Top Security Engineer Jobs

The Senior Security Engineer will enhance AI security solutions, evaluate threats, design guardrails, and collaborate with teams to implement security strategies in a cloud environment.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Own end-to-end cybersecurity, insider threat, and external threat incident response for Microsoft Quantum. Lead detection, triage, investigation, containment, recovery, root-cause analysis, executive communications, and remediation. Define the architecture and operating model for an AI-enabled security operations center, establish detection engineering requirements, onboard security data, evaluate solutions, and improve controls, runbooks, and monitoring. Coordinate with engineering, CISO, legal, HR, national security, and trade compliance teams.

Develop and operate security tooling, SIEM detections, dashboards, data integrations, and AI-assisted SOC automation. Investigate and respond to incidents, improve detection quality, troubleshoot network, infrastructure, and physical security issues, and automate operational workflows. Partner with engineering, facilities, networking, and security teams to strengthen resilience and protect sensitive quantum research and intellectual property.

Lead a global security operations team providing 24x7 support for WAF, DDoS, bot mitigation, API and edge security. Oversee incident response, change governance, application onboarding, operational readiness, compliance, and continuous improvement. Partner with engineering, infrastructure, business teams, and vendors to ensure secure deployments, define KPIs and roadmaps, and report risks and incidents to senior leadership.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Secure AWS cloud environments through architecture and network reviews, IAM and policy guardrails, workload protection, monitoring, threat detection, encryption, runtime controls, and secure CI/CD automation. Develop scalable security tooling, including AI-augmented solutions, and establish secure integrations with third-party services. Partner with engineering, product, DevOps, and compliance teams through design reviews, code reviews, documentation, and technical guidance.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

The AppSec Vulnerability Management Engineer will identify vulnerabilities, manage compliance, and collaborate on security practices within development teams. Key tasks include vulnerability scanning, compliance tracking, executive reporting, and incident response support.

The Systems Engineer will identify, evaluate, triage, document, and support remediation of application-security vulnerabilities. Responsibilities include partnering with software-development teams, applying SAST, DAST, dependency and software-supply-chain security practices, integrating automated scanning into CI/CD workflows, and verifying remediation. The role may support GitLab, Artifactory, OpenShift, Kubernetes, containerized applications, and restricted or classified environments.

Develop and evaluate cloud security architectures for Intelligence Community systems. Assess security documentation, compliance, risk thresholds, software assurance, and RMF requirements across on-premises, cloud, and hybrid environments. Support validation, assessment, accreditation, and troubleshooting activities; recommend security tools and capabilities; and collaborate with clients and technical teams in an Agile environment.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Leads cybersecurity engineering, SOC support, vulnerability and risk analysis, security assessments, hands-on testing, and secure Azure solution implementation. Develops SOC procedures, evaluates architectures and security documentation, creates testing methodologies, analyzes alerts, and recommends mitigations. Implements Azure Zero Trust controls, including identity hardening, micro-segmentation, Conditional Access, continuous monitoring, least privilege, governance, secure landing zones, AKS, Azure Policy, and Entra ID. Requires coordination across cybersecurity teams and communication with leadership.

Designs, deploys, and manages enterprise PKI infrastructure and certificate lifecycles. Automates PKI processes, integrates solutions with Active Directory, identity, PAM, infrastructure, and DevOps platforms, and enforces certificate security policies. Monitors compliance and infrastructure health, troubleshoots certificate and encryption issues, and provides documentation, guidance, and training. The role supports secure classified networks for U.S. Government operations and requires on-site work in Phoenix with business travel as needed.

The Senior Cloud Security Engineer protects NYC agency systems by assessing cloud and on-premises security, identity and access management, network defenses, email filtering, and endpoint protection. The role ensures compliance with cybersecurity policies, guides security architecture and remediation, operates defensive technologies, coordinates technical projects, communicates with stakeholders, and documents deployment plans. Work occurs within a 24/7 operation and may require nights, evenings, or weekends.

Lead application security assessments across New York City agencies by operating SAST, DAST, and SCA platforms, validating vulnerabilities through manual testing and exploit reproduction, providing remediation and secure coding guidance, identifying systemic weaknesses, mentoring assessment staff, and producing technical and executive security reports.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Lead penetration testing and vulnerability remediation for web, mobile, and medical device applications, ensuring compliance with healthcare regulations.

Designs and develops advanced anti-cheat and game security systems for Call of Duty. Responsibilities include strengthening protection frameworks, creating cheat detection mechanisms, optimizing and debugging complex C++ systems, analyzing compiled code, and collaborating across studios. The role requires expertise in large-scale software development, algorithms, data structures, CI/CD, automation, performance tuning, and low-level systems, with preferred experience in game engines, reverse engineering, DevOps, cryptography, and anti-cheat technology.

Own and improve the security posture of Robinhood’s AWS cloud infrastructure. Build and operate foundational security controls, automation, safe defaults, and developer-friendly security capabilities. Secure enterprise applications using AWS services, Terraform, and Golang or Python while applying least-privilege principles, AWS Well-Architected practices, and CIS Benchmarks.

Build and maintain data workflows, analytics infrastructure, pipelines, and orchestration systems. Manage and modernize recurring cost models, develop AI agents and automated workflows, and mentor business operations staff in Databricks and AI tools. Partner with stakeholders to improve processes, reduce manual work, enable self-service analytics, and promote cloud-native data practices. The role requires onsite work in Kent, Washington, or Denver, Colorado, and supports Blue Origin’s national security business operations.

Build, maintain, and modernize multi-site Microsoft infrastructure across servers, cloud, identity, networks, virtualization, storage, and endpoints. Operate security controls, remediate vulnerabilities, support incident response, improve Microsoft 365 security baselines, and contribute to NIST-aligned risk reduction. Maintain documentation, coordinate vendors, support backup and disaster recovery, and serve as a Tier 3 escalation resource for complex infrastructure and security issues.

Develop low-level firmware for secure enclaves in custom ASICs supporting secure boot, attestation, root of trust, provisioning, secure updates, recovery, telemetry, tamper monitoring, and debugging. Collaborate with ASIC, hardware, security, software, and systems teams on interfaces and requirements. Support pre-silicon validation, FPGA and simulation development, silicon bring-up, production deployment, testing, code reviews, and documentation.

Develop ROM code, bootloaders, and runtime firmware for secure enclaves in custom ASICs supporting secure boot, attestation, OTA updates, provisioning, telemetry, recovery, and tamper monitoring. Collaborate with hardware and communications engineers on interfaces, pre-silicon development, integration, and validation. Support post-silicon ASIC bring-up, debugging, and embedded firmware validation.