Top Security Engineer Jobs

Serve as a strategic advisor to AI and engineering teams to design, scale, and validate secure, trustworthy AI solutions. Define AI security strategy and roadmaps, run POCs/POVs, create standards and best practices, evaluate models and data pipelines for risks, apply analytics to drive security outcomes, and collaborate cross-functionally to translate technical findings into actionable recommendations.

Serve as the cybersecurity SME for the generation fleet: lead segmented architecture deployments and vulnerability remediation, develop fleet-wide standards, oversee compliance audits, lead incident root-cause analysis, build dashboards/metrics, and represent cybersecurity on capital projects and plant upgrades.

Design, implement, and maintain AWS security controls and secure architectures. Build automated IaC compliance checks, integrate security into CI/CD, manage logging/monitoring, perform threat modeling and vulnerability assessments, support incident detection/response, and align cloud environments with security frameworks and regulatory requirements.

Design, implement, and operate network and infrastructure security controls (WAF, IPS, DDoS) in production; automate deployments and validations; partner with internal teams; secure cloud and containerized environments (AWS/GCP, Kubernetes); ensure compliance with FedRAMP/DoD IL4; support U.S. Federal contracts requiring U.S. citizenship and security-clearance eligibility.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Design, build, and maintain secure software and systems for DoD environments. Perform vulnerability scanning, penetration testing, incident response, and automate security tooling. Integrate DevSecOps and SSDLC practices, implement identity and encryption controls, and develop ML models for anomaly detection and proactive threat hunting.

Implement, validate, and maintain application security controls across database, middleware, web, API, and presentation layers. Identify and remediate application-layer risks, assess internet-facing exposures, enforce auth/credentials/encryption standards, coordinate with vendors and application owners, and drive remediation using vulnerability scanning and security testing. Improve application security posture and governance across a large portfolio of commercial third‑party applications.

Senior Level 3 SOC engineer owning high-severity incident investigations and escalations. Lead threat hunting, detection engineering, automation (SOAR/SIEM), cloud and forensic investigations, and mentor SOC staff. Participate in on-call rotation and drive cross-functional remediation, threat modeling, and AI-enabled security capabilities (Agentic SOC, AI DLP).

Own application and infrastructure security across an AWS environment: threat-model systems, review designs and code, manage IAM and least-privilege access (including AI agents), establish durable security controls, integrate security into CI/CD and developer tooling, and partner with Adyen's security organization.

Own OT security engineering for laboratory instruments, automation, and building systems. Translate OT security architecture into controls (segmentation, identity, PAM, PKI), build detection and response, validate vendor integrations, run vulnerability and lifecycle management, and mentor engineers while partnering with SOC, OT engineering, and lab operations.

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Design and analyze ground support equipment, tooling, fixtures, and custom machines for space vehicle integration and test. Perform structural analysis (FEM and hand calculations), create CAD models and drawings (apply GD&T and ASME Y14.5), support vendor selection, fabrication, installation, testing, and project scheduling/budget inputs.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Perform automated and manual application security analysis (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers with remediation and secure design, conduct threat modeling, document findings, and stay current on vulnerabilities and mitigation strategies.

Designs, implements, and operates enterprise security solutions; monitors and responds to security events; leads vulnerability assessments; creates security policies and procedures; ensures regulatory/HIPAA compliance; mentors IT security staff and coordinates with vendors and compliance teams to improve security posture.

Administer, integrate, automate, and optimize enterprise security tools. Develop APIs, scripts, and automation for tool interoperability. Design vulnerability scanning strategies and SIEM data models. Build dashboards and alerts for SOC/CDM stakeholders, aggregate logs and asset data, support audit readiness, and use CI/CD, containers, and cloud-native automation to improve security engineering workflows.

Implement and integrate Black Duck application security products for enterprise customers on the West Coast. Drive customer onboarding, training, solution design, custom integrations into SDLC/DevOps, and own delivery from project initiation to completion while advising on secure development practices.

Define architecture and lead development of an AWS-hosted, secure web portal. Write high-performance secure code, lead DevSecOps and database integrations, conduct code reviews and query optimization, ensure DHS/CBP security compliance, mentor developers, and translate product requirements into technical designs.

Support security and architecture team to design, accredit, and maintain systems handling extremely sensitive data across multiple network fabrics and cloud/on‑prem environments. Lead A&A activities, incident response, POA&M tracking, cloud cost optimization, vulnerability focal duties, technical reviews, and support adoption of security tools and encryption solutions.

Lead design, deploy, operate, and maintain endpoint security solutions (CrowdStrike, Skyhigh, Symantec DLP, Zscaler). Monitor telemetry into SIEM/SOAR, perform upgrades/migrations, troubleshoot detections, drive automation, evaluation of new tech, and maintain documentation to strengthen endpoint security posture.

Design, implement, and maintain cloud security controls and Policy/IaC (Terraform) for Azure/AWS. Use CSPM tooling (Wiz, Defender), perform security assessments, incident response, and collaborate with security champions to enforce compliance (CIS, NIST 800-53).

Design, implement, and support network defense systems across the sponsor's organization. Work on cybersecurity systems and projects responsible for detection, protection, and incident response. Position requires minimum three years relevant experience, a Bachelor's degree, and an active TS/SCI with full-scope polygraph. Located in Herndon, VA with minimal travel.

Provide IT security engineering and integration services, including malicious code detection, intrusion detection, and development/integration of information security tools for government customers. Work requires active TS/SCI with FS poly and a bachelor’s degree.