Top Security Engineer Jobs

Lead cloud security engineering by designing and implementing automated, scalable controls and guardrails for cloud infrastructure. Partner with engineering to deploy security enhancements, investigate incidents, assess third-party integrations and emerging AI tools, and perform threat modeling and architectural security reviews.

Design, build, and operate Linero's secure, compliant cloud platform. Own networking, compute, storage, access controls, CI/CD, IaC, observability, and incident response. Embed FedRAMP requirements, run vulnerability management and audits, and establish monitoring, on-call, and operational runbooks to support product teams and enterprise customers.

Design and implement security architectures and deployment strategies, operate and tune security tools (firewalls, NIDS/HIDS, SIEM, endpoint protection), improve SOC workflows, gather requirements, recommend compliant solutions (PCI/HIPAA/SOX), support customers and C-level stakeholders, write SOWs/proposals, and provide technical leadership.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.

Design and develop security systems for embassies/consulates worldwide, including site surveys, conceptual and full system designs, material take-offs, and installation support.

Perform STPA-Sec analyses and MBSE work to identify security, safety, and availability issues. Decompose systems, build control structures, analyze threats/vulnerabilities via CAD and schematics, generate structured requirements and mitigations, support program milestones, risk identification and mitigation, and fulfill Statement of Work obligations for the Sentinel MDT.

Design and build security architectures for a global phased-array ground station network. Implement controls across RF protocols to cloud (Kubernetes), deploy SIEM and log pipelines, lead incident response and threat hunting, liaison with government customers, and automate compliance (FedRAMP, NIST 800-171) to enable secure, scalable deployments.

Implement and lead Cortex XSOAR security automation and incident response for customers. Develop playbooks, integrate with security technologies (SIEM, IDS/IPS, endpoints), troubleshoot networks, communicate with stakeholders, and lead teams to operationalize security automation.

Perform TEMPEST/EMSEC testing and signal analysis on cryptographic and COTS equipment, record and report results, identify and mitigate emanation vulnerabilities, work with vendors and project teams to verify test requirements (CTTA/NSITSSAM), and validate IASRD application while supporting onsite customer mission needs.

Design and build backend services and secure data pipelines to protect customer data. Implement token issuance, authentication, anonymization, data retention/deletion (CCPA/GDPR), and monitoring/auditing. Collaborate with access management, infrastructure, and data teams to enforce least-privilege controls and enable secure AI-driven product capabilities.

Lead configuration, integration, tuning, and optimization of enterprise security platforms across endpoint, network, email, cloud, and identity. Perform advanced incident analysis and containment, drive post-incident hardening, manage telemetry/logging and vulnerability scanning, support penetration testing, recommend platform improvements, maintain security architecture documentation, and participate in a 24/7 on-call rotation.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Lead security architecture design and implementations, provide L2-L3 support and 24x7 incident response, manage work orders/change requests, perform on-site technical implementations and client consulting, and ensure delivery of enterprise security solutions.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Build and ship security-first systems across backend services, APIs, and infrastructure. Own identity, access control, auditability, and data lifecycle primitives. Secure agentic AI by enforcing runtime policies, sandboxing agents, and preventing data leakage. Automate security workflows and developer tooling (CI/CD checks, schema validation, runtime monitoring).

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Design and develop secure cloud and embedded networking software, lead architecture and implementation of end-to-end solutions, evaluate and integrate new technologies, mentor engineers, ensure compliance with development standards, and collaborate on deployment, monitoring, and support for cloud engagements.

Lead design, deployment, and operation of endpoint, network, cloud, and identity security. Run vulnerability management, SIEM detection engineering, incident response, and compliance (NIST 800-171/CMMC). Harden IAM, manage cloud security in AWS, perform security assessments, deliver awareness training, and maintain DLP and security policies.

Design and develop technical security systems for embassies and consulates including site surveys, conceptual design, complete design packages, MTOs, and support for security contingencies. Perform field work and OCONUS travel (~15%+), and meet physical and clearance requirements for deployment.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Manage and configure SAP security and GRC controls, monitor critical access, design SoD matrices and mitigating controls, support user provisioning, troubleshoot security issues, implement continuous monitoring and audit controls, and manage security changes across the SAP landscape.

Operate and enhance application security tooling, author automation (Python), run and tune authenticated/unauthenticated DAST scans for web apps/APIs, validate and triage vulnerabilities using OWASP standards, track and verify remediation, ensure compliance with HIPAA/SOC II/NIST/FedRAMP, and build reporting solutions for leadership.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Monitor and triage security events across SIEM, M365 Defender, AWS and enterprise tools; investigate incidents, perform threat hunting, correlate telemetry, produce incident reports, recommend containment and remediation, collaborate with engineering and risk teams, maintain SLAs, and participate in SOC on-call rotation.

Provide Level III administration, troubleshooting, and recovery for a large Global Active Directory environment. Configure and diagnose domain infrastructure (DNS, DHCP, ADLDS, ADFS, FIM Sync), Windows servers, RADIUS/NPS, Office365/Azure identity integration, and federation protocols. Support M&A AD activities, perform outage communications, rotate on-call shifts in a 24x7 operations center, and apply remediation procedures for hardware/software failures.