Top Security Engineer Jobs

Performs information system security engineering across the system development lifecycle, integrating security requirements, assessing risks, implementing controls, and supporting RMF and A&A activities. Develops SSPs, SARs, POA&Ms, and other authorization artifacts; evaluates architectures, vulnerabilities, system changes, and security solutions; supports secure system design, testing, configuration management, continuous monitoring, and Cross Domain Solutions. Collaborates with engineers, assessors, program managers, and authorizing officials to maintain cybersecurity and system resiliency.

Provides cybersecurity engineering leadership for classified DoD and U.S. Space Force systems. Designs and assesses security solutions, integrates controls across networks, supports RMF and ATO activities, conducts risk analyses, evaluates system changes, and ensures compliance with NIST, DoD, DAF, and Intelligence Community requirements. The role coordinates with government stakeholders and technical teams, tracks remediation activities, and presents security findings and recommendations to senior leadership.

Designs and assesses security architectures for software, embedded, cloud, hardware, and sensor platforms. Leads threat modeling, risk assessments, secure SDLC initiatives, vulnerability remediation, compliance, RMF and ATO activities, security testing, and authorization documentation. Partners with engineering, infrastructure, DevOps, program, government, and customer teams to establish secure development standards and protect mission-critical technologies.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Work as a Cyber Security Engineer Co-Op, assisting the Information Security team with compliance, operational tasks, and learning about security in financial services.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Design and build automated compliance engineering systems: continuous evidence collection and control monitoring, integrate cloud and identity tooling, apply LLMs/agents for validation, lead auditor engagements for certifications (ISO, SOC2, CSA STAR), drive remediation with stakeholders, and author compliance documentation and strategy.

Lead design, deployment, and optimization of Cortex XSIAM detections and analytics. Develop XQL detections and threat hunts, build automated response playbooks, integrate security telemetry (endpoint, network, cloud, identity), collaborate with SOC and incident responders, mentor staff, and improve detection fidelity and MTTR at enterprise scale.

Leads enterprise physical security technology architecture, governance, lifecycle management, modernization, integrations, testing, vendor coordination, disaster recovery, backups, and operational support. Oversees access control, video surveillance, intrusion detection, alarm monitoring, and security operations center platforms across multiple utilities. Provides technical direction, manages roadmaps and standards, coordinates cross-functional initiatives, resolves escalated issues, and communicates system status and outages to IT and business leadership.

Designs, implements, and improves enterprise security capabilities across endpoint, cloud, network, data protection, email security, vulnerability management, SIEM, SOAR, and Zero Trust environments. Owns major security platforms including Rapid7, Microsoft Defender, Microsoft Purview, Mimecast, and Zscaler. Develops scalable architectures, detection and automation workflows, vulnerability controls, email protections, and security integrations while partnering with infrastructure, network, cloud, application engineering, security operations, and MDR teams.

Leads cloud security architecture and engineering across Azure, multi-cloud, on-premises, and hybrid environments. Implements IaC security controls, Zero Trust, IAM modernization, threat modeling, monitoring, incident response, compliance, and secure CI/CD practices. Collaborates with product, platform, and infrastructure teams to improve cloud resilience, governance, visibility, and secure deployment practices.

Lead design, implementation, and support of secure on‑prem and AWS cloud networking. Own outages and root‑cause analyses, manage firewalls, segmentation, load balancers, Terraform IaC, monitor performance, ensure NIST/HIPAA compliance, and drive network projects and process improvements.

Designs, implements, and owns security frameworks and features for Okta’s identity services. The role develops application and distributed-system security solutions, influences security roadmaps, promotes best practices, conducts security-focused code reviews, troubleshoots production issues, and mentors engineers. Responsibilities include addressing cryptography, authentication, authorization, secrets management, cloud security, post-quantum cryptography, and agentic AI security while collaborating across engineering, security, and product organizations.

Lead Uber’s Detection Engineering organization and set the global strategy, roadmap, and execution for threat detection. Own detection coverage, content, platforms, latency, signal fidelity, and AI/ML adoption across corporate, production, and cloud environments. Partner with security response, threat intelligence, infrastructure, and product teams; manage vendors and build-versus-buy decisions; and hire, develop, and retain senior security and software engineering leaders.

Lead Prelim’s security program across secure SDLC, application and cloud security, IAM, incident response, endpoint management, vendor risk, security reviews, and SOC 2 Type II compliance. Partner with DevOps and engineering, coordinate penetration testing, develop policies and risk roadmaps, manage audits and customer questionnaires, and improve detection and access controls. The role is the company’s first dedicated security hire and requires strong judgment, communication, and hands-on technical skills.

Manage and administer Check Point firewalls, Infoblox DNS and IPAM, and web application firewalls. Implement cybersecurity controls, improve threat detection and vulnerability management, correlate security events, and research emerging security technologies. The role requires troubleshooting complex network security challenges, supporting enterprise infrastructure, tuning security solutions, and participating in rotating on-call duties. Preferred experience includes Cloudflare, Zero Trust, cloud security across Azure, AWS, and GCP, and CISSP certification.

Maintain and improve PLC, HMI, SCADA, OT/IT architectures, and industrial networks. Lead automation upgrades, equipment integration, commissioning, and qualification activities. Serve as the site OT cybersecurity focal point by managing risks, vulnerabilities, segmentation, hardening, and security requirements. Enable digital manufacturing through Industrial IoT, edge computing, predictive maintenance, analytics, and AI applications while coordinating with Engineering, IT, Cybersecurity, Production, and suppliers.

Leads cybersecurity engineering and ISSM responsibilities for a classified defense program. Performs vulnerability scanning, SIEM operations, STIG hardening, monitoring, incident response, RMF/ATO package ownership, security policy enforcement, and compliance governance. Manages ISSO/ISSE development, coordinates with DCSA and government stakeholders, briefs security posture to Authorizing Officials, and oversees system accreditation and security assessments. The role requires hands-on technical execution alongside senior program security leadership.

Leads red team operations, penetration testing, threat modeling, and adversarial simulations across applications, infrastructure, corporate, and physical environments. Develops security-testing tools, partners with detection and response teams, communicates and remediates findings, leads related incidents, and mentors offensive security engineers. The role requires advanced knowledge of cloud, containers, defensive evasion, identity security, network protocols, and MITRE ATT&CK, along with Python, Go, and JavaScript proficiency.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Build and operate automated security infrastructure across AWS and Kubernetes, including cryptographic-material lifecycles, security telemetry, compliance automation, policy-as-code, threat modeling, and CI/CD security controls. Develop agentic AI workflows using tools such as Claude Code and MCP integrations. Support incident response, review security architecture, automate evidence collection, and partner with engineering, audit, risk, vendors, and clients to improve security posture at scale.

Execute and maintain ISO 27001 and SOC 2 compliance programs, operate Vanta, collect audit evidence, support audits, assess risks and vendors, manage security obligations, maintain regulatory documentation, and translate controls into engineering work. The role also supports customer security reviews, physical security, incident compliance, awareness training, business continuity, and disaster recovery evidence.

Own end-to-end security engineering for pharmacy robots, including threat modeling, design reviews, device identity, key custody, penetration testing, vulnerability management, incident response, cloud security posture, customer security reviews, and HIPAA-related controls. Build and review code across Rust, TypeScript, and Python while partnering with on-machine, cloud, and operating-system engineering teams. Maintain evidence-backed security practices and track findings through remediation.

Build, integrate, and operate cloud-native security controls across infrastructure, data platforms, applications, CI/CD pipelines, and enterprise services. Develop CSPM and DLP capabilities, detection logic, automation, and incident-response mechanisms. Integrate controls with SIEM platforms, apply infrastructure-as-code and automated testing practices, and support reliable production operations. Collaborate with platform, application, and product teams to improve cloud security effectiveness and developer adoption.