Top Security Engineer Jobs

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.

Support cyber defense operations as a Tier-2 engineer: triage and resolve escalated tickets, design detections and automations, tune security platforms, co-lead threat hunting and exposure reduction, produce metrics/reports, mentor analysts, and use AI-assisted workflows to improve investigations and remediation.

Build and maintain scalable security platforms, automation, and tooling to protect data across SaaS, cloud, endpoints, collaboration tools, AI systems, and data warehouses. Develop data discovery, classification, governance, DLP, DSPM/SSPM, insider-risk, and access controls; leverage AI and automation to improve detection, prevention, and incident workflows while partnering with cross-functional teams.

Build, maintain, and troubleshoot SOAR playbooks, Python automations, custom API integrations and the incident/case management tooling. Partner with SOC analysts to convert manual workflows into reliable, documented, AI-assisted automations and evaluate new security tools for integration.

Lead technical design and execution of Identity and Access Management strategies. Collaborate with product and engineering teams to build scalable, secure authentication and authorization systems, own solution quality and performance, share best practices, provide on-call/operational support, and influence security controls and detection solutions.

Provide cybersecurity engineering and architecture for mission and enterprise systems, translate NIST/CNSS controls into secure designs, troubleshoot Linux/Windows servers and endpoints, Cisco network devices, and enterprise storage, implement continuous monitoring (vulnerability scanning, SIEM), perform technical security assessments using Tenable and DISA STIGs, prioritize risk, and lead remediation efforts to maintain compliance and mission assurance.

Lead network security architecture and firewall projects, implement and operationalize FireMon policy optimization, provide L2-L3 support and 24x7 response for priority incidents, handle work orders, change requests, and customer-facing consulting engagements.

Design and implement cloud security controls across multi-cloud environments, harden Kubernetes clusters, enforce IAM and least-privilege, manage IaC security, run CSPM and container scanning, automate compliance evidence, and monitor runtime container security.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Lead incident response program design and execution, run tabletop exercises, own full IR lifecycle (detection to post-incident review), maintain IR plans/playbooks, coordinate with SOC/threat intel/engineering, support digital forensics, and apply cloud and AI security practices to improve detection and response.

Design, implement, and operate enterprise encryption, tokenization, and key management platforms. Lead hands‑on development of production services, ensure high availability, observability, disaster recovery, and compliance alignment. Influence architecture, mentor engineers, improve performance and developer experience, and partner with security, compliance, and application teams to integrate secure data protection solutions.

Design and consult on network security architecture, lead security implementations, provide L2-L3 operational support, handle work orders/change requests/incidents, perform on-site deployments, and respond 24x7 to P1/P2 incidents.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Design and build security features across product, cloud, and infrastructure. Anticipate vulnerabilities, implement secure defaults, enable developer-friendly security, and ship robust protections for code, agents, and tooling.

Design, implement, and maintain cloud security controls across multi-cloud environments (AWS, Azure, GCP, IBM Cloud). Integrate security into IaC, manage IAM and DLP, configure monitoring/CSPM/CNAPP, lead cloud incident response, automate with scripting/serverless, enforce compliance and OS/container hardening, and coordinate remediation with platform and application teams.

Automate, harden, and deploy security tooling across hybrid IT/OT environments. Build and maintain IaC, automate identity and access, embed security into CI/CD, implement Zero Trust segmentation, manage secure software supply chain, and collaborate with platform and security teams to remediate vulnerabilities and scale secure deployments.

Hands-on senior security engineer role building and operating cryptographic, key-management, and signing services for Citi's digital assets platform. Develop Java backend services, integrate and operate HSMs, implement MPC/TSS schemes, enforce crypto best practices, embed CI/CD security tooling, and lead threat modeling and incident escalation.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Lead Splunk engineering and administration for Splunk Cloud, develop and tune advanced detections and dashboards, automate log onboarding and operational workflows, troubleshoot ingestion and platform issues, support Syslog-NG, collaborate with security, infra, and app teams, and participate in on-call rotation for incident escalation.

Perform automated and manual penetration tests on applications and infrastructure, assess security controls and network devices, document findings, and support remediation with development teams following industry best practices and frameworks.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Lead cloud security engineering by designing and implementing automated, scalable controls and guardrails for cloud infrastructure. Partner with engineering to deploy security enhancements, investigate incidents, assess third-party integrations and emerging AI tools, and perform threat modeling and architectural security reviews.

Design, build, and operate Linero's secure, compliant cloud platform. Own networking, compute, storage, access controls, CI/CD, IaC, observability, and incident response. Embed FedRAMP requirements, run vulnerability management and audits, and establish monitoring, on-call, and operational runbooks to support product teams and enterprise customers.