Top Security Engineer Jobs

Build and lead development of a scalable AI security platform, including foundational services, APIs, libraries, SDKs, and guardrails for AI-powered security capabilities. Design secure, reliable distributed systems with identity, authentication, authorization, encryption, and data protection controls. Partner across security and engineering teams, improve platform performance and developer experience, and guide the architecture and technical direction of the platform.

Design and implement enterprise security architecture aligned with NIST, ISO 27001, and CIS standards. Build security data aggregation, normalization, and automation pipelines using VBScript, Python, and PowerShell. Lead tooling rationalization initiatives, consolidate security telemetry, reduce operational costs, and establish enterprise monitoring and incident response programs with detection, escalation, and investigation procedures.

Develops and executes sales strategies for commercial, healthcare, and industrial security accounts. Conducts customer discovery and site surveys, assesses existing access control, video, and intrusion systems, designs solutions, prepares bills of material and proposals, negotiates and closes sales, and manages pipelines and forecasts. Coordinates with manufacturers, vendors, project managers, and installation teams to ensure accurate project scope and successful handoffs.

Conduct application security assessments across web, API, and mobile systems; perform SAST, DAST, SCA, manual reviews, threat modeling, and vendor security assessments. Prioritize vulnerabilities, guide developers on remediation and secure coding, integrate automated scanning into CI/CD pipelines, and maintain application security standards, documentation, and training.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Design and build agentic AI orchestration for security operations: architect MCP/agent frameworks, automate end-to-end incident response, lead proactive threat hunting, integrate offense/defense automation, act as technical escalation for complex incidents, and validate automated defenses through simulation testing.

Lead cybersecurity architecture, implementation, assessments, risk analysis, incident response, and security lifecycle integration. Own Honeywell’s CMMC compliance program, including CUI asset governance, evidence management, NIST-to-FedRAMP CRM mapping, CMMC operating processes, remediation tracking, and stakeholder coordination. Mentor cybersecurity professionals and advise technical and nontechnical stakeholders on emerging threats and mitigation strategies.

Lead CMMC compliance and cybersecurity architecture efforts, including CUI asset governance, evidence management, CRM development, NIST and FedRAMP mapping, remediation tracking, security assessments, risk analysis, incident response, and secure development integration. Mentor cybersecurity professionals and collaborate with internal and external stakeholders to implement protections for critical systems and information.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Architects, deploys, and operates cloud security controls across AWS, Azure, GCP, SaaS, IaaS, and PaaS environments. Owns cloud security standards, policy as code, guardrails, detection engineering, incident response, risk remediation, vendor assessments, compliance alignment, and the cloud security roadmap. Partners with engineering and product teams, mentors engineers, and drives secure-by-default development across multiple brands and business units.

Lead technical onboarding, implementation, and post-sales support for enterprise customers deploying AI cybersecurity solutions. Manage implementation plans, milestones, risks, technical relationships, and issue triage while coordinating with Sales, Engineering, Services, Product, and Support. Develop repeatable technical documentation and advocate for customer feedback. The role requires extensive post-sales technical experience, AI systems deployment expertise, enterprise infrastructure knowledge, and the ability to manage complex deployments in a high-growth environment.

Lead technical customer onboarding, implementation, and post-sales support for AI cybersecurity products. Own technical customer relationships, create implementation plans, manage risks and timelines, coordinate cross-functional teams, triage issues, document repeatable processes, and provide customer feedback to product teams. The role requires enterprise infrastructure expertise, AI deployment experience, complex integration skills, and strong project management in a high-growth environment.

Leads technical onboarding, implementation, and post-sales customer relationships for AI cybersecurity solutions. Develops implementation plans, manages milestones and risks, coordinates technical support, documents repeatable processes, and collaborates with Sales, Engineering, Services, Product, and Support. Serves as the primary technical contact for customer engineering and security teams, drives adoption and time-to-value, and provides customer feedback to inform product roadmaps. Requires extensive post-sales technical experience, AI deployment expertise, enterprise infrastructure knowledge, and complex deployment experience.

Designs, deploys, and manages enterprise EDR/XDR and NGAV protections across large heterogeneous endpoint fleets. The role engineers behavioral defenses, supports SOC investigations, performs host forensics and live remediation, partners with application owners to reduce operational impact, protects hybrid and multi-cloud workloads, and validates control effectiveness through attack simulation and Purple Team exercises.

Design, build, and operate cloud security for a multi-account AWS environment and Kubernetes clusters. Implement detection, automated remediation, zero-trust access, shift-left security in CI/CD, and cloud posture/workload protection. Partner with infrastructure teams, mentor engineers, and develop automated guardrails and agentic detection workflows integrated into engineering workflows.

Develop and improve enterprise security controls, investigate security alerts and incidents, tune detections, automate security processes, assess hybrid infrastructure and cloud configurations, and partner with infrastructure and application teams. The role independently owns security initiatives from problem identification through implementation, documentation, operation, and continuous improvement.

Supports the information security program by engineering and maintaining security technologies, identity and access controls, monitoring capabilities, cloud and network protections, and defensive processes. Responsibilities include security architecture, risk assessments, audit and compliance support, incident response, security automation, control documentation, and collaboration with IT, business, and third-party stakeholders. The role requires 5+ years of cybersecurity or related experience, with expertise in identity security, endpoint protection, SIEM, cloud security, and regulated environments preferred.

Designs and validates cybersecurity architectures for distributed tactical-edge and enterprise systems operating in low-bandwidth, intermittent, and degraded environments. Responsibilities include security control implementation, RMF and ATO documentation, threat modeling, vulnerability assessment, hardening, monitoring, incident response support, and secure lifecycle integration. The role requires collaboration with engineering, operations, and leadership teams and provides on-site support in Springfield, Virginia.

Leads cybersecurity professionals implementing the Risk Management Framework for federal IT systems. Oversees system categorization, security control selection and assessment, authorization documentation, continuous monitoring, risk analysis, remediation, incident response, audit support, and stakeholder training. Advises leadership on cybersecurity risks and compliance while maintaining alignment with NIST guidance and DoD requirements.

Assesses and continuously monitors cybersecurity controls across federal systems, reviews authorization documentation, and guides RMF activities. Advises on system categorization, control selection, implementation, assessment, remediation, risk analysis, incident response, and audit support. Coordinates with system owners, ISSEs, and ISSOs; prepares authorization documentation; reports risks and metrics to leadership; and provides cybersecurity guidance and training. Requires an active TS/SCI clearance and the ability to obtain a polygraph.

Assesses and documents cybersecurity controls across the Risk Management Framework lifecycle. Reviews system evidence, guides categorization and control selection, oversees assessments and continuous monitoring, prepares authorization risk documentation, and advises stakeholders on remediation, incident response, audits, and compliance. Coordinates with system owners, ISSEs, and ISSOs while reporting security risks and improvement opportunities to leadership.

Conduct cybersecurity analysis, vulnerability scanning, patch management, compliance assessments, hardening, log analysis, incident response, and CVE remediation for enterprise IT infrastructure supporting a DoD program. Apply STIGs and RMF/ATO requirements, maintain security documentation, collaborate with infrastructure teams, and automate DevSecOps security processes across Windows, network, and virtualized environments.

Implements, administers, monitors, and maintains enterprise security systems including firewalls, VPN, endpoint protection, SIEM, data loss prevention, vulnerability management, and access control. Responds to alerts, incidents, and service requests; performs troubleshooting, upgrades, patching, documentation, and change management. The role collaborates with vendors, supports end users, participates in on-call rotations, mentors junior engineers, and contributes to security solution design and process improvements.