Top Security Engineer Jobs

Develop scalable, secure backend satellite mission-operations software using Python and AWS. Build APIs, integrate cloud services, troubleshoot issues, optimize performance and costs, and automate processes. Contribute to generative AI integrations, DevSecOps, CI/CD, and software architecture. Collaborate with frontend engineers and product managers in an Agile Scrum environment while maintaining high standards for reliability, quality, and security.

Secures and manages enterprise Microsoft cloud environments across Azure, Office 365, and Microsoft 365. Leads Conditional Access, Defender, Purview, DLP, eDiscovery, vulnerability remediation, penetration testing, and red/blue team activities. Develops KQL queries for Sentinel and Defender detection and investigation. Advises architects, identity teams, incident responders, and cross-functional stakeholders on Zero Trust, compliance, governance, and cloud security controls.

Leads the design and delivery of AI-driven cybersecurity solutions focused on application security, vulnerability management, threat detection, and cyber resilience. Builds secure full-stack applications and cloud-native platforms using AWS and AI/ML, integrates logging and monitoring tools, and embeds security into SDLC and CI/CD pipelines. Provides architecture guidance, technical leadership, mentoring, and delivery oversight for distributed teams while influencing enterprise engineering standards and secure-by-design practices.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Own and improve vulnerability management across applications, dependencies, containers, operating systems, cloud infrastructure, and exposed services. Prioritize and validate vulnerabilities, partner with engineering teams on remediation, automate security workflows, integrate controls into CI/CD, identify systemic vulnerability patterns, conduct application security testing, develop risk metrics, and support incident response. The role also applies AI agents and advanced security models to vulnerability discovery, analysis, prioritization, and remediation.

Lead design, implementation, and operation of enterprise information security tools. Translate requirements into secure solutions, monitor and respond to incidents, evaluate vulnerabilities across applications and infrastructure, develop remediations, mentor junior engineers, and support security program and compliance activities.

Implements and administers application security testing and posture management tools, integrates security testing into CI/CD pipelines, and supports developers in triaging and remediating vulnerabilities. Develops security reports, evaluates exceptions, communicates risks, promotes secure coding practices, and coaches junior engineers. The role also supports tooling consolidation, workflow automation, CSPM integration, DevSecOps pipeline logging, and collaboration with vulnerability and risk management teams.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Secure applications throughout the software development lifecycle by performing SAST, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD security control validation. The role uses Fortify and SonarQube, produces assessment reports, supports secure SDLC process design, and partners with developers, architects, and cybersecurity specialists.

Manage and optimize vendor-provided network and security platforms, including firewalls, VPNs, SD-WAN, and monitoring tools. Administer user access, permissions, MFA, SSO, and identity integrations. Monitor performance, troubleshoot connectivity issues, coordinate vendors, oversee upgrades, maintain compliance documentation, and support incident response and disaster recovery. Provide Tier 2–3 help desk escalation, onboarding and offboarding support, and recommendations for secure, scalable network improvements.

Designs and reviews cloud security architectures across AWS, Azure, GCP, and internet-facing environments. Partners with engineering, identity, network, application, and security teams to implement Zero Trust, IAM, segmentation, perimeter, encryption, monitoring, and other controls. Evaluates risks against security standards and regulatory frameworks, documents findings and exceptions, prioritizes remediation, and promotes secure-by-design practices and consistent cloud governance across multi-cloud deployments.

Build autonomous AI-driven security testing systems and agentic workflows for analyzing mobile, desktop, IoT, and API applications. Develop reusable security automation frameworks, integrate static and dynamic analysis, reverse engineering, network analysis, vulnerability intelligence, and custom tools. Create evaluation systems and human-in-the-loop workflows, research emerging AI and offensive security techniques, and collaborate with security researchers to scale testing. The role requires production-quality coding, security expertise, autonomy, and U.S. citizenship.

Secures applications throughout the software development lifecycle by performing SAST with Fortify, code analysis with SonarQube, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD control validation. The role documents assessment findings, supports secure SDLC process design, and collaborates with developers, architects, and cybersecurity specialists. Requires an active Secret or TS clearance, application security experience, penetration testing knowledge, and CEH certification. Quarterly travel to Scott Air Force Base is required.

Administer cybersecurity platforms, manage ThreatLocker and Microsoft 365 security tools, conduct vulnerability and patch management, respond to incidents, enforce system hardening, and support IT infrastructure. The role also handles identity and access controls, compliance documentation for HIPAA and CAAS, process improvement, vendor collaboration, and on-call technical support.

Embeds application security into the SDLC through DevSecOps processes, security assessments, repository scanning, vulnerability triage, remediation validation, and secure code review. Uses tools such as Burp Suite, CodeQL, SAST, SCA, and secret scanning across applications, APIs, cloud workloads, and infrastructure. Develops security metrics and executive dashboards, coaches development teams, participates in Agile ceremonies, and promotes secure coding and responsible AI-assisted security practices.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

Lead enterprise network security architecture, governance modernization, and cybersecurity strategy across on-premises, hybrid, and multi-cloud environments. Design automated governance capabilities using Policy-as-Code, Process-as-Code, workflow optimization, and AI-assisted security analysis. Establish measurable methods for evaluating controls, policy compliance, risk, and governance maturity while influencing executives, architects, engineers, and business stakeholders. The role is fully onsite Monday through Friday and requires approximately 10% travel.

Lead the architecture, deployment, integration, and lifecycle management of enterprise Genetec Security Center environments across multiple sites. Own platform roadmaps, infrastructure sizing, high availability, performance, upgrades, cybersecurity hardening, disaster recovery, and site migrations. Partner with IT, networking, physical security, vendors, and integrators while mentoring engineers and technicians. The role requires deep Genetec expertise, enterprise infrastructure knowledge, physical security systems experience, and technical leadership.

Designs, implements, and manages enterprise cloud security solutions across AWS, Azure, and Oracle OCI. Leads CSPM, CASB, CNAPP, SSE, DevSecOps, application security testing, identity, network, vulnerability, and monitoring capabilities. Develops security policies, standards, roadmaps, and compliance controls; supports audits, incident response, remediation, vendor evaluations, and maturity assessments. Collaborates with architecture, infrastructure, and cybersecurity teams, communicates recommendations to leadership, and mentors junior staff. Occasional travel supports remote network installations and upgrades.

Maintains system security posture and authorization by managing RMF documentation, ATO packages, NIST 800-53 and FedRAMP control evidence, POA&Ms, continuous monitoring, assessments, audits, security baselines, and risk reporting. Coordinates with ISSMs, security teams, DevSecOps, clients, and stakeholders to remediate findings and maintain federal compliance.

Designs and develops secure cloud-native integration services, APIs, and automation supporting access management, encryption, security platforms, and hybrid cloud environments. Builds containerized applications with Kubernetes, CI/CD, Infrastructure as Code, and DevSecOps practices. Contributes to security architecture, risk assessments, vulnerability response, incident planning, technical escalations, reporting, and merger and acquisition initiatives while serving as a senior information security subject matter expert.

Design, deploy, and maintain SOAR capabilities for security automation, develop workflows, and integrate AI tooling for enhanced security responses.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.

The role involves enhancing application security for Radar, managing security for over 1 billion API calls daily, and collaborating with customers.