readiness.

Drive adoption of AI-driven security solutions through customer-facing technical engagements. Lead AI risk and governance workshops, support proof-of-value and proof-of-concept projects, demonstrate products, and advise on integrating AI security with existing architectures. Collaborate with Sales, Product Management, Marketing, and Customer Success while translating complex cybersecurity and AI concepts into business value.

Develop and maintain security policies, technical standards, control frameworks, and governance-as-code requirements. Translate regulations and security risks into measurable controls, manage policy lifecycles and exceptions, and ensure traceability from regulations through implementations. Serve as a control-family subject matter expert while collaborating with security, engineering, compliance, audit, legal, and business teams. Review policy implementations and support continuous control validation across cloud, IAM, application, infrastructure, and data security domains.

Lead development of AWS-based security platforms that orchestrate SAST, SCA, container, and API security scanning across enterprise pipelines. Build AI-enabled application security capabilities, including agentic vulnerability analysis, remediation recommendations, validation, and quality measurement. Design APIs, event-driven services, automation, and CI/CD integrations while improving platform reliability, observability, and scalability. Provide technical leadership, mentorship, and strategic direction across DevSecOps, application security, cloud, and AI initiatives.

Own end-to-end product security for autonomous defense systems, including RMF and ATO processes, security architecture, requirements, threat modeling, STIG applicability, vulnerability management, secure updates, monitoring, and software supply-chain security. Partner with engineering and government cyber offices to drive secure hardware and software designs across embedded, disconnected, and air-gapped environments. Serve as the program security authority from threat model through signed ATO.

Designs, integrates, administers, and optimizes enterprise physical security systems, including access control, video, visitor management, analytics, and cloud platforms. Leads system integrations, ETL workflows, automation, upgrades, troubleshooting, documentation, and technical initiatives across global sites. Partners with Security Operations, IT, Engineering, and business stakeholders to deliver scalable security technology solutions. Requires approximately 15% regional travel.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Owns the technical pre-sales lifecycle for physical security and network solutions. Partners with sales teams, consults with clients, designs CCTV, access control, FDAS, and wired/wireless network architectures, and develops BOMs, drawings, specifications, and pricing. Leads technical presentations, validates solutions, manages project handoffs, reviews designs and quotes, and mentors junior Solutions Engineers.

Senior pre-sales Solutions Engineer responsible for scoping, designing, quoting, and presenting physical security and network infrastructure solutions. The role covers CCTV, access control, fire alarm systems, wired and wireless networks, technical drawings, bills of materials, pricing, client consultation, project handoff, quality assurance, and mentoring junior engineers.

Identify, validate, prioritize, and remediate application and API vulnerabilities across web, cloud, and development environments. Manage SAST and DAST programs, perform manual testing and secure code reviews, conduct threat modeling, assess AWS security configurations, and provide developer-focused remediation guidance. Integrate security testing into CI/CD workflows, automate vulnerability management, track remediation metrics, and collaborate with engineering, cloud, and security teams to improve application security posture.

Administer, monitor, troubleshoot, and improve customer-facing security platforms. Handle Tier 3 escalations, investigate outages, support onboarding, execute upgrades and production changes, improve automation and reliability, maintain technical documentation, and collaborate with security, IT, vendors, and engineering teams. The role requires strong Windows, networking, identity, cloud, and security platform knowledge, along with independent judgment and careful change management.

Supports Security and Defense customers by translating application requirements into manufacturable ceramic armor solutions. Acts as a technical liaison across customers, manufacturing, process engineering, quality, technology, and procurement teams. Coordinates prototypes, qualifications, testing, production programs, continuous improvement projects, technical quotations, and customer proposals. Analyzes manufacturing and customer data, manages project plans and risks, supports technical sales, and participates in customer visits and industry events.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.

Build and operate threat detection systems across cloud, endpoint, identity, email, and application environments. Own detection lifecycles, detection-as-code workflows, data pipelines, CI/CD, integrations, threat intelligence enrichment, and AI-assisted security capabilities. Partner with Security Operations and engineering teams on investigations, incident response, threat hunting, and automation. The role requires strong Python and SQL skills, SIEM expertise, cloud and Linux knowledge, and independent project leadership.

Supports cybersecurity operations by analyzing network traffic, system logs, cyber data, browser behavior, and online services. Responsibilities include configuring and maintaining Tor Onion Services, using CDNs and security tools, troubleshooting networks and browsers, documenting configurations, defining and tracking requirements, and communicating technical concepts to diverse stakeholders. The role is full-time onsite in Chantilly, Virginia and requires an active TS/SCI clearance with a full-scope polygraph.

Designs, builds, and operates secure-by-default cloud controls across Google Cloud and multi-cloud environments. The engineer defines IAM and least-privilege policies, develops infrastructure-as-code and CI/CD security practices, supports incident response, establishes cybersecurity standards, tracks security posture KPIs, and partners with platform, product, and security teams to reduce risk while enabling efficient delivery.

Design, develop, and operate highly available platform security services for a distributed Kubernetes-based cloud platform. Build authentication, authorization, certificate, secret, and key-management capabilities using primarily Golang. Deploy services across multi-cloud and edge environments, participate in threat modeling and compliance readiness, collaborate with product and SRE teams, and mentor junior engineers.

Own the company-wide security program across cloud infrastructure, mobile applications, IoT firmware, and autonomous AI systems. Responsibilities include security operations, SIEM and incident response, vulnerability management, product threat modeling, penetration testing, secure SDLC enforcement, AI security guardrails and monitoring, cloud security, and end-to-end compliance ownership. Serve as the primary security authority, partnering with engineering and executives on risk, controls, audits, customer security, and incident post-mortems.

Build and deploy GenAI, ML, RAG, and agentic systems while conducting offensive security research and red teaming against AI applications. Identify prompt injection, data leakage, model theft, adversarial attacks, and other vulnerabilities; develop scanning and fuzzing tools; and implement secure-by-design hardening strategies. The role also involves cross-functional collaboration, technical research and writing, threat intelligence monitoring, community representation, and mentoring engineers.

Develop web applications with Node.js, remediate application security vulnerabilities including cross-site scripting and SQL injection, optimize database queries, and enhance logging, metadata collection, search, filtering, and IDM integration. The role requires AWS and Elastic Beanstalk knowledge, CRUD database development, Talend job development, and collaboration within a Scrum team using Rally.

Build and operationalize AI/ML threat detection systems for identity, network, device, and session telemetry. Develop real-time streaming pipelines, risk scoring and enforcement systems, MLOps platforms, and security controls for autonomous AI agents. Detect identity compromise, privilege escalation, data exfiltration, prompt injection, agent drift, and unauthorized access. Train, evaluate, deploy, and monitor production ML models while enabling autonomous investigation, containment, and remediation.

Secure AI, machine learning, inference, and developer platforms through threat modeling, architecture and code reviews, secure API and distributed-system design, model and supply-chain security, and security automation. Build controls for authentication, authorization, isolation, rate limiting, monitoring, anomaly detection, CI/CD scanning, and protection against prompt injection, model extraction, adversarial inputs, and data leakage. Partner closely with ML, platform, infrastructure, engineering leadership, and the CISO.

Leads CVS Health’s enterprise Application Security strategy, architecture, tooling, and secure AI adoption. Owns the AppSec technology stack, integrates security controls into developer platforms and CI/CD pipelines, establishes secure coding and software supply-chain standards, and guides application teams toward continuous, developer-native security practices. The role requires hands-on software engineering, application security, threat modeling, tool integration, cloud-native expertise, executive communication, and the ability to influence enterprise strategy without direct authority.