Top Security Engineer Jobs

Designs, deploys, and integrates secure Google Cloud Platform and Microsoft Azure environments with existing infrastructure. Implements cloud-native security controls, monitors compliance, investigates and remediates complex security incidents, automates controls through CI/CD pipelines, and enforces regulatory requirements. The role also evaluates cloud security tools, documents best practices, collaborates with technical teams, and mentors junior security staff.

Deploys and manages cloud, virtualized, physical network, and cybersecurity infrastructure, including IDS/IPS, firewalls, SIEM, SOAR, and EDR. Automates provisioning, patching, and reporting with PowerShell, Ansible, Terraform, and REST APIs. Monitors and tunes HCI clusters, conducts disaster-recovery drills, applies STIGs, investigates incidents, maintains runbooks, and mentors junior staff. Requires Windows and Linux administration, networking, infrastructure-as-code, backup and recovery, capacity planning, and troubleshooting expertise in a cleared DoD environment.

Lead integration of security across the SDLC: implement and assess Secure SDLC and app/product security programs, perform architecture reviews, threat modeling, and security assessments, advise on software supply chain and tooling (SAST/DAST/SCA/IaC), mentor team members, and translate technical risks into executive briefings and actionable roadmaps.

Designs, engineers, and operates network security solutions including Palo Alto, Cisco FTD, Fortinet, Radware, Cisco ISE, firewalls, DDoS appliances, VPN, NAC, and cloud-native AWS firewalls. Develops automation using Python or Perl and APIs, troubleshoots complex security issues, hardens platforms, manages firewall requests and logging, and maintains security standards and documentation. The role requires collaboration, technical communication, and up to 10% travel.

Lead open-source license compliance and security for embedded platforms, drive vulnerability management and scanner triage, automate DevSecOps pipelines and CI/CD security gates, produce SBOMs, standardize reproducible builds and artifact governance, perform risk assessments, and provide developer training and guidance on secure implementation.

Design, implement, and maintain secure Azure Government cloud architectures; enforce zero-trust and RBAC; configure Azure security controls; automate compliance with IaC and scripting; integrate SIEM/SOAR for monitoring and incident response; conduct vulnerability assessments and manage POA&Ms; support ATO/RMF processes and produce security documentation and SSPs; liaise with mission owners, assessors, and compliance teams to maintain ongoing federal compliance.

Provides technical pre-sales support for video security and access control solutions. Designs and quotes integrated systems, supports RFP responses, delivers product demonstrations and training, leads architecture discussions, evaluates technical risks, and collaborates with sales teams, partners, and customers. The role also supports post-sales transitions, complex troubleshooting, technical integration, customer enablement, and demo equipment management. Travel exceeds 50% across the assigned territory.

Conducts technical security assessments and RMF activities for complex information systems. Develops security assessment plans, authorization packages, system security plans, contingency plans, POA&M reports, and mitigation recommendations. Collaborates with system owners, security officers, developers, and IT operations to categorize systems, assess controls, document risks, and support continuous monitoring. The role requires independent coordination with stakeholders, strong NIST RMF knowledge, and eligibility to obtain and maintain a customer clearance.

Conduct technical security assessments and risk assessments for complex information systems under NIST RMF guidelines. Develop security assessment plans, Security Assessment Reports, POA&M reports, authorization packages, system security plans, and contingency plans. Coordinate assessments with system owners, security officers, developers, and IT operations personnel. Support IA RMF and continuous monitoring programs, provide remediation recommendations, and independently manage assessment activities.

Develops and maintains defensive cyber countermeasures across enterprise networks. Analyzes security data, trends, incidents, and intelligence to identify threats, tune SIEM rules and signatures, investigate potential compromises, and support incident response. Collaborates with defensive operations, cyber analytics, and incident response teams; validates countermeasures through Purple Team exercises; documents analysis and presents findings in briefings.

Leads application and data security engineering across cloud, on-premises, and colocation environments. Develops security policies, standards, testing, vulnerability analysis, WAF and Layer 7 protections, and secure software development practices. Supports incident response and on-call operations, researches emerging threats, mentors engineers, and contributes to security strategy, risk assessments, compliance, and roadmap planning.

Provide SIEM, SOAR, and security platform engineering support; develop detection content, dashboards, and automations; lead Tier 3 incident investigations and response; create configuration standards and documentation; provision cloud resources with infrastructure-as-code; maintain CI/CD, secrets, and EDR systems; ensure asset hardening and observability across the estate.

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Build and operate reliable, scalable, secure infrastructure for SaaS security and Snowflake data systems. Automate infrastructure provisioning, deployments, and incident response using Terraform, Spinnaker, Kubernetes, and related tools. Ensure security and compliance, participate in on-call rotations, lead incident response and root-cause analysis, and collaborate with development, data science, and security teams on architectural decisions and service implementation.

Secures and hardens application, cloud, infrastructure, operating systems, containers, CI/CD pipelines, and networks across multi-cloud and on-premises environments. Improves patching and golden-image processes, scales AI-assisted SAST and SCA tooling, prioritizes vulnerabilities, validates fixes, tracks remediation metrics, creates reusable tooling and runbooks, mentors junior engineers, and partners with application and platform teams to deliver security improvements.

Own and direct cybersecurity design for multiple medical devices. Develop security architectures, requirements, threat models, risk analyses, and system specifications for embedded and hosted systems. Perform vulnerability scanning, secure code analysis, penetration testing, fuzz testing, and CWE/CVE analysis. Lead cross-functional cybersecurity improvements, resolve technical constraints, support regulatory interactions, and ensure compliance with quality systems and design controls.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Designs and operates SAP security and GRC frameworks across S/4HANA, ECC, Fiori, BTP, and SuccessFactors landscapes. Responsibilities include SAP role and authorization design, user provisioning, segregation-of-duties analysis, GRC Access Control and Process Control operations, audit support, cloud security, logging, security-note remediation, documentation, and mentoring. Partners with audit, compliance, business, Basis, and DBA teams to maintain secure and auditable SAP environments.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

As a PSIRT Engineer, you'll manage vulnerability response programs, overseeing the lifecycle of security vulnerabilities from intake to public disclosure, while coordinating with engineering and security teams for remediation.

Secure and scale cloud infrastructure by implementing CI/CD, hardening DigitalOcean and other cloud environments, managing certificates and DNS, integrating IAM/SSO and KYC providers, applying DevSecOps practices, automating infrastructure as code, participating in incident response, and collaborating with engineering teams to optimize deployments and reduce downtime.

Support and mature the cybersecurity Site Reliability Engineering capability for critical security platforms. Operate SIEM, XDR, CyberArk, SOAR, NDR, IPS, and related systems; perform monitoring, incident response, problem management, and root cause analysis. Build automation with Python, Ansible, APIs, and infrastructure-as-code. Maintain observability dashboards, define SLIs and SLOs, document runbooks, support production handovers, participate in on-call duties, and conduct disaster recovery and resilience testing.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Operate and improve vulnerability and compliance scanning across web applications, infrastructure, networks, containers, and runtime environments. Support FedRAMP continuous monitoring, NIST 800-53 evidence collection, compliance tracking, audit reporting, and remediation workflows. Triage findings, filter false positives, prioritize risk, track Jira tickets, partner with engineering on SLAs, and automate scanning processes. The role is fully onsite in Coppell, Texas.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.