Top Security Engineer Jobs

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Leads enterprise network security strategy, architecture, and roadmap across on-premises, cloud, data center, laboratory, campus, WAN, and hybrid environments. Designs Zero Trust, segmentation, firewall, ZTNA, SASE, SD-WAN, detection, telemetry, and automation solutions. Provides senior incident-response expertise, conducts architecture and risk assessments, supports audits, establishes standards and governance, and mentors engineers while advising technical and executive stakeholders.

Configure, deploy, monitor, troubleshoot, and maintain enterprise firewalls, VPNs, and other security appliances in a 24/7 environment. Responsibilities include vulnerability mitigation, auditing and compliance, software and IOS upgrades, lab testing, hardware refreshes, ticket support, vendor coordination, project execution, and participation in an on-call rotation. The role supports Cisco and Palo Alto security infrastructure for a Bethesda, Maryland customer.

Designs, assesses, and integrates secure networking, computing, and multi-enclave environments. Identifies vulnerabilities, validates security requirements, develops security architectures, mitigates system risks, and supports certification, authorization, RMF, NISCAP, and security planning activities. Collaborates with architects, developers, customers, and engineering teams to implement cybersecurity controls and trusted relationships across systems with different classification and data-protection requirements.

Performs security assessments, designs secure system and network architectures, identifies and mitigates vulnerabilities, and supports authorization, certification, risk management, and RMF activities across classified computing and enclave environments. The role advises engineering teams, enforces trusted system relationships, validates security requirements, and recommends system-level security solutions. Requires extensive ISSE experience, cybersecurity architecture expertise, a relevant degree or equivalent experience, IASAE Level 3 compliance, ISSEP, CISSP, and an active TS/SCI clearance with polygraph.

Provides principal-level technical leadership for enterprise privileged access management and identity security. Designs and implements CyberArk-based PAM architectures, Zero Trust controls, least-privilege access, secrets management, resilience, recovery, and secure vendor access across hybrid, cloud, manufacturing, and validated environments. Translates regulatory requirements into engineering controls, leads complex initiatives, troubleshoots security issues, supports incidents and recovery exercises, establishes metrics, and mentors engineers.

Leads intelligence-informed adversary emulation and red-team campaigns across identity, endpoints, networks, applications, APIs, cloud, data, and software delivery systems. Designs engagement plans and safety controls, executes advanced attack scenarios, develops offensive tooling, evaluates security controls, and leads purple-team validation. Produces executive and technical reports, translates attack paths into remediation priorities, coordinates with security and business stakeholders, and mentors offensive and defensive engineers.

Architects and secures high-performance defense networks carrying radar, camera, and vehicle data in classified environments up to IL6. Designs deterministic low-latency transport, network segmentation, encryption, PKI, zero-trust architectures, infrastructure automation, observability, and continuous compliance. Translates DoD and Navy guidance into engineering decisions, collaborates with customers and government stakeholders, sets technical direction, leads design reviews, and mentors engineers.

Conduct application security reviews, source-code audits, penetration tests, and architectural reviews. Guide development teams on vulnerability mitigation, secure SDLC, threat modeling, DevSecOps, and security architecture. Manage externally reported vulnerabilities and drive SAST, DAST, IAST, and SCA programs. Research emerging application attack vectors, develop security tools and controls, and coach teams on application security best practices.

Designs and operates a secure Azure platform for AI applications, models, and agents. Responsibilities include cloud networking, private endpoints, identity and least-privilege access, secrets management, encryption, data loss prevention, AI guardrails, threat monitoring, incident response, audit support, and cloud cost and capacity management.

Owns enterprise vulnerability management and privileged access management programs. Responsibilities include administering scanning and PAM platforms, prioritizing vulnerabilities, tracking remediation against SLAs, validating fixes, managing risk exceptions, enforcing least privilege, reviewing privileged accounts, monitoring sessions, and producing security reporting for leadership, audits, and clients.

Build, customize, and maintain secure configuration baselines using CIS Benchmarks and DISA STIGs. Map technical settings to FISMA and NIST controls, develop baselines from vendor documentation, apply NVD and CVE data, and verify compliance through Tenable scans. The role requires independent ownership, collaboration with system teams, clear risk communication, and support for baseline rollout across servers, networks, cloud, SaaS, and mobile platforms.

Lead the architecture and implementation of security controls for LLM applications, RAG systems, autonomous agents, and AI-enabled engineering workflows. Build AI security testing, red-teaming, monitoring, guardrails, automation, and secure development patterns. Establish technical direction, threat-model complex systems, secure model and tool access, respond to agent incidents, evaluate emerging AI technologies, and mentor engineers across security and platform teams.

Owns end-to-end remediation of security findings across cloud, identity, source-control, and infrastructure platforms. Responsibilities include triaging scanner findings, validating risk, tightening permissions and policies, rotating credentials, patching vulnerabilities, hardening networks, responding to urgent alerts, and coordinating approved production changes. The role also contributes to remediation playbooks, automation, root-cause fixes, and on-call incident response while partnering with Security, SRE, and engineering teams.

Leads enterprise email security strategy, architecture, engineering, modernization, and lifecycle management. Oversees phishing protection, threat detection, encryption, DLP, cloud security, incident response, risk remediation, governance, metrics, vendor relationships, and regulatory alignment. Partners with cross-functional stakeholders, presents to executives, leads engineering teams, and applies AI-enabled workflows to improve security analysis and operational effectiveness.

Build and improve SIEM detections, alert pipelines, response playbooks, and DLP controls. Conduct incident response readiness, cloud security assessments across AWS and Kubernetes, application security initiatives, and AI workflow security reviews. Establish vendor security assessments and third-party due diligence processes. The role requires hands-on cybersecurity experience in regulated financial environments, strong communication skills, and regular in-office work three to four days weekly.

Design, operate, and support HashiCorp Vault-based secrets and encryption management across cloud environments. Build Vault namespaces and CI/CD integrations (Terraform, Git, Jenkins), monitor with DataDog/Splunk, onboard applications, perform upgrades/maintenance, and enforce security, compliance, and cloud best practices while collaborating with cross-functional teams.

Supports cybersecurity platforms for threat hunting, data forensics, and malware analysis. Responsibilities include configuring and integrating GTI, SafeBreach, BloodHound, and related tools; contributing to CAASM architecture using APM and BAS; developing automation; troubleshooting and remediation; supporting testing, upgrades, documentation, and operational readiness. The role requires knowledge of Windows, Linux, networking, access controls, scripting, APIs, and cybersecurity workflows, along with strong communication and collaboration skills.

Supports enterprise security architecture and information security programs by deploying and tuning security controls, administering SIEM tools, investigating alerts, conducting vulnerability management, hardening systems, supporting incident response, and assisting with audits and regulatory compliance. The role also develops security documentation, improves detection and automation, communicates business risks, and partners with IT and business stakeholders to strengthen security posture.

Leads global cybersecurity strategy, enterprise risk management, advanced security architecture, compliance, incident response, threat intelligence, governance, and security innovation. Advises executive, government, and industry stakeholders; oversees complex security assessments and system protections; mentors senior technical leaders; and supports DoD cybersecurity, RMF, incident handling, cross-domain, cryptographic, and authorization requirements.

Leads multiple security engineering teams, sets strategy and roadmaps for security automation, detection, resilience, IAM, data protection, and cloud security. Partners with executives to embed secure design across technology lifecycles, oversees major security programs, translates risk into engineering priorities, mentors future leaders, and advises on emerging threats and enterprise architecture.

Execute red team operations against Azure and other Microsoft services by discovering and exploiting vulnerabilities across application, cloud, network, hardware, and operational security layers. Emulate real-world adversaries, analyze source code and threat data, collaborate with blue teams, improve detection and response readiness, communicate security risks, and apply AI-based approaches to vulnerability discovery and threat emulation.

Own and build LiveKit’s vulnerability management and security operations program. Responsibilities include deploying scanning tools, triaging vulnerabilities, assessing severity, assigning remediation owners and SLAs, creating dashboards, automating remediation workflows, and collecting compliance evidence. The role partners closely with engineering and compliance teams and may involve agentic security automation, incident response, application security, and AI security.

Designs, implements, and maintains enterprise security solutions across networks, endpoints, email, identity, and data protection. Responsibilities include firewall and VPN management, threat detection, incident response, vulnerability management, security audits, penetration testing, SOC 2 compliance, phishing response, SIEM monitoring, threat hunting, and security assessments. The role also supports Azure security, third-party risk questionnaires, technical design reviews, and off-hours security operations.