Top Security Engineer Jobs

Develop and execute verification plans and testbenches (UVM/SystemVerilog/C) for Security IP and embedded processor subsystems. Verify cryptography, secure boot, key management, and multi-clock/multi-power domain IP; debug failures, improve verification methodology, and mentor teammates toward product sign-off.

Build secure, scalable software products and infrastructure with an emphasis on application security, access control, threat modeling, audits, monitoring, CI/CD security, cloud infrastructure, and secure development processes. Develop Python web services, APIs, dashboards, distributed ML systems, and infrastructure using Kubernetes, Helm, and Terraform. Collaborate autonomously across the business, drive complex projects end to end, and establish security-by-default engineering practices.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Build a Physical AI security platform covering threat modeling, cyber risk analysis, intrusion detection, security testing, investigations, and agentic workflows. Develop full-stack features with TypeScript, React, and a typed backend language; integrate web applications, AI agents, and autonomous devices; deploy LLM-powered capabilities; and model relational domains with traceability and durable asynchronous workflows.

Lead development and architectural evolution of an AI-powered code security scanning platform. Build React interfaces, Python orchestration services, Azure AI and cloud integrations, CI/CD automation, vulnerability analysis workflows, and secure authentication systems. Improve scalability, reliability, observability, reporting, and AI-powered detection capabilities while supporting enterprise applications in regulated environments. The role combines full-stack engineering, DevOps, cloud architecture, AI/LLM integration, and application security ownership.

Continuously identify exposed digital assets, shadow IT, vulnerabilities, and attack paths across cloud, on-premises, IoT, and endpoint environments. Implement and operate attack surface management solutions, develop scanners and detection scripts, prioritize remediation, collaborate with infrastructure and development teams, and automate integrations using AWS and Python. Support proactive defense across large-scale global infrastructure.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Designs, develops, and supports secure AI-powered applications, agents, APIs, integrations, and workflow automations. Builds Generative AI solutions using LLMs, prompt engineering, retrieval patterns, and enterprise data. Responsibilities include full software delivery lifecycle participation, AI output evaluation, stakeholder collaboration, secure engineering, governance, monitoring, risk controls, and operational readiness.

Own account-level security strategies for defense, aerospace, intelligence, and critical infrastructure customers. Lead security architecture, solution design, demonstrations, workshops, pilots, technical validations, and customer decision processes. Guide secure AI adoption and deployment of Microsoft security solutions, including Sentinel, Defender, Entra, Purview, Security Copilot, Microsoft 365, and Azure security services. Coordinate Microsoft and customer stakeholders, drive adoption, reduce risk, and deliver measurable security outcomes.

Hands-on Security Operations Engineer responsible for threat detection, incident response, security automation, endpoint and identity management, cloud infrastructure security, and SOC 2/HIPAA compliance. The role administers tools such as Sumo Logic, Jamf, Intune, Slack Enterprise, CrowdStrike, and Torq; investigates incidents; performs root-cause analysis; hardens systems; and partners with IT and engineering teams to enforce zero-trust controls and protect patient and organizational data.

Designs and evolves enterprise information security architecture, standards, and roadmaps while engineering and operating security platforms such as SIEM, SOAR, EDR, vulnerability management, Entra ID, and DLP. Advises enterprise and solution architects on secure cloud, application, data, and infrastructure designs; integrates security tools; supports automation, detection, incident response, governance, audits, and continuous improvement.

Designs, assesses, implements, and supports secure cloud architectures for VA enterprise systems. Translates Federal, VA, and business requirements into security controls and engineering solutions; supports FedRAMP, RMF, A&A, and ATO activities; performs threat modeling, risk and gap analyses, architecture reviews, configuration-baseline assessments, and cloud security posture reviews. Develops security reference architectures and patterns, supports identity, networking, data protection, and application security, and advises technical and executive stakeholders on compliance, risks, and remediation.

Designs and operates secure-by-default controls for Oracle Cloud Infrastructure and broader hybrid cloud environments. Responsibilities include implementing policy-as-code guardrails, IAM and least-privilege controls, detection and response integrations, vulnerability and misconfiguration management, incident response, remediation tracking, and security KPI reporting. The engineer partners with platform, product, infrastructure, and security teams to advance cloud security strategy and automation.

Designs, implements, administers, and troubleshoots F5 BIG-IP and inline break-and-inspect proxy solutions within DoD enterprise and cloud architectures. Configures TLS and mutual TLS, applies cryptographic and PKI standards, resolves issues with DoD stakeholders, and supports secure modernization of legacy and new applications. The role requires a Secret clearance and familiarity with federal compliance standards, Linux or UNIX, networking, and cloud environments.

Designs, implements, and administers F5 BIG-IP and proxy-based security solutions within DoD enterprise and cloud architectures. Troubleshoots TLS and mutual TLS, supports AWS cloud environments, and works with DoD clients and stakeholders on enterprise architecture issues. Applies knowledge of cryptography, PKI, hashing, networking, federal compliance standards, and Linux or UNIX systems. Requires Secret clearance and at least a high school diploma or GED.

Designs, implements, and administers F5 BIG-IP and proxy-based break-and-inspect solutions within DoD enterprise and cloud architectures. Troubleshoots TLS and mutual TLS configurations, supports AWS and hybrid cloud environments, and resolves architecture issues with DoD clients and stakeholders. Applies knowledge of cryptography, PKI, federal compliance standards, Linux or UNIX systems, and networking protocols while supporting national security missions.

Lead application security and DevSecOps initiatives by managing the security backlog, mentoring engineers, testing web and AI applications, and integrating security into CI/CD pipelines. Architect secure build processes, software supply chain controls, SBOM workflows, artifact signing, dependency management, threat modeling, secrets management, and container hardening. Collaborate with development teams to support secure, compliant software delivery in federal environments.

Designs, implements, and maintains security controls across Azure, GCP, and AWS environments. Manages cloud IAM, security posture, vulnerability remediation, policies, guardrails, and infrastructure security. Partners with engineering and DevOps teams on CI/CD and infrastructure-as-code security, conducts assessments, supports cloud incident response, develops SOC detection content, and documents security architectures. Requires three or more years of cloud security experience across at least two major cloud platforms.

Lead design and implementation of deploy-time policy-as-code controls across AWS, Azure, and GCP using OPA/Rego and Regula; translate baselines into enforceable Terraform-integrated policies; build reusable libraries, testing strategies, and CI/CD enforcement; lead and mentor a team delivering secure IaC and pipeline controls at enterprise scale.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Lead system security engineering and program protection activities across acquisition lifecycle. Perform supply chain risk and counterfeit parts assessments, develop Program Protection/SCRM/Counterfeit Prevention plans, conduct criticality analysis and attack-path modeling, support RMF authorization efforts, mentor engineers, interface with stakeholders, and provide technical leadership for cybersecurity implementations.

Design and productize Hardware Security IP and subsystems for SoCs. Develop architectures, RTL, constraints; drive verification, debug, optimization, and sign-off. Mentor teammates and contribute to roadmaps, processes, and cross-team collaboration.

Build and maintain an AI-native application security program for autonomous trucking software and infrastructure. Partner with engineering teams on secure design and remediation, investigate vulnerabilities, threat model systems, contribute production code, develop security automation and developer tooling, and integrate preventative controls into the software development lifecycle. Use AI to scale investigations while validating results and explaining technical reasoning.

Provides hands-on technical leadership for enterprise AI security and supporting infrastructure. Responsibilities include designing AI security frameworks, reference architectures, threat models, privacy controls, secure pipelines, and proof-of-concept implementations. The role applies MITRE ATLAS, NIST, and emerging AI standards; secures hybrid and cloud environments using Zero Trust; conducts assessments; supports governance, compliance, audits, and risk management; and advises cross-functional engineering, legal, privacy, architecture, and business teams.

Partner with engineers on secure SDLC activities, including secure code reviews, threat modeling, vulnerability remediation, security testing, and risk assessment. Drive SAST, DAST, SCA, AI-assisted security testing, and external penetration testing. Translate security and privacy requirements into technical requirements, train teams on secure coding, and address modern AI security threats in a regulated healthcare environment.