Top Security Engineer Jobs

Conduct penetration testing across web, mobile, API, and network environments; simulate threat actors through Red Team campaigns; identify vulnerabilities; and provide remediation guidance. Requires offensive security experience, proficiency with penetration testing tools, Linux, networking, command-line utilities, and programming. Cloud, threat modeling frameworks, offensive security certifications, and Korean-English fluency are preferred.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Own and secure the cloud infrastructure for a multi-tenant SaaS product: design secure cloud architecture, deploy infrastructure security (access, certificates, logging), develop isolation/sandboxing, review IaC changes, audit environments for vulnerabilities, and create secure cloud policies and procedures.

Advances application security within a DevSecOps model by embedding controls into the SDLC, conducting SAST, DAST, SCA, threat modeling, and code reviews, integrating security tools into CI/CD pipelines, and managing vulnerability remediation. The role collaborates with software, cloud, and DevOps teams across AWS and Azure, supports security investigations and compliance initiatives, and enables developers through secure coding guidance and automation.

Provides customer-facing presales cybersecurity expertise, leading technical discovery, assessing cloud and hybrid security architectures, designing CNAPP and enterprise security solutions, delivering demonstrations and presentations, supporting proofs of concept, enabling sales teams, collaborating with vendors, and assisting with statements of work and post-sales handoffs.

Serves as the technical authority for securing mission-critical systems across cloud and on-premises environments. Leads the RMF lifecycle, ATO management, NIST control implementation, vulnerability assessments, POA&M tracking, continuous monitoring, disaster recovery planning, and security-by-design reviews. Collaborates with developers, systems engineers, government stakeholders, SCAs, and DAOs while briefing senior leaders on technical risks. Maintains cybersecurity policies, evaluates system changes, and oversees AWS and Azure security.

Leads enterprise network security architecture across hybrid, multi-cloud, and OT environments. Designs and implements Zero Trust, SASE, ZTNA, segmentation, firewalls, NDR, secure connectivity, encryption, and cloud security controls. Develops automation and policy-as-code, supports incident response, establishes engineering standards and metrics, evaluates emerging technologies, and leads modernization initiatives. Collaborates across Security, Cloud, Infrastructure, Network, and IAM teams while mentoring engineers and influencing enterprise architecture decisions.

Develop and deploy enterprise ServiceNow security solutions across Security Operations and Integrated Risk Management. Configure SIR, Vulnerability Response, Configuration Compliance, and CAM modules; build automated workflows and integrations with security tools such as Splunk, Tenable, and Qualys. Develop JavaScript and GlideScripting logic, implement access controls for sensitive data, support NIST RMF requirements, and validate solutions using the Automated Test Framework. Requires active TS/SCI with Polygraph clearance, Security+ certification, and at least five years of technical experience.

Provides security architecture and advisory guidance for large-scale cloud infrastructure and foundational services. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation throughout the software development lifecycle. Partners with engineering and product teams to implement secure designs, prioritize risk-based initiatives, and improve security roadmaps. Applies expertise in cloud security, identity and access management, network security, secure development practices, and infrastructure protection while influencing stakeholders without direct authority.

Secure cloud infrastructure, Kubernetes, containers, data pipelines, identity systems, secrets, CI/CD workflows, and software supply chains. Implement Terraform guardrails, encryption, network segmentation, IAM controls, observability, threat modeling, incident response, red-team exercises, tabletop drills, penetration testing, and compliance controls for creator and AI training data.

Designs, deploys, maintains, and enhances global physical security systems, including video management, access control, intrusion detection, communications, and security hardware. Coordinates vendors, end users, and technical teams; develops project plans, budgets, procedures, and security standards; manages system releases and validates security controls. The role requires programming proficiency, compliance with security and regulatory standards, leadership reporting, and travel of up to 25%.

Designs, deploys, maintains, and enhances global physical security systems, including video management, access control, intrusion detection, communications, and related hardware. Collaborates with vendors and technical teams, develops project plans and operating procedures, manages system releases, validates security controls, and reports project status and risks to leadership. The role supports security operations centers, offices, and remote sites while ensuring compliance with internal policies, regulatory requirements, and industry standards.

Designs, deploys, maintains, and enhances global physical security systems, including video management, access control, intrusion detection, communications, and related hardware. Leads technical projects from conception through implementation, coordinates vendors and technical teams, develops procedures and project plans, manages system releases, validates security controls, and reports risks and progress to leadership. The role supports security operations centers, offices, and remote sites while ensuring compliance with internal policies and industry standards.

Design, deploy, maintain, and enhance global physical security systems, including video management, access control, intrusion detection, communications, and security hardware. Lead technical projects from planning through deployment, coordinate vendors and technical teams, document procedures, manage budgets and timelines, validate security controls, and report risks to leadership. The role supports security operations centers, offices, and remote sites, requires programming and systems expertise, and includes travel up to 25%.

Leads technical direction for Remitly’s Security & Privacy organization while remaining hands-on in software and security engineering. Designs and ships agentic security platforms, automations, and controls across application, infrastructure, identity, privacy, governance, and risk domains. Advises executives and engineering leaders, advances secure design, balances security with business velocity, and mentors engineers. Requires deep expertise in application security, AI development, cloud security, IAM, cryptography, and production-scale software engineering.

Designs, implements, hardens, and manages secure AWS and Azure cloud environments for a Department of Defense customer. Responsibilities include applying RMF and STIG controls, supporting ATO activities, integrating vulnerability and security tools into CI/CD pipelines, securing Kubernetes, containers, networking, storage, IAM, and infrastructure as code, and maintaining logging, monitoring, observability, and alerting capabilities. The role also supports cloud migration, risk analysis, compliance documentation, and continuous security improvement.

Designs and maintains AWS cloud security controls, architectures, monitoring, threat detection, logging, vulnerability management, and incident response. Automates security and compliance checks with Terraform and CloudFormation, integrates security into CI/CD pipelines, and ensures alignment with CIS, NIST, HIPAA, FedRAMP, and SOC 2 frameworks. Collaborates with engineering teams on secure deployments, troubleshooting, secrets management, handoffs, cutovers, and rollback planning.

Architect and build security foundations for a multi-tenant, Kubernetes-based serverless platform. Responsibilities include implementing Terraform and Helm guardrails, network segmentation, service-mesh policies, secrets and key management, container runtime detections, IAM and workload identity, threat modeling, production issue resolution, post-incident hardening, and compliance evidence automation.

Own Alloy’s AWS cloud security program, partnering with Infrastructure and engineering teams to secure new designs, reduce infrastructure risk, manage CSPM findings, and implement Terraform-based remediations. Build SIEM and CSPM detections, alerts, dashboards, and runbooks; improve AWS permissions and network security; participate in on-call incident response; and drive root-cause remediation and preventative controls.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Provides organization-wide technical leadership for AWS cloud infrastructure and security architecture supporting a connected-home energy platform. Designs scalable infrastructure, infrastructure-as-code standards, security controls, identity and access management, threat modeling, observability, and cost optimization. Partners with SRE and product engineering teams on reliability, secure coding, technical strategy, tooling evaluations, and mentorship. The role requires hands-on expertise in cloud platforms, distributed systems, security engineering, containers, CI/CD, and modern observability.

Lead systems engineering and execution of National Security Space Launch customer programs for New Glenn. Manage resources, schedules, budgets, requirements integration, technical deliverables, customer meetings, site visits, and business development activities. Collaborate across engineering and support organizations to deliver launch system products and services while maintaining customer satisfaction and program goals.

Designs, implements, and evaluates cloud security architectures for mission-critical systems. Responsibilities include securing AWS environments, applying RMF and STIGs, hardening Linux and AMIs, managing IAM and security controls, implementing logging and threat detection, remediating vulnerabilities, maintaining security documentation, and mentoring cloud security professionals.

Designs and maintains secure infrastructure, CI/CD components, and security services for product development. Automates security tooling, vulnerability management, compliance reporting, and developer workflows. Collaborates with engineering and DevSecOps teams to embed secure-by-design practices, supports security monitoring and incident response, and improves security controls. Experience with cloud platforms, infrastructure as code, containerized environments, risk management, and secure software delivery is required; industrial cybersecurity and ISA/IEC 62443 familiarity is valued.

Owns the engineering lifecycle and operations of enterprise authentication and information security platforms. Maintains Java applications, configures MFA and RADIUS integrations, certifies SafeWord releases, validates security patches, develops Bash and SQL automation, troubleshoots production issues, and supports migration from virtual machines to containerized OpenShift platforms. The role also documents operating procedures and collaborates with operations, security, and engineering teams to maintain secure, resilient authentication services.