Top Security Engineer Jobs

Architects, deploys, and sustains secure cloud, hybrid-cloud, and on-premises environments for federal systems. Develops security baselines, monitoring capabilities, logging strategies, documentation, and system controls; supports audits, incident reporting, access management, root-cause analysis, and cost optimization. Serves as a cloud security subject-matter expert, conducts security solution research, and provides training and knowledge transfer.

Designs and hardens security controls for autonomous vessel fleets across embedded edge systems, vessel networks, and cloud orchestration. Responsibilities include secure boot, hardware roots of trust, cryptographic identity, mutual authentication, key management, secure updates, NixOS hardening, dependency vulnerability management, container security, CI/CD security, threat modeling, and incident response. The role collaborates with autonomy, platform security, manufacturing, field, enterprise security, and application security teams.

Designs, implements, and supports enterprise identity and access management across cloud, SaaS, on-premises, and hybrid environments. The role engineers authentication, identity governance, privileged access, Zero Trust controls, lifecycle processes, and secure application integrations. Responsibilities include monitoring identity risks, investigating incidents, automating provisioning and remediation, maintaining identity platforms, supporting audits, and communicating security recommendations to stakeholders.

Maintain the security posture of government sponsor compute and cloud environments. Manage security accreditation lifecycles and workflows under ICD-503 Rev. 4, create and maintain system security plans and related documentation, apply sponsor security policies and risk management frameworks, collaborate with Information System Security Managers, and support IC reciprocity for accreditation projects.

Provides cybersecurity engineering support for government customer systems. Responsibilities include security requirements analysis, network design reviews, security testing, RMF and NIST 800-53 control implementation, vulnerability assessment, security documentation review, and authorization and accreditation guidance. The role coordinates with development teams, evaluates hardware and software security, and supports compliance with cybersecurity standards and customer information assurance processes.

Provides cybersecurity engineering support for a government customer, including security recommendations, project security requirements, network design reviews, security testing, systems security analysis, and coordination with development teams to implement network security standards. The role requires active Top Secret clearance with SCI eligibility, a favorable CI polygraph, DoD 8570 certification, and experience with crypto, COMSEC, and GEOINT.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, improve vulnerability remediation times, build scalable automation, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support incident response. The role requires expertise in AWS, vulnerability tooling, SAST, DAST, SCA, security automation, and AI/LLM-assisted security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, build scalable automation, reduce remediation timelines, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support on-call response. The role requires extensive cloud and security engineering experience, strong AWS skills, programming proficiency, vulnerability management expertise, and knowledge of SAST, DAST, SCA, and AI-enabled security workflows.

Detect, investigate and remediate security incidents across corporate IT. Perform digital forensics and hunting, design and deploy corporate security controls and alerts, secure identity providers, endpoints and networks, and operate security tooling to prevent malware, phishing and unauthorized access.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, communicate risk to leadership, and provide on-call support. The role requires broad enterprise security experience, cloud expertise, secure development testing knowledge, and practical AI/LLM security workflow experience.

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

Build advanced threat detections across cloud, container, corporate, and edge environments; lead complex security investigations, threat hunts, and incident response; develop AI agents and automations for detection and triage; manage EDR, SOAR, and SIEM tools; analyze telemetry and forensic artifacts; and participate in on-call rotations.

Architects, deploys, and sustains secure AWS, hybrid-cloud, and on-premises environments for federal systems. Develops security baselines, documentation, monitoring, logging, and incident-reporting capabilities; supports audits, access management, change-impact and root-cause analysis, and cloud cost optimization. Serves as the cloud security subject matter expert, conducts security solution research, manages service-desk processes, and provides security training and knowledge transfer.

Design, develop, integrate, test, and deploy real-time embedded flight software for spacecraft and launch vehicle avionics. Translate requirements into flight-quality code, perform SIL and HIL testing, create verification plans, debug anomalies, support configuration management and mission operations, and ensure safety and quality compliance. The role also includes root-cause investigations, process improvement, launch readiness support, and mentoring junior engineers.

Designs, implements, administers, and maintains Splunk environments across on-premise and cloud infrastructures. Responsibilities include upgrades, troubleshooting, data onboarding, log parsing and normalization, SPL query development, and creation of dashboards, reports, and alerts. The role collaborates with application and network teams to identify data sources and requires active TS/SCI clearance, onsite work in Suitland, Maryland, and at least eight years of Splunk experience.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, communicate findings to technical, executive, and legal stakeholders, and develop runbooks, scripts, automated workflows, and security operations capabilities. Mentor security operations engineers and support insider threat initiatives, cloud security, SIEM reviews, and cross-functional incident coordination.

Conduct manual penetration testing and vulnerability assessments across web, mobile, API, cloud, microservices, and AI/ML applications. Develop proof-of-concept exploits, identify business logic and privilege escalation flaws, research LLM-based security testing, document findings, communicate risks, and recommend remediation and AI safety controls. The role also supports threat modeling, adversarial testing, and automation research for critical enterprise applications.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Provides intermediate-level support for designing, implementing, and maintaining AWS cloud security controls, IAM policies, monitoring systems, and security frameworks. Investigates cloud security and access incidents, performs risk assessments and vulnerability remediation, monitors logs and security events, and supports identity governance. Collaborates with engineering, DevOps, and application teams to implement secure cloud solutions while improving automation, documentation, compliance, and operational efficiency.

Maintain application security for business-critical systems by identifying, prioritizing, and remediating vulnerabilities throughout the software development lifecycle. Lead security discussions, advise development teams on secure practices and controls, and perform SAST, DAST, threat modeling, and application security assessments. Use Veracode and Burp Suite, apply OWASP standards, support security pipeline integration, and address emerging threats while meeting federal security and compliance requirements.

The Security Operations Engineer protects and improves enterprise infrastructure, endpoints, identities, SaaS platforms, cloud services, and applications. Responsibilities include managing security controls, IAM, endpoint security, vulnerability remediation, audit readiness, compliance, risk registers, incident response, security testing, penetration testing, privacy governance, third-party risk, and automation. The role partners with IT, Legal, Compliance, Privacy, MSSPs, and business stakeholders to strengthen security and operational resilience.

Protect and improve enterprise security across infrastructure, endpoints, identities, SaaS, cloud services, and business applications. Responsibilities include managing MSSP relationships, security controls, identity and endpoint administration, vulnerability management, penetration testing, incident response, audit readiness, privacy compliance, risk assessments, third-party reviews, and security automation. The role also supports threat analysis, forensic investigations, remediation tracking, documentation, and ISO/NIST-aligned governance initiatives.

Protects CRB’s enterprise technology environment across infrastructure, endpoints, identities, SaaS, cloud services, and applications. Responsibilities include security operations, vulnerability management, penetration testing, incident response, identity and access management, audit readiness, privacy compliance, risk assessment, third-party reviews, security control implementation, and workflow automation. The role partners with IT, Legal, Compliance, Privacy, and business stakeholders to reduce risk and improve operational resilience.

The Security Operations Engineer strengthens enterprise cybersecurity, privacy, and operational resilience. Responsibilities include managing MSSPs, security risks, identity and endpoint controls, vulnerability remediation, incident response, audits, compliance, penetration testing, privacy governance, third-party risk, and security automation. The role requires collaboration with IT, Legal, Compliance, Privacy, and business stakeholders while supporting cloud, SaaS, infrastructure, and enterprise application security.

Designs, implements, and maintains security controls across enterprise cloud, infrastructure, endpoint, and application environments. Supports secure configuration, vulnerability remediation, logging and monitoring integration, control validation, security assessments, audits, documentation, and continuous improvement of security standards and engineering processes.