Top Security Engineer Jobs

Leads cybersecurity engineering for cloud integrations supporting a government AI test laboratory. Responsibilities include RMF compliance, security assessments, accreditation documentation, secure architecture advising, data governance, FedRAMP and DoD Impact Level compliance, API security, process development, mentoring, and curriculum support. Requires DoD cloud RMF experience, eMASS expertise, federal compliance knowledge, strong documentation skills, and Secret clearance eligibility. The role requires 10% travel and U.S. citizenship.

Lead offensive security and red team engagements across complex networks and applications, using adversarial tactics for vulnerability discovery, exploitation, persistence, evasion, and remediation validation. Develop testing strategies, payloads, tools, and C2 infrastructure; conduct source reviews and reverse engineering; document findings; and improve blue-team detection capabilities. Collaborate with stakeholders, communicate technical risks, and lead technically diverse cyber teams while supporting DoD cyber operations and maintaining required certifications and clearance.

Supports cloud and AI security guardrails through automation testing, security analysis, documentation, reporting, dashboards, configuration reviews, and process improvements. The intern researches emerging technologies, monitors security findings, troubleshoots automation solutions, and collaborates with cross-functional teams on security engineering initiatives.

Twelve-week summer internship supporting application, API, and AI security testing. Responsibilities include documenting findings, researching security technologies, improving metrics and dashboards, assisting with automation, preparing technical reports, and collaborating with security and technology teams. The role is open to students pursuing cybersecurity, information technology, computer science, or related degrees who graduate in December 2027 or later.

Administers, configures, maintains, and implements firewalls; troubleshoots firewall-related network connectivity issues; processes network changes and tickets; maintains technical documentation; follows security and change-management procedures; and supports customer and project requests. Requires strong experience with Cisco ASA and Firepower, VMware NSX, Palo Alto systems, TCP/IP routing, and operational firewall administration.

Build and operate cloud security tooling, automation, and controls across AWS and Azure. Secure IAM, networks, infrastructure-as-code, CI/CD, PKI, certificates, Kubernetes integrations, and secrets management with HashiCorp Vault. Lead security projects from design through implementation, troubleshoot multi-account cloud networks, conduct CSPM and threat detection work, and support incident response. Collaborate with engineering teams on secure architectures and leverage AI to accelerate development. The role is onsite in Denver or Long Beach, may include on-call duties and occasional travel, and requires obtaining and maintaining a security clearance.

Lead customer-facing security architecture for federal cloud, Kubernetes, GPU, and HPC environments. Design accredited and classified deployments, translate FedRAMP, RMF, DoD, CMMC, and STIG requirements into technical controls, and support ATO documentation and assessments. Lead proofs of concept, workload reviews, compliance automation, technical workshops, and roadmap development. Partner with federal customers, defense organizations, compliance teams, and engineering groups while supporting secure air-gapped environments and emerging AI security solutions.

Designs, implements, administers, and supports enterprise cybersecurity infrastructure and network security architecture. Responsibilities include managing Palo Alto and Fortinet firewalls, VPNs, vulnerability platforms, security monitoring, incident response, network segmentation, and secure network connectivity. The role supports compliance with FFIEC, GLBA, and NIST requirements, participates in audits and risk assessments, maintains documentation, and collaborates with IT, risk, compliance, and business stakeholders. This is a hybrid position requiring onsite work four days per week.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Develops, deploys, configures, and maintains network security tools across on-premise and cloud environments supporting NGA networks. Responsibilities include managing IDS/IPS, NDR, packet capture, email security, and network visibility platforms; troubleshooting network protocols; maintaining architectures and inventories; evaluating emerging technologies; recommending upgrades; and briefing leadership. Requires active TS/SCI clearance, DoD cybersecurity certifications, and the ability to obtain a CI polygraph.

Designs, implements, administers, and continuously improves enterprise cybersecurity capabilities. Responsibilities include threat and vulnerability identification, complex incident investigation and response, security architecture, security controls, risk assessments, compliance audits, policy development, security application management, automation, reporting, and awareness training. The role supports HIPAA, PCI, NIST, and other standards, leads security projects, mentors junior staff, and participates in a 24/7 on-call rotation.

Designs, integrates, operates, and maintains security monitoring, auditing, logging, alerting, and telemetry capabilities across F5’s distributed cloud platform. Responsibilities include integrating SIEM and EDR tools, tuning alerts, improving incident detection and forensic readiness, and embedding DevSecOps controls such as vulnerability scanning, compliance checks, secret management, and threat detection into CI/CD pipelines. The role also uses AI-assisted security tooling and may require on-call and weekend work.

Designs and enhances monitoring, detection, observability, logging, and incident response capabilities for F5’s distributed cloud platform. The role integrates SIEM, SOAR, EDR/XDR, APM, and cloud security tools; improves telemetry quality and vulnerability remediation; maintains SIEM deployments; automates security and compliance through Infrastructure as Code; and supports incident response through 24/7 on-call rotations.

Designs, deploys, maintains, and improves enterprise endpoint security solutions. Responsibilities include managing endpoint protection platforms, threat analysis, security event triage, vulnerability remediation, system hardening, compliance reporting, policy development, technology evaluation, project leadership, documentation, and mentoring junior staff. The role collaborates with Security Operations, IT Service teams, leadership, and vendors to strengthen protection against cyber threats.

Designs, deploys, maintains, and improves enterprise endpoint security platforms and controls. Responsibilities include threat analysis, security event triage, endpoint infrastructure tuning, vulnerability management, policy enforcement, compliance reporting, technical documentation, and technology evaluations. The role supports security projects, mentors junior staff, collaborates with IT and leadership, and helps strengthen protection against emerging cyber threats across the enterprise.

Recognized as a senior security expert, this role independently resolves complex cybersecurity challenges, defines methods for new assignments, provides strategic direction, and collaborates across teams. The engineer leads high-impact security projects, develops innovative solutions aligned with business needs, and drives enterprise-wide improvements to security practices and operational efficiency.

Build and improve security across applications, cloud infrastructure, internal systems, and products. Responsibilities include identifying and remediating risks, developing security tooling and automation, conducting architecture reviews and threat modeling, integrating security into the software development lifecycle, strengthening identity and access controls, and developing monitoring, vulnerability management, detection, and incident response capabilities.

Performs vulnerability scanning, STIG compliance assessments, security control analysis, and remediation coordination. Maintains Tenable.sc and Nessus, integrates security data with Splunk, develops risk dashboards and reports, supports RMF activities and audits, and validates system hardening. Provides security operations support in a 24/7 environment while troubleshooting scan issues and collaborating with administrators and security teams.

Leads cybersecurity engineering and DoD Risk Management Framework activities for Navy information systems. Develops RMF artifacts, conducts vulnerability and risk assessments, applies STIGs and SRGs, supports A&A and ATO processes, performs continuous monitoring and compliance testing, and coordinates remediation. Advises government stakeholders, prepares technical documentation and CDRL deliverables, and mentors junior ISSE personnel.

Provides cloud and on-premise security engineering, secure baseline management, monitoring, logging, compliance, documentation, cost optimization, incident reporting, and audit support for U.S. Customs and Border Protection environments. Administers and secures hybrid-cloud tools, develops continuous monitoring capabilities, maintains federal compliance, and evaluates security solutions. Requires AWS certifications, five years of related experience, and the ability to obtain a government clearance if needed.

Leads security engineering across DoD and Intelligence Community systems, overseeing security teams and Risk Management Framework processes through system ATOs. Provides technical guidance on system hardening, patching, incident response, vulnerability management, security policies, and security controls. Serves as Security Engineering Product Owner, coordinates with government security stakeholders, manages priorities and deliverables, and guides implementation across cloud and on-premises environments.

Applies security best practices to optimize and protect systems, analyzes and resolves security challenges, partners with internal teams on security initiatives, and collaborates with engineers to improve security processes. The role independently addresses security needs, contributes to cross-functional projects, influences team effectiveness, and aligns security solutions with business objectives.

Own and mature the application security program, including secure development practices, tooling, automation, vulnerability management, and detection pipelines. Partner with engineering on secure AI-driven workflows, data privacy, and AI-specific vulnerabilities. Lead incident response as primary incident commander, support cloud security, and guide security audits, certifications, and customer requirements in a regulated fintech environment.

Own security across application, cloud, and network layers. Conduct threat assessments and design reviews, build product protections, author security documentation, coordinate testing and compliance, manage customer security reviews, and lead incident preparedness and response. Maintain cloud access audits, automate security checks in deployment pipelines, and establish policies for secrets, outbound data, and device management. The role requires hands-on security engineering, coding, risk communication, and independent work in an on-site startup environment.

Conduct red-team assessments of formally verified systems, evaluating proofs, specifications, threat models, and trusted computing bases. Build AI-driven vulnerability discovery, triage, and exploit-generation tooling; identify and demonstrate exploitable weaknesses in software and infrastructure. Produce rigorous security reports, publish methodologies, collaborate with domain experts and third parties, and deliver engagements on fixed schedules.