Top Security Engineer Jobs

Lead AppSec across the SDLC: design and implement application security controls, perform hands-on testing of web apps/APIs/cloud services, integrate automated security tooling into CI/CD, reduce developer friction, review architecture and code, support vulnerability management and incident response, evaluate third-party risks, and ensure healthcare regulatory compliance (e.g., HIPAA, GDPR).

Drive technical pre-sales for data security: deliver demos/PoCs, lead hands-on workshops, design secure architectures, resolve technical blockers, advise on data governance and AI platform security, and represent Microsoft in developer communities.

Drive technical pre-sales engagements for Microsoft Security: build demos/PoCs, lead hands-on workshops, design secure cloud architectures, resolve technical blockers, and advise customers on improving security posture using Microsoft security products and AI-enabled solutions.

Lead accreditation efforts, perform risk assessments, and manage cybersecurity engineering and secure SDLC practices. Collaborate with cross-functional teams to ensure system and application security, implement risk management frameworks, and drive compliance and secure software development processes.

Lead design and delivery of enterprise network security and wireless solutions (Zero Trust, segmentation, firewalls, WLC/AP deployments). Manage end-to-end solution delivery, assess and remediate security weaknesses, align with stakeholders, and ensure operational readiness and regulatory compliance.

Lead design and implementation of secure, scalable policy and platform software across cloud and hybrid environments. Drive technical strategy, mentor senior engineers, influence architecture and standards, and collaborate across product and business teams to deliver long-term, reliable security solutions.

Define and implement security architecture across infrastructure, endpoints, identity, and cloud; lead threat detection, incident response, vulnerability and risk management; optimize security tooling; partner with MSSPs and IT teams; support compliance (TISAX, SOX, ISO 27001, NIST); and drive security maturity and enablement across the organization.

Lead QA efforts for Cisco Meraki MX/Catalyst network security and SD-WAN features. Design and execute test strategies, build automation for CI/CD, validate security services (malware, IPS, URL filtering, SSL/TLS), and drive performance and scalability testing using traffic generators and AI-driven techniques.

Lead application security by performing risk analyses, vulnerability assessments, SAST/DAST and SCA testing, secure design and code review, threat simulations, cloud and WAF hardening, CI/CD security integration, and reporting to senior management while coordinating remediation with development and IT teams.

Lead product security across the platform: design secure-by-default architectures, define authentication/authorization and data protection strategies, mitigate emerging risks, embed security across development lifecycle, and mentor engineers to raise security standards.

Lead product security architecture and embed security across the SDLC. Define authentication, authorization, data protection, and supply-chain controls. Mentor engineers, collaborate with product teams, identify and mitigate security risks, and implement scalable, secure-by-default frameworks across the stack.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Lead cybersecurity engineering for US Naval warfare systems: author A&A artifacts, apply RMF and DISA STIGs, design/detect/correct defenses, plan and execute security testing, shepherd ATO/IATO processes, and serve as Information Assurance Officer and technical lead for risk assessments and vulnerability management.

Perform reverse engineering, debugging, log analysis, and penetration testing. Administer multiple OSes, apply DISA STIGs and NSA encryption, recommend mitigations, perform static code analysis, participate in code reviews, and contribute to system security documentation for DoD environments.

Design and build security and infrastructure systems for an AI data platform: detect and respond to security events, automate security workflows, harden cloud and production environments, enforce access control, integrate security into development workflows, own incident handling, secure data and model interaction layers, and contribute to human-in-the-loop systems and core internal tooling.

Senior cyber security engineer responsible for RMF/A&A activities for SLBM and naval warfare systems: author A&A artifacts, document systems, apply DISA STIGs/NSA guidance, lead security test and vulnerability analysis, produce SSAOM, manage IAVM and obtain ATO/IATO, and perform risk assessments and technical security design.

Design and implement secure AWS architectures, manage IAM and AWS security services (GuardDuty, Security Hub, Inspector, Macie, WAF), build IaC security controls (Terraform, CDK Python), perform threat modeling and vulnerability remediation, implement logging/monitoring (CloudTrail, CloudWatch, SIEM), support incident response, automate compliance checks, and collaborate with DevOps to embed security in CI/CD pipelines.

Lead design and implementation of cloud security controls across AWS/GCP, Kubernetes, and serverless environments. Harden infrastructure, automate IAM and secrets management, integrate security scanning into CI/CD, operationalize vulnerability management and threat modeling, and partner with engineering to embed DevSecOps practices across AI-driven workflows.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Design, develop, and deploy cloud threat detection for AWS and GCP; integrate and normalize cloud telemetry into the enterprise SIEM; create and tune detections, dashboards, and alerting; map detections to MITRE ATT&CK; run adversary emulation and purple team exercises; produce SOPs, runbooks, and investigator playbooks; train SOC analysts; provide escalation and on-call support for cloud security incidents.

Work directly with engineering to identify systemic application security gaps, build SAST/SCA tooling and custom static analysis, perform secure code and design reviews, threat model new features (including agentic AI/LLM systems), and present security posture to enterprise healthcare customers.

Lead strategy, architecture, governance, and lifecycle of enterprise physical security platforms (access control, video, visitor management, badging, alarms). Support modern endpoint and mobility platforms, drive integrations with infrastructure, lead deployments, troubleshoot incidents, manage vendors, document standards, and mentor teams while aligning security and operational objectives.

Design, build, and maintain detection-as-code and AI-powered detection/response tooling across cloud, endpoints, and identity. Automate investigation and response workflows, lead incident response, improve observability, tune alerts, and partner with engineering to expand logging and embed detections.

Define and own vehicle system security requirements and architectures. Collaborate with OEMs and systems engineers to implement network/module security. Create security requirements for software interfaces, develop and execute V&V plans, run tests, analyze results, resolve defects, and manage delivery timing of security features and software updates across vehicle prototypes.

Lead cybersecurity evaluations, define item boundaries and cybersecurity concepts, and perform ISO/SAE 21434-compliant threat analysis and risk assessments (TARA). Define and manage security requirements and risk treatments for self-driving platform features, collaborate with engineering and safety teams across the product lifecycle, and maintain standards compliance across multiple projects.