Top Security Engineer Jobs

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Conduct security reviews during software design and post-development code review across C#, Python, React, and PostgreSQL. Perform threat modeling, identify vulnerabilities, recommend remediation, maintain secure coding standards, and support CMMC 2.0, DFARS, and NIST 800-171 compliance. Partner with engineering teams on application security, CI/CD security checks, software supply chain security, and developer training.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Build and maintain scalable security platforms, automation, APIs, detections, and internal tooling for a cloud-native SaaS environment. Secure AI applications, LLM services, identities, SaaS platforms, cloud infrastructure, and APIs. Develop controls against prompt injection, data leakage, model misuse, and excessive permissions while supporting vulnerability management, incident response, threat modeling, and security operations.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Responsibilities include Kubernetes runtime isolation, identity and credential security, service mesh trust, Terraform infrastructure, fleet scaling, CI/CD, observability, auditability, human approval workflows, and governed agent integrations. The role also sets technical direction, mentors engineers, and partners across Product, Security, and Leadership to deliver secure, reliable distributed systems at scale.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Build Kubernetes operators, isolated per-user runtimes, identity and credential systems, service-mesh security, Terraform infrastructure, CI/CD, observability, audit pipelines, fleet operations, and human approval guardrails. Partner on safe agent integrations, establish platform and security standards, mentor engineers, and guide infrastructure strategy as the system scales.

Secure AI-powered applications, APIs, GenAI solutions, and RAG systems through architecture reviews, application security assessments, penetration testing, secure coding, and implementation of authentication, authorization, data protection, and AI-specific security controls. Collaborate with application, AI engineering, enterprise security, and architecture teams to address risks such as prompt injection, insecure outputs, data leakage, insecure plugins, and retrieval poisoning.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Designs, deploys, and secures AI agents for enterprise risk and security operations. The role manages AI governance, Microsoft security and compliance controls, data protection, DLP, insider risk, access controls, monitoring, incident response, and SIEM/XDR integrations. It also leads security architecture, automation, AI risk evaluation, cross-functional initiatives, and mentoring while supporting secure adoption of Microsoft Copilot and Azure AI platforms.

Assess and secure emerging AI technologies through architecture reviews, code reviews, penetration testing, threat modeling, and remediation guidance. Partner with engineering and business teams to establish secure development standards, research AI vulnerabilities, and build tools supporting secure AI use at scale. The role focuses on LLMs, agentic systems, RAG architectures, prompt injection, data exfiltration, privilege escalation, and model supply chain risks.

Leads enterprise IT security strategy, vulnerability management, security architecture reviews, risk reporting, security tool oversight, compliance, and remediation initiatives. Advises leadership and project teams, manages security vendors, supports cloud and data center security operations, updates standards, and serves as a subject matter expert. The role requires advanced technical expertise, cross-functional leadership, executive communication, and occasional after-hours support for critical security events.

Designs and operates cloud security architectures, controls, guardrails, and automation across AWS and Azure. Secures AI/ML platforms, data environments, CI/CD pipelines, and infrastructure-as-code deployments. Leads threat modeling, security assessments, compliance validation, incident response support, and secure technology adoption. Partners with engineering, infrastructure, AI, data, and enterprise architecture teams while developing security standards and applying frameworks such as NIST, CIS, and Zero Trust.

Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.

Lead Aircall’s detection and response program by building detection logic, SIEM data pipelines, security automation, and AI-enabled investigation tools. Own security infrastructure across AWS environments, conduct threat hunting and incident response, and improve detection maturity through documentation, tuning, metrics, and post-incident reviews. Partner with engineering, product, fraud, privacy, and legal teams while participating in on-call rotations and hiring.

Secures CI/CD pipelines, cloud infrastructure, software supply chains, and MLOps workflows. Builds controls for AI and LLM security, threat models AI systems, and develops internal AI agents for security automation. Partners with engineering teams on secure development practices, manages secrets and Kubernetes hardening, supports incident response, and reports on DevSecOps maturity and AI security posture.

Leads production security engineering for AI-enabled products and platforms. Responsibilities include threat modeling, secure design and code reviews, security automation, developer tooling, authentication and authorization reviews, AI security assessments, monitoring, documentation, and remediation guidance. The role partners with engineering, product, platform, risk, and cybersecurity teams while applying AI-assisted development practices and maintaining accountability for secure, reliable, production-ready software.

Own the company’s security architecture and compliance posture across application, cloud, data, and AI systems. Responsibilities include threat modeling, secure design, platform hardening, tenant isolation, SOC 2 readiness, export-control and ITAR preparation, AI/LLM security, security tooling, vulnerability management, incident response, and customer security reviews. This role establishes security practices as the company’s first dedicated security hire.

Supports enterprise cryptographic security operations, including data encryption, key management, HSMs, TLS, SSH, PKI, digital certificates, and SSL activities. Generates CSRs, supports certificate issuance, injection, and revocation across Mac OS and other systems, and helps maintain security administration processes. Requires Java and cryptography experience, strong analytical and communication skills, organizational discipline, and availability for weekend or overnight support.

Lead security architecture and engineering for a global Generative AI platform. Responsibilities include designing IAM and access controls, securing APIs and RAG pipelines, implementing AI guardrails, conducting threat modeling, enforcing data protection, and delivering secure cloud-native, multi-tenant systems. The role also guides engineering practices, CI/CD enablement, automation, solution design, and stakeholder collaboration across Global Markets technology teams.

Designs and leads enterprise cloud security architecture across AWS, Azure, GCP, and on-premises environments. Responsibilities include Zero Trust, IAM, encryption, compliance automation, policy as code, CNAPP/CSPM, threat modeling, Kubernetes security, AI/ML security governance, identity fraud mitigation, threat detection, SOAR automation, and hybrid-cloud resilience. The role also supports Purple Team exercises, continuous compliance, Shadow AI management, and autonomous security operations.

Build security into products and development workflows through threat modeling, secure design reviews, authentication and authorization controls, security tooling, CI/CD checks, vulnerability detection, and observability. Secure web applications and APIs, collaborate with AI researchers on risks such as prompt injection and data leakage, and improve detection of abuse and suspicious production behavior. The role requires backend software engineering, cloud infrastructure knowledge, and end-to-end project ownership.

Leads the architecture, engineering, governance, and production operation of agentic security operations capabilities. Builds secure AI-enabled systems for SOC data onboarding, detection engineering, threat hunting, investigation, response, automation, and platform operations. Establishes agent standards, evaluation frameworks, safeguards, observability, integrations, reliability models, and human-approval controls. Provides principal-level technical leadership, mentors engineers, evaluates emerging technologies, and collaborates with enterprise architecture, infrastructure, data, risk, privacy, legal, and compliance teams.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

Conduct automated and manual penetration testing of enterprise web applications, APIs, and supporting services. Validate vulnerabilities, assess business impact, document findings, recommend remediation, and retest fixes. Support threat modeling, secure design and code reviews, CI/CD security integration, audits, and development-team guidance. The role requires expertise in OWASP standards, application architecture, authentication and authorization controls, DAST tools, secure coding, and regulated healthcare data security.