Top Security Engineer Jobs

Lead the enterprise AI Security Program by designing and implementing security standards, controls, guardrails, governance, automation, and monitoring for LLMs, AI platforms, agents, gateways, and AI-enabled applications. Partner with application security, engineering, privacy, compliance, and operations teams to address threats such as prompt injection, jailbreaks, data exposure, excessive agency, and adversarial attacks. Provide technical leadership, threat modeling, security architecture guidance, and maturity reporting.

Build and operate security across autonomous trucking systems, including vehicle security, cloud infrastructure, Kubernetes, CI/CD, IAM, secrets management, vulnerability management, AI security, threat modeling, monitoring, and incident response. The role contributes to secure software development, system hardening, OTA updates, supply-chain protection, and security automation across onboard and platform environments.

Designs and operates security across autonomous trucking systems, including onboard vehicle security, cloud and infrastructure security, IAM, secrets management, secure OTA updates, AI safeguards, vulnerability management, threat modeling, detection, and incident response. The role also establishes secure development practices, automates security tooling, and mentors engineering teams.

Owns security engineering for AI and ML infrastructure, including training and inference pipelines, model registries, MCP servers, and agent runtimes. Designs security controls, conducts threat modeling and adversarial assessments, maintains compliance, and drives vulnerability remediation. Partners with AI Platform, Research, ML Operations, Science, and AI Safety teams to embed security across data, models, pipelines, and agentic systems.

Design and harden Nova’s cloud and future on-premise platform security, including tenant isolation, identity, access policies, secrets, keys, networks, and secure execution sandboxes. Lead red-team testing of authentication, AI agents, privilege boundaries, prompt injection, and sandbox escapes. Own SAP identity integrations, internal security standards, compliance readiness, and customer security partnerships. Research offensive and defensive AI security, contribute to product development, and represent Nova in the SAP security community.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.

Designs and operates security controls for AI/ML systems, including threat detection, incident response, cloud and application security, model governance, adversarial testing, and security automation. Builds production tooling across AI platforms such as SageMaker, Azure OpenAI, and Databricks; applies MITRE ATLAS, OWASP AI Top 10, and NIST AI RMF frameworks; and integrates enterprise security platforms to protect models, data, pipelines, and AI applications.

Build and operate Coupang's security infrastructure and IAM platforms. Design and implement backend APIs and scalable distributed systems, collaborate cross-team for platform adoption, ensure reliability and operational excellence, and mentor other engineers.

Senior Application Security Engineer responsible for threat modeling, application security reviews, and operating SAST, DAST, SCA, secrets detection, IaC, and container scanning tools. The role integrates security controls into CI/CD pipelines, supports API and software supply chain security, improves Secure SDLC maturity, assists with PCI DSS compliance and penetration testing, automates security workflows, and partners with developers on remediation, secure coding, incident response, documentation, and security metrics.

Conduct web application security assessments, vulnerability testing, and remediation validation for company and customer-facing applications. Manage application security assets, analyze vulnerabilities, distinguish false positives, and track findings through resolution. Provide secure coding guidance and developer training, prepare assessment documentation, and collaborate with development, infrastructure, security, business, and customer teams to improve application security.

Responsible for securing multiple applications, cloud platforms, and infrastructure. Develops incident response and recovery plans, performs application and platform security testing, monitors anomalous activity, manages vulnerabilities, and advises government partners. Builds and maintains secure AWS cloud environments using defense-in-depth practices. Oversees IAM, COMSEC, encryption, firewalls, compliance monitoring, security policies, and continuous improvements to cloud-based systems.

Own product security across robots, embedded systems, firmware, cloud infrastructure, APIs, mobile applications, and fleet operations. Lead threat modeling, secure architecture reviews, vulnerability research, penetration testing, code review, incident response, detection engineering, and security tooling. Establish security standards, automate testing, investigate incidents, and partner closely with engineering teams to harden systems and ship secure fixes.

Build and operate security automation across AWS, applications, company systems, and field operations. Map risks, implement secure infrastructure, review application security, automate access and secrets management, integrate security checks into deployment workflows, develop detections, support incident response, and secure remote access for aircraft and field teams.

Build and operate security automation across AWS, applications, company systems, aircraft, and field operations. Responsibilities include secure infrastructure, identity and access controls, application security, secrets management, vulnerability remediation, CI/CD security checks, threat detection, incident response, device security, and secure remote communications. The role partners with engineering and field teams to reduce manual work and protect scientific and operational systems.

Lead product security for residential HVAC controls and connected devices: perform threat modeling, secure design reviews, penetration testing, SAST/DAST/SCA/fuzz testing, manage vendors, lead incident response and Security Champions, and advise on product security requirements and risks.

Designs, deploys, and maintains Bastille WIDS sensor arrays across global data center facilities. Integrates wireless threat telemetry with Genetec Security Center, tunes RF monitoring, performs site surveys, develops coverage plans and technical documentation, establishes alerting workflows, maintains wireless device inventories, and investigates detection failures. Collaborates with network, IT security, SOC, vendors, and infrastructure teams while providing up to 20% international travel and after-hours support.

Founding Security Engineers will build and operate security infrastructure across cloud, network, application, and production environments. Responsibilities may include PKI, IAM, secrets and key management, secure network architecture, API security, monitoring, incident response, penetration testing, audits, and compliance. The roles require end-to-end ownership, close collaboration with engineering teams, and the ability to establish security programs in early-stage crypto, fintech, or infrastructure companies.

Protects on-premises and cloud systems, applications, and data by implementing security controls, conducting security reviews, monitoring threats, administering endpoint and email security tools, managing vulnerabilities, supporting incident response, and maintaining security standards and documentation. The role also promotes security awareness and collaborates with IT teams and leadership to strengthen the organization’s security posture.

Paid 10-week summer internship supporting secure application and systems development, security controls, vulnerability remediation, security automation, and secure software practices. The intern will collaborate with engineering, cybersecurity, and platform teams in Agile environments while developing technical and leadership skills through mentorship and project work.

Maintains corporate information security and cloud system protections by evaluating monitoring outputs, assessing risks and vulnerabilities, implementing access and remediation controls, designing secure configurations, supporting incident response, and coordinating with IT, security, and application teams. The role also advises on risk acceptance, regulatory standards, confidentiality, and secure system design.

Leads the design, development, automation, and support of secure customer identity and access management capabilities. Builds PingOne authentication, authorization, fraud detection, risk, registration, recovery, and MFA journeys; integrates web and mobile applications; develops APIs and reusable components; manages migrations; and improves observability through Splunk and Dynatrace. Partners with engineering, fraud, cyber, architecture, product, and business teams to deliver secure, scalable CIAM solutions and guide technical decisions through production deployment.

Support security engineering for a DoD IL5 SAP S/4HANA environment. Responsibilities include SAP authorization and role management, GRC access controls and SoD enforcement, threat detection and SIEM integration, HANA encryption, ILM and data governance, ABAC, SSO, interface security, and RMF/ATO compliance documentation. The role also implements DISA STIGs, supports audit evidence and ISSM workflows, and requires quarterly travel to Scott Air Force Base.

Lead and scale ACV’s Application Security program across engineering, product, and DevOps. Establish Secure SDLC and shift-left practices; integrate security tools into CI/CD; oversee threat modeling, code reviews, assessments, and penetration testing; develop security policies, training, and automation; remediate vulnerabilities with developers; and support compliance with SOC 2, ISO 27001, and related requirements.

Designs and implements security for embedded consumer electronics products, including ARM TrustZone applets, cryptographic device identity, secure boot, firmware protection, key management, and trust chains. Defines security requirements, performs assessments and testing, supports compliance audits, mitigates vulnerabilities, and advises engineering teams through architecture and code reviews. Collaborates with firmware, DevOps, cloud, manufacturing, and program management teams to strengthen product security and incident response.

Lead product security for embedded transportation and HVAC control platforms. Responsibilities include risk management, threat modeling, security DFMEA, penetration testing, vulnerability management, regulatory type approval, secure OTA updates, cryptographic assurance, privacy compliance, and security-tool oversight. The role guides cross-functional engineering teams, maintains cybersecurity and software-update management evidence, and ensures compliance with automotive and industrial security standards.