Top Security Engineer Jobs

Designs and hardens on-device security for Specs, including access control, secure IPC, sandboxing, trusted execution, cryptography, and platform protection. Develops privacy and security controls for on-device AI, protects sensitive data and model integrity, and secures OS, firmware, applications, services, sensors, and cloud-connected surfaces. Improves fuzzing infrastructure, automated security testing, threat modeling, vulnerability assessment, code review, and continuous validation across embedded and AI/ML system boundaries.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Own infrastructure security foundations, improve cloud security across IAM, networking, and systems, and strengthen authentication, authorization, identities, and secrets management. Build production security tooling and automation to prevent vulnerabilities, detect configuration drift, and reduce manual work. Partner with infrastructure and product engineers on secure design reviews, vulnerability remediation, centralized logging, and detection and response capabilities.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Maintain and secure cloud infrastructure through systems administration, patching, hardening, vulnerability management, and security automation. Develop security tooling, integrate security into CI/CD pipelines, conduct log analysis, threat hunting, and forensic investigations, and support compliance with NIST, ISO 27001, FedRAMP, and SOC 2. Build and deploy operational system images while evaluating emerging threats and improving monitoring and protections.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Monitors and investigates security alerts across SIEM, endpoint, identity, cloud, email, and network environments. Conducts threat hunting, incident response, containment, remediation, vulnerability management, and post-incident reviews. Develops playbooks, automation, integrations, detections, and infrastructure-as-code deployments. Uses and tunes agentic SOC tooling while maintaining human oversight. Coordinates with technical and business teams, participates in a 24/7 on-call rotation, mentors junior engineers, and improves security operations through metrics and continuous improvement.

Leads the architecture and implementation of Uber’s cyber defense platform across multi-cloud and hybrid environments. Defines security strategy, builds scalable CSPM, vulnerability management, threat detection, and incident response capabilities, and applies AI/ML automation. Provides incident leadership, establishes security standards, mentors engineers, drives technical direction, and collaborates with executive and cross-functional teams on security, privacy, compliance, and engineering initiatives.

Designs, implements, and maintains enterprise security solutions across endpoint, cloud, email, network, and identity domains. Monitors threats, supports incident response, performs remediation and root cause analysis, maintains security configurations and standards, assists with audits and compliance, researches emerging threats, and leads security projects while advising technical and business stakeholders.

Design and build Python-based static, binary, and mobile application analysis capabilities for an AI-driven penetration testing platform. Develop instrumentation and testing infrastructure for real devices, automate reverse engineering techniques, evaluate analysis quality, and collaborate with security researchers. The role requires expertise in reverse engineering, mobile internals, program analysis, and production software engineering, with remote work based in the Washington, DC metro area and periodic client-site work.

Leads Authority to Operate activities and maintains information system security posture under RMF and ICD 503. Performs continuous monitoring, vulnerability and compliance auditing, security control validation, POA&M management, and security documentation. Coordinates remediation with technical teams, supports accreditation packages, analyzes logs and scan results, and provides security design guidance. The role also manages privileged-user nominations and serves as the primary contact for accreditation and continuous monitoring activities.

Designs, implements, and maintains secure enterprise network infrastructure across Zero Trust, SD-WAN, cloud networking, wireless, VPN, and remote access environments. Performs security assessments, vulnerability scanning, penetration testing, troubleshooting, monitoring, and network architecture documentation. Supports Azure and AWS security configurations, evaluates security technologies, responds to outages, assists project teams, and helps enforce security policies and procedures.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Owns the engineering and continuous improvement of enterprise security operations, including SIEM, SOAR, EDR/XDR, detection content, telemetry, automation, threat hunting, vulnerability operations, and incident response. Serves as the MSSP’s technical counterpart and Tier 3 escalation point for complex incidents. Leads purple-team exercises, detection validation, playbook development, metrics reporting, audit evidence, and integration across IT, cloud, identity, network, and manufacturing OT environments.

Deploy and operate Strix’s autonomous penetration-testing platform in customer environments, validate and triage vulnerabilities, communicate security impact to technical and executive audiences, advise customers, and provide field feedback to improve the product and AI agents.

Designs, implements, and continuously monitors security solutions across AWS, Azure, and GCP. Configures cloud-native and third-party security tools, performs vulnerability management, intrusion detection, SIEM operations, OS hardening, IAM implementation, and security impact assessments. Prepares A&A documentation, including SSPs and control worksheets, supports compliance with FISMA, FedRAMP, and NIST 800-53, and automates security processes for federal government environments.

Serves as the primary government contact for cybersecurity architecture and engineering. Designs and implements enclave-level security architectures, applies DoD SRGs, STIGs, security baselines, and PPSM requirements, and supports RMF and A&A activities. Conducts architecture reviews, maintains security documentation, mentors engineering staff, coordinates with stakeholders, and ensures compliance with federal and DoD cybersecurity policies. The role also evaluates emerging threats and recommends improvements to enterprise security posture.

Serve as the subject matter expert for enterprise network security infrastructure. Design, deploy, configure, and maintain firewalls, IPS, NAC, VPNs, and network segmentation. Administer Palo Alto and Cisco ASA platforms, analyze security events, support zero-trust initiatives, provide Tier III troubleshooting, conduct root-cause analysis, and maintain security baselines and documentation. Collaborate with cybersecurity teams on DoD compliance, STIGs, security frameworks, and mission-ready network operations.

Own SAP Security, IAM, and GRC operations across S/4HANA and integrated systems. Responsibilities include role design, access controls, SoD governance, audit readiness, identity federation, GRC platform operations, compliance monitoring, release security, vendor governance, security architecture, operational metrics, and security support for go-lives and transformation milestones.

Engineer and modernize privileged access management across on-premises and cloud environments. Responsibilities include designing PAM solutions, supporting CyberArk or StrongDM, integrating ServiceNow and Azure, troubleshooting complex authentication issues, providing Tier 3 support, responding to incidents, remediating vulnerabilities, defining PAM standards and governance, and improving resiliency. Preferred experience includes machine identities, automated PAM administration, infrastructure-as-code, legacy platform modernization, migrations, recovery testing, and relevant security certifications.

Maintain and enhance AWS GovCloud and DevSecOps environments by managing infrastructure with Terraform, Helm, YAML, and Kubernetes. Implement RMF and NIST security controls in CI/CD pipelines, remediate AWS Security Hub findings, develop POA&Ms, mitigate risks, support Zero Trust compliance, and detect configuration drift across cloud and infrastructure-as-code environments.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Architects, deploys, and sustains secure cloud, hybrid-cloud, and on-premises environments for federal systems. Develops security baselines, monitoring capabilities, logging strategies, documentation, and system controls; supports audits, incident reporting, access management, root-cause analysis, and cost optimization. Serves as a cloud security subject-matter expert, conducts security solution research, and provides training and knowledge transfer.