Top Security Engineer Jobs

Design, develop, test, deploy, and troubleshoot security engineering solutions and scalable cloud applications. Write production code, maintain software, resolve high-impact incidents, identify architectural and data-quality improvements, and implement secure, cost-effective practices. Collaborate across technical and business functions while applying SDLC, CI/CD, Agile, testing, database, and cloud engineering principles.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Design, develop, test, and maintain out-of-the-box data connectors and parsers to ingest security logs into CrowdStrike Next‑Gen SIEM. Build lab environments, troubleshoot ingestion issues, collaborate on logging and normalization best practices, produce technical documentation, provide on‑call support, and work with customers and internal teams to resolve data ingestion incidents.

Lead architecture and implementation of internal AI security across agentic tools, LLMs, and RAG pipelines. Threat model AI surfaces, define governance and enforceable controls, partner on AI threat research, modernize cyber defense with AI, and mentor engineers to deliver production-grade security solutions.

Design, implement, and scale security controls across infrastructure, applications, identity, and cloud. Perform security assessments, threat modeling, code reviews, incident response, and root cause analysis. Build automation and tooling for compliance, observability, and governance. Partner with product and engineering teams and help define security standards and documentation.

The Senior Staff Security Engineer will lead edge and network security strategies, overseeing design, operation, and incident response for Gusto's security posture, requiring substantial expertise in Cloudflare and AWS.

Build and maintain corporate security controls across identity, endpoints, and SaaS. Harden IAM (Okta, Google Workspace), run endpoint security for a macOS-first fleet, secure AI tool usage, reduce SaaS risk with SSPM and automation, and write Python/Terraform to automate access reviews, onboarding/offboarding, and audit evidence. Partner with Detection & Response and support SOC 2/ISO 27001 compliance and corporate incident response.

The Senior Identity Security Engineer manages identity security for Palantir's infrastructure, designing systems, threat modeling, and ensuring security in diverse environments.

The Information Security Engineer will secure Palantir's Windows and Active Directory environment, focusing on attack surface reduction, tooling deployment, automation for security operations, and incident response.

The Forward Deployed Security Engineer manages government cybersecurity projects, achieving ATOs, translating regulations into technical requirements, and providing expertise during audits. Role involves collaboration with stakeholders and policy interpretation.

As a Senior Identity Security Engineer, you'll oversee identity security infrastructure, architect authentication systems, and lead identity threat modeling, while collaborating with engineering teams on governance and policy enforcement.

The Insider Threat Detection Engineer will enhance security by automating detection workflows, investigating security events, and developing alerting strategies to identify insider risks and threats.

As an Information Security Engineer, you'll enhance the security of Windows and Active Directory, reducing attack surfaces and developing detection tools for advanced threats.

As an Information Security Engineer, you'll protect Palantir's infrastructure by detecting and combating security threats, developing defensive strategies, and investigating security events.

As an Insider Threat Detection Engineer, you will protect data and assets, develop detection strategies, investigate security events, and enhance network defenses in a critical team role.

The Information Security Engineer protects Palantir's infrastructure by detecting, containing, and eradicating security threats through incident response and defensive strategies, collaborating with the security team, and utilizing their expertise in various platforms.

As a Senior Identity Security Engineer, you'll oversee the identity security infrastructure, architecting authentication systems, threat modeling, and enhancing identity security outcomes.

The Information Security Engineer will safeguard Palantir's infrastructure, focusing on threat detection, incident response, and collaboration within the security team to protect global operations.

The Insider Threat Detection Engineer protects data and assets by detecting and investigating insider threats, automating workflows, and developing security strategies.

The Mission Security Engineer secures national security space systems, implementing cybersecurity measures and compliance controls for various platforms and infrastructures.

Lead design and implementation of secure global network infrastructure. Architect security standards, conduct threat modeling and network assessments, build security automation and tooling, integrate controls with SDN/BGP/MPLS platforms, support incident response, and mentor engineering teams to maintain resilient, observable network security posture.

Lead design and implement confidential computing and enterprise security solutions across cloud platforms. Develop and review secure production code, perform threat modeling, vulnerability and penetration testing, and advise stakeholders on security controls and mitigation.

Design, develop, and troubleshoot security solutions and production code (Java/Golang); optimize performance and resiliency; integrate and validate enterprise AI/LLM-assisted security workflows; improve CI/CD pipelines, refactor tech debt, and lead continuity training and exercises.

Lead development and maintenance of a multi-runtime TLS abstraction layer across Java, Python, and Node.js. Design APIs, ensure TLS 1.2/1.3 conformance, build comprehensive tests, maintain CI/CD pipelines, triage complex TLS issues, monitor standards and crypto libraries, and produce integration and migration documentation for enterprise adoption.

Operate and advance the firm's global vulnerability scanning program: manage scanner fleet, build automation for provisioning and agent packaging, assess scan coverage, analyze detection trends, collaborate with infra and cloud teams for reachability, support compliance and audit requirements, maintain runbooks and IaC practices, and validate AI-assisted security outputs.