Top Security Engineer Jobs

Design, implement, administer, secure, and maintain enterprise Rocky Linux environments. Apply STIGs, configure identity and authentication services, automate deployment and patching, manage vulnerabilities, troubleshoot infrastructure, and support security monitoring. Develop technical documentation, participate in architecture reviews and incident response, collaborate across infrastructure and cybersecurity teams, and mentor junior engineers. The role requires an active TS/SCI clearance and hybrid work in Centreville, Virginia.

Provide systems security engineering and cybersecurity expertise for USAF weapon systems throughout acquisition. Assess cybersecurity posture, vulnerabilities, cyber resiliency, survivability, and mitigation strategies. Support systems engineering technical reviews, acquisition documentation, technical evaluations, and senior-leader briefings. Recommend security designs protecting software, hardware, firmware, weapon systems, and critical networks. Interface with government, engineering, acquisition, and cybersecurity personnel while providing technical guidance to junior staff.

Supports cybersecurity engineering for DoD satellite communications systems. Performs RMF accreditation, STIG implementation, vulnerability and risk assessments, IAVM activities, ACAS scanning, remediation planning, system self-assessments, security documentation, and compliance testing. Advises leadership on security posture and threat mitigation while securing network, system, and application environments.

Develops and implements cybersecurity controls for DoD satellite communications systems. Performs risk and vulnerability assessments, STIG validation, IAVM activities, RMF accreditation support, POA&M documentation, compliance self-assessments, vulnerability remediation, and security change reviews. Analyzes ACAS scans, deploys security tools, briefs technical security posture to leadership, and advises on threat mitigation for strategic and tactical communications systems.

Lead security authorization and assessment activities for government information systems under RMF, ICD, DIA, and DoD requirements. Develop and maintain security documentation, collect and analyze security artifacts, track ATD, IATT, and ATO milestones, manage POA&Ms, support audits and continuous monitoring, evaluate emerging threats, and recommend security improvements. Coordinate with ISSMs, assessors, program managers, system owners, engineers, and leadership while reviewing technical documentation for compliance and accuracy.

Develop advanced threat detection capabilities, custom alert logic, threat-hunting exercises, and real-time incident response processes. The role collaborates with Red and Purple Teams, researches emerging threats, improves security visibility, contributes to security architecture and controls, and supports security assessments. Responsibilities include Kubernetes-focused detection, multiple query and programming languages, endpoint event analysis, incident containment, remediation, and occasional after-hours on-call participation.

Build and operate security infrastructure, including SIEM systems, large-scale data pipelines, searchable data lakes, and security observability capabilities. Integrate infrastructure sources, acquire and process high-volume logs, and support detection, threat hunting, and insider-risk programs. Collaborate with security, data platform, and infrastructure teams to deliver reliable, scalable solutions using Go or Python, Kubernetes, Elasticsearch, and related technologies.

Provides consultative pre-sales cybersecurity engineering for email security solutions. Leads customer discovery, assesses security architectures, designs solution proposals, delivers demonstrations and technical presentations, supports proofs of concept, collaborates with vendors, enables sales teams, and transitions closed opportunities to delivery teams. Focus areas include secure email gateways, phishing and BEC protection, API-based security, DLP, advanced threat protection, and hybrid cloud environments.

Design and implement technical security controls across cloud, application, identity, and PKI environments. Assess architectures, perform threat modeling and risk assessments, produce control narratives/SSPs/POA&Ms, support audits (FedRAMP, SOC 2, ISO 27001), and work hands-on with DevOps, engineering, and operations to remediate, validate, and collect defensible evidence.

Administer, secure, configure, and maintain agency application systems throughout their lifecycle. Support ATO/ATT documentation, continuous monitoring, security impact assessments, vendor risk evaluations, logging compliance, vulnerability remediation, and change management. Develop and integrate ML and AI tools into security systems while supporting ISSOs and maintaining application operations and security procedures.

Designs and implements cloud and infrastructure security architecture, reviews systems for vulnerabilities, and drives security improvements across the development lifecycle. The role builds automated security testing, integrates security controls into CI pipelines, enforces secure Infrastructure as Code practices, promotes DevSecOps, advises engineering teams, and coordinates cloud penetration testing. It requires strong AWS, Kubernetes, Terraform, programming, cloud security, and policy management expertise.

Lead security operations and incident response engineering across hybrid cloud environments. Conduct deep-dive investigations, digital forensics, threat modeling, detection engineering, SIEM tuning, threat intelligence review, and automated remediation. Develop incident response playbooks, maintain investigation documentation, apply MITRE ATT&CK, and support incident command and SOC process optimization.

Operate and manage enterprise cybersecurity solutions, including SIEM, EDR, IPS, WAF, firewalls, and endpoint protection. Monitor threats, analyze logs and network traffic, respond to incidents, conduct vulnerability assessments and security reviews, develop policies and awareness programs, support audits, and manage physical security controls. The role also collaborates with technical teams and external providers while leading security projects and communicating fluently in English and Korean.

Designs and integrates cybersecurity across defense system life cycles, supporting RMF authorization, eMASS packages, ATO activities, vulnerability management, STIG compliance, POA&Ms, continuous monitoring, configuration control, incident response, and program protection. The role develops cybersecurity requirements and acquisition documentation, evaluates system risks, supports cryptography and supply-chain security, maintains ITIPS and FISMA records, and advises program leadership on authorization and remediation decisions in classified environments.

Provides senior technical leadership for secure multi-enclave network and system architectures supporting government customers. Designs and secures SDN-enabled environments, implements segmentation and access controls, performs risk analysis and compliance activities, troubleshoots network security issues, develops security documentation, and supports trusted interconnections across classification boundaries. Requires extensive DoD/IC experience, advanced network security expertise, CCNA certification, CCNP progress, and an active TS/SCI clearance with current polygraph.

Designs and secures complex networking, computing, and enclave environments for mission-critical government cybersecurity infrastructure. Responsibilities include integrating information assurance architectures, assessing vulnerabilities and risks, developing mitigation strategies, defining security requirements, establishing trusted system relationships, and embedding security throughout the engineering lifecycle. The role collaborates with government customers, engineers, and architects and requires an active TS/SCI clearance with polygraph and CISSP certification.

Designs and operates security controls for AWS multi-account environments, including IAM, networking, encryption, secrets, infrastructure-as-code, CI/CD, policy-as-code, vulnerability management, telemetry, and incident response. Partners with engineering, DevOps, architecture, MLOps, IT, GRC, and audit teams to create secure platform patterns, golden paths, guardrails, documentation, and compliance evidence. Mentors engineers and improves cloud security without slowing delivery.

Secure AWS cloud environments and applications by implementing cloud and application security controls, hardening Terraform and CI/CD pipelines, operating security tooling, remediating vulnerabilities, and supporting detection engineering and incident response. The role also automates compliance evidence and control validation for FedRAMP, SOC, HITRUST, and HIPAA requirements while partnering with engineering teams on secure design and remediation.

Provides senior security engineering expertise across architecture, cloud and identity security, vulnerability management, incident response, application security, data protection, monitoring, automation, and governance. Reviews technologies and designs, develops security standards and controls, investigates incidents, prioritizes exposures, oversees managed security providers, supports audits, and assesses emerging technology risks. Collaborates with technical and business stakeholders while mentoring security professionals and communicating complex risks clearly.

Develop and maintain secure software and system environments using Python, Bash, Ansible, RHEL 8, SELinux, IdM/FreeIPA, and PKI. Automate system builds, configure and harden Linux systems, support virtualization and networking, optimize legacy applications, and manage documentation. Interact with customers to prioritize defects and enhancements, and periodically travel onsite for system integration, updates, and deployments. The role requires a Secret clearance and eligibility for TS/SCI.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Designs and maintains secure, scalable Microsoft Fabric data pipelines, Lakehouses, warehouses, and infrastructure. Implements encryption, access controls, governance, compliance, monitoring, CI/CD, infrastructure-as-code, containerization, and automated security testing. Collaborates with security, platform, data science, and engineering teams to improve data reliability and operational excellence. Requires strong SQL, data engineering, Azure, DevOps, and data security experience, along with US citizenship.

Investigate and respond to security alerts, phishing, and escalated incidents across corporate, cloud, and regulated SaaS environments. Build security automation, detection rules, integrations, playbooks, and CI/CD-enabled tooling. Manage incident timelines, root-cause analysis, remediation, identity and access operations, audit evidence, and cloud infrastructure supporting security tools. Participate in on-call rotations, evaluate new security technologies, measure automation impact, and support junior team members.

Provides customer-facing presales cybersecurity expertise by leading discovery, assessing cloud and hybrid security architectures, designing CNAPP-based solutions, delivering demonstrations and technical presentations, supporting proofs of concept, enabling sales teams, collaborating with vendors, and assisting with statements of work and post-sale handoffs.

Leads technical integration of customer payloads and mission requirements onto spacecraft. Owns interface documentation, compliance matrices, verification traceability, risk mitigation, and multidisciplinary coordination. Partners with engineering and mission teams to resolve integration issues, assess spacecraft capabilities, and support verification, environmental testing, launch-site integration, and mission readiness. Occasional travel supports hardware integration, test campaigns, and launch operations.