Top Security Engineer Jobs

Lead implementation and maintenance of security controls to achieve CMMC 2.0 compliance for CUI. Conduct vulnerability assessments, incident response, threat hunting, and forensic analysis. Prepare and support CMMC assessments, maintain SSP/POA&M, collaborate with compliance and operations teams, and run continuous monitoring and security awareness training.

Design, implement, and maintain security controls across networks, systems, and cloud environments. Monitor threats, conduct penetration tests and vulnerability scans, manage incident response, ensure regulatory compliance, and integrate security into SDLC and CI/CD pipelines through automation and DevSecOps practices.

Lead architecture and technical strategy for multi-tenant security stacks, serve as Tier-4 escalation for complex incidents, build Security-as-Code automation (Python/PowerShell/Terraform), integrate tooling across platforms, drive vendor evaluations and global standardization, and oversee compliance evidence for HIPAA, SOC 2, and CMMC.

As a Cloud Security Engineer, you'll secure cloud infrastructure, manage AWS and Kubernetes security solutions, conduct assessments, and mentor engineers.

Responsible for architecting and developing AI security infrastructure, optimizing performance and scalability of systems, and driving innovation in a collaborative environment.

Build and operate cloud-native security services and platforms. Own components end-to-end, improve availability, scalability, and security of distributed systems, participate in on-call, incident response, design reviews, and deliver tooling, automation, and documentation to improve developer security and reliability.

As a Senior Security Engineer, you'll lead AWS cloud security, manage security operations, and implement Zero Trust principles while using AI-powered tools for automation and incident response.

The Cloud Security Senior Engineer designs and maintains security controls across AWS and Azure, conducts assessments, and collaborates with engineering teams to enhance cloud security.

Lead end-to-end ATE secure provisioning for semiconductor manufacturing: define and implement fuse programming and lifecycle transitions, develop/validate Advantest 93K test methods, ensure secure boot and device identity, coordinate with Design/DV/Firmware/Security/Manufacturing, and define production controls, traceability, and guardrails across wafer sort, final test, SLT, and HVM.

Perform deep security assessments of open source framework internals (routing, middleware, caching, build tooling), find and fix systemic vulnerability classes, own disclosure/CVE processes, triage and run OSS bug bounty reports, build preventive tooling (linters, codemods, CI), and harden supply chain practices for Vercel-maintained projects.

Embedded senior security engineer owning end-to-end security for v0: proactively find and fix vulnerabilities, build security features (sandboxing, isolation, permission boundaries), review launches, manage HackerOne reports, refine threat models, harden code execution, and respond to v0-specific incidents while shipping product features alongside the team.

Architects and builds automated application security layers across the SDLC for a large financial services program. Integrates and tunes SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develops AI-enabled secure code scanning and hardened baselines, automates secure coding patterns and security runbooks, and reviews Java and Python code to provide detailed remediation guidance. The role also supports threat modeling and AI-assisted vulnerability triage.

Designs and develops blockchain security products, core frameworks, APIs, infrastructure, and automation for large-scale distributed systems. Responsibilities include architecture standards, performance tuning, incident troubleshooting, system refactoring, continuous delivery, capacity management, and reusable libraries. The role also engages users, coordinates with cross-functional teams, and addresses security risks involving blockchain, smart contracts, wallets, and on-chain attacks.

Design, build, and maintain security products and infrastructure: real-time detection engines (Flink/Kafka), high-performance APIs (Go/Node.js), streaming analytics, Kubernetes at hyperscale, and petabyte-scale data pipelines. Lead technical designs, collaborate with security teams, and mentor junior engineers.

Design and build real-time security detection engines and streaming analytics using Apache Flink and Kafka. Develop high-performance security APIs and microservices in Go and Node.js, architect Kubernetes-based security solutions, and build petabyte-scale data pipelines. Lead technical design, collaborate with security teams, and mentor junior engineers.

Own and automate Klaviyo's technology and third-party risk register and taxonomy, lead AI risk governance and ISO 42001 readiness, perform quantitative cyber risk analysis (financial expected loss), drive third-party risk scoring automation, produce decision-ready risk reporting for leadership, and provide independent second-line oversight while partnering cross-functionally to track and close remediation.

The Senior Security Engineer will build and maintain detection systems, automate responses, and lead incident investigations to enhance security observability.

The Senior Security Engineer will design and maintain detection logic, conduct threat hunting, improve incident handling, and collaborate with teams to enhance security processes.

Design and implement security controls for identity, access management, and endpoint security. Lead initiatives around zero trust and phishing-resistant MFA.

The Security Engineer will develop a comprehensive security strategy for hybrid robotic deployments, focusing on data encryption, access control, and secure remote access, while ensuring compliance and auditing standards are met.

Perform application security engineering and manual code/security reviews throughout the SDLC. Triage and remediate web application vulnerabilities, validate compensating controls, support incident response, and coach engineering teams on secure coding practices.

Own product security across robots, embedded systems, firmware, cloud infrastructure, APIs, mobile applications, and fleet operations. Lead threat modeling, secure architecture reviews, vulnerability research, penetration testing, code review, incident response, detection engineering, and security tooling. Establish security standards, automate testing, investigate incidents, and partner closely with engineering teams to harden systems and ship secure fixes.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Design, implement, and operate cloud-native security platforms and services. Build controls for audit logging, access, secrets, identity, workload isolation, and CI/CD security. Automate compliance and governance across AWS/Azure/GCP, write production-quality code, and lead large-scale security architecture and deployment initiatives.

Lead offensive security assessments across embedded vehicle software, mobile, and backend systems. Perform penetration tests, red-team activities, and vulnerability research; validate impacts and develop exploits; provide actionable remediation guidance; partner with engineering teams to improve secure SDLC and advance offensive tooling and testing methods.