Top Security Engineer Jobs

Supports and sustains mission-critical private cloud and virtualized infrastructure for government systems. Responsibilities include production troubleshooting, monitoring, upgrades, patching, lifecycle management, ITIL incident and change processes, automation scripting, technical documentation, cross-functional collaboration, and 24x7 on-call support. The role requires Linux, VMware, enterprise storage, backup, cloud infrastructure, and automation experience, along with an active Secret clearance and U.S. citizenship.

Provides end-to-end cloud services engineering and customer support across hybrid cloud infrastructure. Responsibilities include incident and problem resolution, troubleshooting, capacity and performance management, cloud administration, virtualization, containers, automation, networking, ITSM, security compliance, and solution optimization. The role requires customer communication, collaboration with engineering teams, documentation, mentoring, on-call flexibility, and onsite work at least 25% of the time.

Build and mature the organization’s application security program across cloud, enterprise, research, and clinical applications. Conduct secure code reviews, vulnerability assessments, penetration testing, threat modeling, and security architecture reviews. Integrate SAST, DAST, and SCA into CI/CD pipelines, assess Azure and API security, guide developers on remediation, and establish SSDLC standards. Support security assessments involving AI/ML, biomedical systems, connected medical technologies, and regulated healthcare environments while communicating technical and business risks.

Designs and operates cloud security guardrails across AWS, GCP, and Azure. Responsibilities include secure architecture, IAM, network segmentation, encryption, secrets management, IaC and CI/CD security, automation, CSPM, logging, detection, incident response, and compliance evidence. The role requires hands-on DevOps or platform experience, production security across multiple cloud providers, coding and scripting, Terraform or OpenTofu, and strong collaboration with engineering teams.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Serve as a customer-facing data security expert supporting presales engagements, consulting with executive and technical stakeholders, educating sales teams, developing security offerings and collateral, creating lab use cases, and assisting with professional services statements of work. The role requires expertise in cybersecurity frameworks, data security technologies, solution selling, and major security platforms. It is remote within the TOLA region and involves up to 20% travel.

Provides customer-facing presales cybersecurity expertise, including cloud security architecture assessments, solution design, technical presentations, demonstrations, proof-of-concept support, and proposal development. The role supports sales teams, collaborates with technology partners, delivers internal security training, creates technical documentation and statements of work, and transitions closed opportunities to delivery teams. Focus areas include CNAPP, identity governance, hybrid cloud security, endpoint protection, data protection, and security operations.

Provides customer-facing presales engineering for cybersecurity solutions, specializing in email security. Leads discovery, assesses architectures, designs solutions, delivers demonstrations and presentations, supports proofs of concept, collaborates with vendors, trains sales teams, and ensures post-sale handoffs. The role requires knowledge of email security, broader cybersecurity domains, security frameworks, cloud and hybrid environments, technical documentation, and strong communication skills.

Provides customer-facing presales cybersecurity expertise focused on email security. Leads discovery sessions, assesses security architectures, designs solution proposals, delivers demonstrations and technical presentations, supports proofs of concept, enables sales teams, collaborates with vendors, and ensures successful handoff to delivery teams.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.

Designs and develops advanced anti-cheat and game security systems for Call of Duty. Responsibilities include strengthening protection frameworks, creating cheat detection mechanisms, optimizing and debugging complex C++ systems, analyzing compiled code, and collaborating across studios. The role requires expertise in large-scale software development, algorithms, data structures, CI/CD, automation, performance tuning, and low-level systems, with preferred experience in game engines, reverse engineering, DevOps, cryptography, and anti-cheat technology.

Designs and executes security validation for Clover Device OS and point-of-sale hardware. Responsibilities include PKI and HSM management, secure provisioning, vulnerability management, PCI compliance testing, CI/CD supply-chain security, secure bootloader troubleshooting, and cryptographic validation. The role requires scripting, security scanning, risk assessment, embedded or cloud infrastructure experience, and collaboration with engineering, product, and governance teams.

Design, implement, and administer F5 BIG-IP and inline break-and-inspect proxy solutions supporting DoD enterprise architectures. Configure and troubleshoot TLS and mutual TLS, proxies, cryptographic protocols, PKI, and enterprise architecture issues for DoD clients. The role supports cloud and on-premises modernization, requires a Secret clearance, and involves travel to CONUS and OCONUS locations up to 25% of the time.

Lead a global security operations team providing 24x7 support for WAF, DDoS, bot mitigation, API and edge security. Oversee incident response, change governance, application onboarding, operational readiness, compliance, and continuous improvement. Partner with engineering, infrastructure, business teams, and vendors to ensure secure deployments, define KPIs and roadmaps, and report risks and incidents to senior leadership.

Designs, implements, and maintains security architecture and controls for cloud-based federal systems. Engineers SIEM, vulnerability management, STIG compliance, and security automation tooling; develops incident detections and tunes alerts; supports RMF authorization documentation and technical compliance reviews. The role requires experience with NIST 800-53, RMF, cloud environments, security tools, automation technologies, and active TS clearance, with SCI preferred.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Under supervision, evaluate and test security of embedded, cloud, web, and mobile applications by performing sophisticated attacks, vulnerability analysis, and product-level assessments. Collaborate with customers to deliver technical reports with findings and remediation recommendations, contribute to internal R&D on attack techniques, and maintain technical knowledge through training and professional activities.

Performs daily cybersecurity operations, including alert monitoring, incident investigation and response, security ticket management, risk assessments, vulnerability analysis, and remediation tracking. The role develops security procedures and playbooks, researches emerging threats, improves controls and workflows, and supports secure technology adoption. Requires collaboration with technical and business stakeholders, strong documentation and communication skills, and hybrid onsite work at least three days per week.

Administers, monitors, maintains, tests, and improves information security systems and infrastructure. Handles escalated security issues, reviews threats and audit findings, recommends remediation, enforces security best practices, and collaborates with users, vendors, and partners to resolve incidents and support policy compliance.

Provides cybersecurity engineering support for DoD software applications by defining security requirements, integrating security practices into the software development lifecycle, conducting vulnerability and adversarial assessments, recommending mitigations, and validating compliance with security controls. The role works directly with software development teams and requires Linux administration, system hardening, offensive security, vulnerability reporting, and risk management expertise.

This internship involves owning impactful information security projects, collaborating with internal teams and customers, independently solving ambiguous security problems, and delivering improvements that protect Palantir and its customers. Candidates will apply engineering and programming skills while developing practical security expertise and may need to obtain a US security clearance.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Perform penetration testing, threat modeling, security design reviews, and vulnerability validation across applications, APIs, infrastructure, cloud-native systems, and AI agents. Build AI-powered security automation, identify complex attack paths, and partner with engineering teams to improve security controls and eliminate vulnerability classes. Translate technical findings into actionable guidance and lead complex assessments across organizational boundaries.

Designs, develops, and integrates workforce identity and access management solutions, including RBAC, PBAC, PAM, risk-based access, automated provisioning, and policy-based authorization. Performs software development, testing, IAM product integration, and Level 3 troubleshooting. The role also enhances birthright roles, supports access recertification and lifecycle workflows, ensures security and governance compliance, and mentors junior team members.

Provides onsite systems engineering and offensive security support for satellite, communications, network, and cryptographic acquisition programs. Builds and automates security testing frameworks, conducts assessments, resolves red/blue team findings, supports RMF activities, reviews contract deliverables, coordinates acquisition stakeholders, and briefs government and industry personnel. Requires active Top Secret/SCI clearance with polygraph and travel up to 25% domestically.