Top Security Engineer Jobs

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Design and analyze ground support equipment, tooling, fixtures, and custom machines for space vehicle integration and test. Perform structural analysis (FEM and hand calculations), create CAD models and drawings (apply GD&T and ASME Y14.5), support vendor selection, fabrication, installation, testing, and project scheduling/budget inputs.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Perform automated and manual application security analysis (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers with remediation and secure design, conduct threat modeling, document findings, and stay current on vulnerabilities and mitigation strategies.

Designs, implements, and operates enterprise security solutions; monitors and responds to security events; leads vulnerability assessments; creates security policies and procedures; ensures regulatory/HIPAA compliance; mentors IT security staff and coordinates with vendors and compliance teams to improve security posture.

Administer, integrate, automate, and optimize enterprise security tools. Develop APIs, scripts, and automation for tool interoperability. Design vulnerability scanning strategies and SIEM data models. Build dashboards and alerts for SOC/CDM stakeholders, aggregate logs and asset data, support audit readiness, and use CI/CD, containers, and cloud-native automation to improve security engineering workflows.

Implement and integrate Black Duck application security products for enterprise customers on the West Coast. Drive customer onboarding, training, solution design, custom integrations into SDLC/DevOps, and own delivery from project initiation to completion while advising on secure development practices.

Define architecture and lead development of an AWS-hosted, secure web portal. Write high-performance secure code, lead DevSecOps and database integrations, conduct code reviews and query optimization, ensure DHS/CBP security compliance, mentor developers, and translate product requirements into technical designs.

Support security and architecture team to design, accredit, and maintain systems handling extremely sensitive data across multiple network fabrics and cloud/on‑prem environments. Lead A&A activities, incident response, POA&M tracking, cloud cost optimization, vulnerability focal duties, technical reviews, and support adoption of security tools and encryption solutions.

Lead design, deploy, operate, and maintain endpoint security solutions (CrowdStrike, Skyhigh, Symantec DLP, Zscaler). Monitor telemetry into SIEM/SOAR, perform upgrades/migrations, troubleshoot detections, drive automation, evaluation of new tech, and maintain documentation to strengthen endpoint security posture.

Design, implement, and maintain cloud security controls and Policy/IaC (Terraform) for Azure/AWS. Use CSPM tooling (Wiz, Defender), perform security assessments, incident response, and collaborate with security champions to enforce compliance (CIS, NIST 800-53).

Design, implement, and support network defense systems across the sponsor's organization. Work on cybersecurity systems and projects responsible for detection, protection, and incident response. Position requires minimum three years relevant experience, a Bachelor's degree, and an active TS/SCI with full-scope polygraph. Located in Herndon, VA with minimal travel.

Provide IT security engineering and integration services, including malicious code detection, intrusion detection, and development/integration of information security tools for government customers. Work requires active TS/SCI with FS poly and a bachelor’s degree.

Design, implement, and maintain a cross-platform endpoint security agent (Windows, macOS, Linux) using Go and JavaScript. Build low-level system automation, telemetry collection, secure agent-cloud communication, real-time threat detection, update mechanisms, and monitoring tools. Optimize performance, ensure multi-OS compatibility, and collaborate with security teams on detection rules and compliance checks.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Design and implement security and privacy improvements across Tailscales codebase. Audit features for vulnerabilities, perform threat modeling and security analysis, drive remediation, and spend at least half your time writing code to build security features, defenses, and tooling.

Lead multi-cloud (AWS, GCP, Azure) migration and platform modernization. Architect IaC with Terraform/Terragrunt, automate with Python/Bash, enable containers (Docker/Kubernetes), embed SecOps and FinOps, and provide principal-level technical leadership andOperational excellence.

Lead assessments, design secure infrastructure and controls, implement scalable security solutions, operate and administer enterprise security tools, drive vulnerability management, incident response, and risk analysis, and report security posture to stakeholders and senior leadership.

Hands-on cloud security engineer responsible for vulnerability discovery, triage, and remediation across AWS, Azure, and GCP. Operate and tune security tooling (CSPM, scanners, WAF), perform security architecture reviews, support Secure SDLC, automate validation and tracking, and collaborate with platform and application teams to improve vulnerability and patch management outcomes.

Serve as a trusted security liaison embedding security-by-design into product and business lifecycles. Lead early security discussions, translate business objectives into risk-oriented priorities, maintain risk registers, track metrics, and coordinate cross-functional mitigation to enable innovation while managing risk.

Hands-on cloud security engineer responsible for reviewing cloud and application designs, operating and tuning security tooling, triaging and driving remediation of cloud security findings, automating controls, supporting vulnerability management and certificate lifecycle, and collaborating with engineering and platform teams to improve cloud security posture across AWS, Azure, and GCP.

Build full-stack features for Google Drive and OAuth surfaces, design and ship LLM-powered agentic workflows for detection, investigation, and remediation, integrate with Google Workspace APIs at scale, partner with product and design, collaborate across teams, and contribute through mentorship, code review, and ownership from design to production.

Lead and shape Outtakes security function as the second security hire: secure cloud infrastructure (AWS, EKS, Vercel, Supabase), build detection & response (SIEM/SOAR), design secrets and access management, implement secure-by-default patterns, and perform hands-on incident response while partnering with engineering to balance security and velocity.