Top Security Engineer Jobs

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-driven security systems, participating in on-call rotations, and mentoring engineers.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-enabled security systems, participating in on-call rotations, and mentoring engineers.

Applies security best practices to optimize systems, analyzes and resolves security challenges, drives cross-functional security initiatives, and collaborates with engineers to improve security processes and overall organizational security posture.

Build and operate identity and access management services protecting Slack infrastructure and AI agents. Responsibilities include developing AWS and Kubernetes services, extending agent authentication and authorization controls, automating access management, improving operational reliability through monitoring and SLOs, collaborating across Identity, Security, and Infrastructure teams, and participating in code and design reviews.

Own and administer the CrowdStrike Falcon security platform across a multi-cloud environment. Engineer SIEM data flows, onboard security tools, maintain platform health, troubleshoot complex issues, automate workflows with scripting, APIs, and SOAR, and improve SOC analyst effectiveness. The role also manages access and configuration governance, supports cloud and endpoint security initiatives, applies AI-driven capabilities, and creates operational documentation while partnering with vendors and cross-functional stakeholders.

Administer and secure Azure Government and Microsoft 365 GCC High environments, including identity, access, cloud networking, firewalls, application delivery, and Microsoft Defender security operations. Investigate incidents, remediate vulnerabilities, troubleshoot production issues, automate tasks with PowerShell and Azure Playbooks, and improve reliability and compliance. The role supports regulated environments and may require after-hours incident response. It is an office-based position requiring residence in or commuting distance to Nashville, Tennessee.

Designs and implements secure cloud architectures for mission-critical Air Force systems. Evaluates RMF and NIST compliance, manages DevSecOps security scanning, hardens systems and containers, protects secrets, documents network and data flows, evaluates cloud services, and develops infrastructure as code using CloudFormation or Terraform. The role also supports security tools, government information assurance requirements, and mentorship of cloud security professionals.

Lead security data architecture and governance for global security observability. Design and manage data pipelines, lakes/warehouses, and analytics (AI/ML) across SIEM/EDR/DLP sources. Publish standards, onboard applications, produce KPIs/reports, and collaborate with architecture and engineering to deliver a multi-year roadmap and threat-hunting capabilities.

Serves as an Information Systems Security Officer and cybersecurity subject matter expert, leading RMF and Assessment & Authorization activities across cloud and enterprise environments. Responsibilities include documenting authorization evidence, analyzing vulnerability and STIG scans, managing POA&Ms, supporting disaster recovery and incident response, completing XACTA 360 tasks, evaluating security architectures, and driving continuous monitoring and compliance with NIST, CNSSI, DISA, and agency standards.

Leads vulnerability remediation and cybersecurity risk management for federal information systems. Oversees RMF lifecycle activities, system categorization, security controls, assessments, authorization documentation, continuous monitoring, incident response, audit support, and compliance reporting. Supervises security professionals, advises stakeholders and leadership, supports DOJ and Intelligence Community data calls, and drives security process improvements. Requires an active TS/SCI clearance and ability to obtain a polygraph.

Twelve-week cybersecurity internship supporting research and analysis of cybersecurity exposure topics. Responsibilities include collecting and reviewing data, documenting findings, creating technical and non-technical summaries, collaborating on issue identification and tracking, following security and privacy procedures, and presenting an end-of-program project. Candidates must be enrolled in an accredited degree program with graduation expected December 2027 or later.

Lead and develop the Security team while owning the company-wide security and compliance program. Responsibilities include managing SOC 2, PCI DSS, GDPR/CCPA, audits, policies, vendor risk, security awareness, and customer security communications. The role also provides technical direction for security tooling, cloud security, identity and access management, application security, vulnerability management, architecture reviews, and threat modeling.

Designs, implements, maintains, and improves corporate information security technologies, including firewalls, proxies, logging, IDS/IPS, and related systems. Evaluates security risks, recommends solutions, develops policies and standards, monitors system performance and anomalies, supports disaster recovery, documents systems, and coordinates vendors and service agreements. The role also consults with IS teams, supports security projects, and contributes to compliance and governance initiatives.

Builds and operates security controls, tooling, detection content, and automation across cloud and corporate environments. Responsibilities include SIEM/SOAR administration, log onboarding, endpoint security, cloud configuration and hardening, identity and access controls, Kubernetes security, secrets management, vulnerability remediation, incident investigation, audit support, and technical documentation. The role provides remediation guidance, improves detection quality, supports resilience exercises, and maintains auditable, version-controlled security configurations in a regulated healthcare environment.

Designs, deploys, configures, monitors, and troubleshoots Cisco ISE for AAA, RADIUS/TACACS+, wired and wireless 802.1X, endpoint profiling, posture checks, and certificate-based authentication. Supports migration from ForeScout CounterACT, integrates ISE with Active Directory, LDAP, Cisco 9800 controllers, and PKI, and improves Zero Trust access controls. Performs health checks, upgrades, root-cause analysis, documentation, cross-team coordination, and mentoring while working onsite in Suitland, Maryland.

Supports cybersecurity and systems security engineering for mission-critical NC3 and weapon systems. Responsibilities include RMF authorization and accreditation, security requirements, architecture reviews, threat assessment, risk mitigation, cybersecurity strategy, vulnerability scanning, DevSecOps security reviews, contingency planning, and compliance with DoD and Air Force requirements. The role requires collaboration with government, contractor, vendor, and program management teams.

The Application Security Engineer will define and validate security controls for a high-traffic digital news platform. Responsibilities include threat modeling, architecture reviews, authentication and authorization assessment, API and integration security, secrets management, vulnerability and penetration testing coordination, encryption validation, security monitoring, GDPR privacy engineering, vendor assessments, and remediation documentation.

Develop and operationalize cloud security strategies, technologies, monitoring, alerting, automation, and security operations integrations. Design security infrastructure across cloud environments, interconnect diverse security event sources, support DevOps initiatives, and improve tooling and operational frameworks. The role requires hands-on security engineering experience across network, system, application, authentication, cryptography, vulnerability management, and enterprise cloud technologies.

Operates, administers, troubleshoots, and maintains multisite physical security systems, including access control, video surveillance, visitor management, and integrated devices. Develops technology roadmaps, system standards, SOPs, risk assessments, and training. Coordinates security technology projects, installations, upgrades, incident response, emergency procedures, compliance, asset management, and collaboration with IT, Facilities, Security Operations, and museum stakeholders.

Owns NIKE’s SAP security strategy, multi-year roadmaps, governance, and compliance framework. Leads SAP security planning, service partner delivery, risk control matrices, GRC risks, segregation-of-duties rules, security patch governance, and regulatory compliance. Partners with SAP, corporate security, finance governance, internal controls, and risk teams to implement secure technology solutions and influence SAP product roadmaps. Requires extensive SAP Security and SAP GRC Access Control experience, strategic leadership, and strong communication skills.

Lead cloud security across AWS environments, managing vulnerabilities, misconfigurations, logging, threat detection, incident response, SIEM improvements, and security reviews. Maintain Orca Security and advise CloudOps and IT teams on best practices. Support audits, assess emerging technologies and AI projects, communicate technical risks to leadership, and promote security awareness. The role requires independent leadership, automation, stakeholder collaboration, and experience with AWS security services, containers, Terraform, scripting, DevSecOps, and threat management.

Design, implement, and scale security controls across infrastructure, applications, identity, and cloud. Perform security assessments, threat modeling, code reviews, incident response, and root cause analysis. Build automation and tooling for compliance, observability, and governance. Partner with product and engineering teams and help define security standards and documentation.

Build and maintain corporate security controls across identity, endpoints, and SaaS. Harden IAM (Okta, Google Workspace), run endpoint security for a macOS-first fleet, secure AI tool usage, reduce SaaS risk with SSPM and automation, and write Python/Terraform to automate access reviews, onboarding/offboarding, and audit evidence. Partner with Detection & Response and support SOC 2/ISO 27001 compliance and corporate incident response.

The Senior Identity Security Engineer manages identity security for Palantir's infrastructure, designing systems, threat modeling, and ensuring security in diverse environments.

The Information Security Engineer will secure Palantir's Windows and Active Directory environment, focusing on attack surface reduction, tooling deployment, automation for security operations, and incident response.