Top Security Engineer Jobs

Implements, administers, monitors, and maintains enterprise security systems including firewalls, VPN, endpoint protection, SIEM, data loss prevention, vulnerability management, and access control. Responds to alerts, incidents, and service requests; performs troubleshooting, upgrades, patching, documentation, and change management. The role collaborates with vendors, supports end users, participates in on-call rotations, mentors junior engineers, and contributes to security solution design and process improvements.

Lead threat modeling and risk management for DigitalOcean's virtualization stack. Build frameworks and rubrics to assess hypervisor risk, propose and implement defense-in-depth mitigations, collaborate with engineering teams on remediation, mentor teams on secure design, and help oversee vulnerability management and security guidance.

Own the security risk posture for the virtualization stack by building threat models, assessment rubrics, and defenses. Propose and implement mitigations, partner with engineering teams to drive remediations, mentor engineers on secure practices, and help oversee vulnerability management and security guidance.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Leads hands-on security engineering across infrastructure, cloud, identity, applications, AI tools, and compliance. Responsibilities include IAM design, access audits, incident investigation, threat response, security reviews, vulnerability scanning, AI integration governance, audit evidence, policy development, and security automation. The role acts as an escalation point, prioritizes security initiatives, supports global compliance programs, and develops repeatable security processes and documentation.

Leads enterprise security engineering across cloud and network infrastructure, IAM, access audits, incident response, application security, AI integrations, and compliance. The role designs least-privilege controls, investigates incidents, reviews systems and third-party components, manages AI security guardrails, automates security processes, and supports J-SOX, NIST 800-171, CMMC 2.0, and SOC 2 audits across global operations.

Designs, implements, and maintains secure enterprise network environments. Responsibilities include managing Palo Alto firewalls and Panorama, Zscaler solutions, Cisco routing and switching, BGP, network access control, security policies, and incident response. The role also automates firewall and security processes, maintains documentation, supports high-availability network operations, and contributes to security best practices. Preferred experience includes cloud networking security, Ansible, Python, Terraform, relevant certifications, and SASE integrations.

Designs, implements, verifies, and assesses secure IT infrastructure and information systems. Provides security engineering support for ATO extensions, authorization packages, RMF compliance, and technical security controls. Conducts configuration, vulnerability, and risk assessments; deploys security monitoring and protection tools; documents SSPs and POA&Ms; analyzes system changes; and supports incident remediation, root-cause analysis, and corrective actions.

Leads information security engineering and architecture across identity, endpoint, email, cloud, network, application, data, and monitoring technologies. Oversees security engineering staff, improves access controls and security standards, supports audits and regulatory compliance, develops AI security frameworks, automates security operations, and participates in incident response and business continuity. Partners with IT, risk, compliance, audit, application owners, and business stakeholders to strengthen the organization’s security posture.

Leads security engineering for complex information systems, including security architecture, RMF controls, STIG compliance, vulnerability analysis, SIEM log review, DevSecOps integration, continuous monitoring, risk assessments, audits, and security requirements engineering. The role develops technical security solutions, validates controls, supports POA&M management, and coordinates with system leads, ISSOs, developers, architects, and program managers in classified SCIF environments.

Performs security assessments and engineering for AI/ML systems, large-scale compute clusters, AWS Cloud infrastructure, networks, and enclave environments. Designs and integrates information assurance architectures, identifies and mitigates security risks, validates security requirements, supports certification and accreditation, and enforces trusted relationships and government security policies. Collaborates with engineering teams and government customers on secure system development and operational deployment.

Designs, supports, and secures network infrastructure in a mission-focused environment. Responsibilities include network deconfliction, scripting and development, packet inspection, traffic analysis, penetration testing, Linux security operations, network device configuration, virtual infrastructure development, and collaboration with managers, stakeholders, developers, and mission partners. The role provides technical support to a multidisciplinary team and requires an active TS/SCI clearance with polygraph.

Designs, develops, configures, and integrates cybersecurity requirements into information systems and technology products. Leads security architecture, system design, technology research, alternative analysis, development lifecycle activities, roadmaps, and investment planning. Oversees cybersecurity engineers across experience levels and supports enterprise cybersecurity solutions spanning cloud and on-premises environments, including automation, augmentation, and artificial intelligence technologies.

Designs and scales DevSecOps practices by integrating security tooling into CI/CD pipelines, leading threat modeling and secure design reviews, managing product vulnerabilities, establishing secure coding standards, and mentoring engineering teams. The role focuses on web applications, APIs, cloud services, infrastructure, and customer security reviews while advancing the company’s security program.

Lead technical strategy and architecture for software security across Block. Design and deliver security solutions, drive Secure SDLC adoption, threat model critical systems, mentor engineers, and execute high-priority security initiatives for scalable, resilient security services and mobile/platform security.

Leads Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Responsibilities include setting technical strategy, reducing remediation time, developing automation, guiding engineering teams, mentoring security engineers, assessing high-profile vulnerabilities, supporting incident investigations, and participating in on-call response. The role requires extensive security experience, programming proficiency, AWS expertise, vulnerability management knowledge, and practical use of AI/LLM tooling.

Design and develop security frameworks for Aurora’s autonomous vehicle platform and cloud services. Lead vehicle security implementation, architecture reviews, threat modeling, code reviews, security releases, and integration with partner teams and OEMs. Write production-quality C++ and Golang, mentor engineers, translate requirements into products, and apply cryptographic, infrastructure, network, embedded, and hardware security practices.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Leads cryptographic engineering for secure space and ground communications systems. Responsibilities include crypto unit trade studies, hardware and firmware integration, interface definition, testing, verification, key management, lifecycle management, requirements traceability, and compliance with cybersecurity and NSA standards. The role supports PKMA, represents crypto engineering in technical reviews, collaborates with government and industry partners, and mentors junior engineers. The position is on-site in El Segundo, California, or Colorado Springs, Colorado, with approximately monthly travel.

Designs, implements, and improves the organization’s IAM program, including PAM, SSO, IGA, MFA, AD, and CIAM. Configures security tools, automates identity lifecycle processes, supports governance and compliance, investigates IAM-related incidents, and integrates cloud and enterprise identity systems. Leads complex IAM projects, mentors junior engineers, participates in on-call support, and collaborates with cybersecurity, IT, developers, and business stakeholders.

Provides pre-sales technical support for Vectra’s cybersecurity platform. Demonstrates products, advises customers and partners, resolves technical obstacles, supports deployments and technology reviews, and develops customer relationships alongside regional sales managers. The role requires expertise in security platforms, networking, cloud security, attacker progression, incident response, and security processes, along with strong communication skills and regional travel.

Provide pre-sales technical support for regional sales teams by demonstrating Vectra security solutions, addressing customer pain points, and solving technical roadblocks. Build technical relationships with customers and partners, support technology reviews and integrations, maintain expertise in security products and the threat landscape, and collaborate on deployments, designs, releases, and customer projects. Travel within the assigned region as needed.

Participate in a paid 10-week internship developing secure applications and systems, implementing security controls, identifying vulnerabilities, and creating security automation tools. Collaborate with engineering, security, and platform teams in Agile environments while gaining experience in secure software development, cybersecurity, design, development, and testing. Receive mentorship, coaching, and leadership development throughout the program.

Leads cybersecurity engineering for cloud integrations supporting a government AI test laboratory. Responsibilities include RMF compliance, security assessments, accreditation documentation, secure architecture advising, data governance, FedRAMP and DoD Impact Level compliance, API security, process development, mentoring, and curriculum support. Requires DoD cloud RMF experience, eMASS expertise, federal compliance knowledge, strong documentation skills, and Secret clearance eligibility. The role requires 10% travel and U.S. citizenship.

Conduct red-team vulnerability research supporting U.S. Navy cyber warfare engineering. Discover and analyze software and system vulnerabilities through static, dynamic, source-code, binary, and reverse engineering techniques. Develop proof-of-concept exploits, assess operational impact, triage crashes, support remediation, and document technical findings. The role requires Python, reverse-engineering tools, an active Top Secret/SCI clearance, and on-site work with less than 10% travel.