Top Security Engineer Jobs

Lead security engineer responsible for designing, building, and reviewing secure, high-performance API-first services and integrations. Provide technical guidance, implement secure production code, influence product and architecture decisions, and embed AI-assisted security practices within the SDLC. Ensure scalable, cloud-native distributed systems, validate AI outputs, and uphold traceability, resiliency, and auditability across security workflows.

Lead technical design and delivery of endpoint security platforms across Mac, Windows, Linux, and virtual desktops. Build production software, automate binary allowlisting and policy deployment using IaC and GitOps, operate containerized systems, mentor engineers, run design/code reviews, and implement auditable, tamper-resistant security controls at enterprise scale.

Lead Security Engineer designs, develops, and validates secure software solutions, performs threat modeling, vulnerability and penetration testing, and implements AI-assisted security workflows. They develop secure production code, review peers' code, work with stakeholders to mitigate risks, and apply MLOps/GenAI controls to ensure resiliency, auditability, and regulatory compliance across cloud environments.

Lead a global security engineering organization to design, deliver, and operate AI-driven security platforms, endpoint/server antivirus, and container security at enterprise scale. Set technical direction, embed security by design across product and infrastructure teams, drive adoption, and own staffing, budget, and roadmap delivery.

Lead product security engineer responsible for designing, building, and validating secure software for collaboration and content platforms. Conduct threat modeling, vulnerability discovery, and risk assessments across M365 and SaaS environments; implement remediation, secure code, and enterprise security controls; collaborate with stakeholders to align controls with business needs and regulatory requirements.

Lead Security Engineer responsible for designing and building secure Python-based services, conducting threat modeling, vulnerability assessments, secure code development/reviews, and integrating AI-assisted security practices across cloud, container, and CI/CD environments while working with stakeholders to ensure auditability and resiliency.

Lead the design and implementation of enterprise security solutions, clarify multi-network security requirements, perform threat modeling, vulnerability and penetration testing, triage risks and incidents, advise stakeholders, and drive cloud-native and software security initiatives while working independently.

Design and deliver secure software architecture, perform threat modeling and security risk analysis, implement and validate AI-assisted security workflows, produce architecture artifacts, identify gaps and mitigations, and collaborate with engineering teams to improve code quality and system resilience.

Lead design and implementation of enterprise security solutions for API-first services. Develop and review secure production code, perform threat modeling, vulnerability and penetration testing, integrate identity and API security (OAuth/SAML), validate AI-assisted security outputs, and provide technical guidance to stakeholders, teams, contractors and vendors.

Senior hands-on security engineer responsible for designing, building, and implementing enterprise security solutions across cloud, hybrid, and on-prem environments. Integrates security into SDLC, automates controls, performs threat modeling and risk assessments, leverages AI-assisted tools, mentors junior engineers, and leads incident response and post-incident improvements.

Operate and advance the firm's global vulnerability scanning program: manage scanner fleet, develop automation for lifecycle management, tune scan profiles, analyze scan data, ensure scan reachability across networks/cloud, support compliance/audit requirements, and champion IaC and engineering best practices. Use enterprise-authorized AI responsibly to accelerate analysis and documentation.

Lead research, design, and implementation of advanced cryptographic solutions (MPC, PQC, ZKPs) for financial products. Architect and assess crypto protocols and libraries, integrate privacy-preserving tech into production systems, ensure regulatory compliance, mentor junior staff, and represent the firm in academic and industry forums.

Lead design and build secure, resilient cloud-native distributed systems; write Java/Python production code (Spring); perform threat modeling, vulnerability remediation, incident response, and ensure audit-defensible security controls and SDLC practices. Mentor engineers and validate AI-assisted security outputs.

Design and deliver enterprise-scale security engineering solutions for .NET applications; write and maintain secure production code; apply vulnerability scanning, threat modeling, and AI-assisted tools (e.g., Copilot) to identify and remediate risks; produce architecture/design artifacts; define guardrails and audit controls for agentic AI; and lead security training and resiliency activities across SDLC.

Design, implement, and operate perimeter security (firewalls, proxies) across data centers and cloud. Perform risk and vulnerability assessments, develop incident response plans, support secure operations, and collaborate with cross-functional teams to execute cybersecurity strategy and improvements.

Lead enterprise data loss prevention and information protection programs: design and tune DLP policies, develop advanced IP detection (regex, fingerprints, ML), implement classification/labeling and rights management, automate remediation and workflows, monitor exfiltration/anomalous access, author standards and runbooks, and drive large-scale security initiatives across endpoints, cloud, email, SaaS, and storage.

Provide cybersecurity engineering support for systems to achieve and maintain Authorizations to Operate (ATO). Validate security requirements and designs, perform technical security assessments, support RMF A&A documentation, incident response, risk management, and advise architects and PMs on secure implementations across the mission lifecycle.

Provide cybersecurity engineering support for space and mission systems: manage cyber requirements, validate technical security implementations, perform technical assessments, support RMF/A&A and authorization activities, assist incident response, advise architects on secure designs, and produce security documentation and risk mitigation strategies.

Provide day-to-day operational support for enterprise cryptographic appliances, HSMs, and PKI (ADCS); design, build, and maintain secure cryptographic platforms; automate workflows with scripts and approved AI tools; participate in 24x7 on-call rotation and occasional local data center travel.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design and build agentic AI orchestration for security operations: architect MCP/agent frameworks, automate end-to-end incident response, lead proactive threat hunting, integrate offense/defense automation, act as technical escalation for complex incidents, and validate automated defenses through simulation testing.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Lead product security work across Vercel: threat modeling, secure code reviews, open-source and supply-chain security, SDLC tooling and automation, bug bounty triage, cross-team security projects, and customer-facing security support to embed security across development and platform operations.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.