Top Security Engineer Jobs

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Supports secure-by-design practices across medical device software platforms. Responsibilities include threat modeling, architecture reviews, vulnerability assessments, security testing, patch release processes, risk assessments, and integrating cybersecurity into CI/CD and DevSecOps workflows. The role partners with software engineering, quality, regulatory, and risk teams to maintain product security and compliance throughout the software development lifecycle.

Design, implement, and improve security controls for operational technology (OT) networks in datacenter environments. Identify and remediate risks, create inventories and risk registers, coordinate penetration testing and vulnerability mitigation, embed security into OT systems, develop recovery and response playbooks, and present technical findings to stakeholders while partnering with engineering and third parties to reduce risk.

Design, build, deploy, and operate scalable backend security services using REST and/or gRPC APIs. Define service architecture, data models, integrations, and reliability practices while supporting observability, incident response, testing, and continuous improvement. Integrate identity providers, key-management services, HSMs, SIEMs, and access-control systems across customer environments. Collaborate with product, security, infrastructure, and customers, contribute to technical direction, and mentor engineers.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Designs, engineers, and maintains SIEM data collection and security monitoring infrastructure. Develops detection use cases, dashboards, alerts, reporting metrics, and log onboarding strategies. Integrates threat intelligence and SOAR technologies, supports incident response and threat hunting, troubleshoots security systems, and escalates complex investigations. Collaborates with SOC analysts, incident response teams, executives, and cross-functional stakeholders to improve detection, automation, and enterprise security operations.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Designs, implements, integrates, and supports enterprise identity and access management across on-premises, cloud, and hybrid environments. Responsibilities include identity governance, authentication, authorization, privileged access, lifecycle automation, application integrations, scripting, infrastructure as code, security controls, architecture reviews, vulnerability remediation, monitoring, incident response, and regulatory compliance. Collaborates with security, infrastructure, development, cloud, compliance, and business teams while providing technical guidance and mentoring.

Design and implement secure AWS architectures, manage IAM and AWS security services (GuardDuty, Security Hub, Inspector, Macie, WAF), build IaC security controls (Terraform, CDK Python), perform threat modeling and vulnerability remediation, implement logging/monitoring (CloudTrail, CloudWatch, SIEM), support incident response, automate compliance checks, and collaborate with DevOps to embed security in CI/CD pipelines.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Implement, operate, automate, and improve Cargill's global SASE/SSE services. Configure SWG, ZTNA, CASB, DLP, and threat protection; migrate legacy remote-access solutions to cloud-delivered security; troubleshoot, maintain, monitor performance, support disaster recovery, and develop automation and documentation.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include Terraform and GitOps automation, endpoint lifecycle security, AI and MCP governance, third-party risk assessments, threat modeling, detection and response collaboration, and security control assessments. The role requires strong Python or Go skills, endpoint and identity expertise, macOS security experience, and the ability to communicate and guide distributed engineering teams.

Designs and improves enterprise security across endpoints, SaaS, identity, infrastructure-as-code, AI applications, and corporate networks. Responsibilities include modernizing endpoint management, automating secure deployment and patching, managing Terraform and GitOps workflows, governing AI and MCP security, assessing third-party risks, supporting detection and response, threat modeling, and guiding engineering teams toward stronger security practices.

Secure Compass’s enterprise endpoints, SaaS applications, identity systems, office networks, and AI tooling. The role modernizes endpoint management, builds Terraform and GitOps automation, manages identity and security controls, evaluates third-party and AI risks, supports detection and response, conducts threat modeling, and guides engineering teams toward stronger security practices.

Secure Compass’s enterprise technology environment across endpoints, SaaS, identity, networks, AI applications, and infrastructure. The role modernizes endpoint management, develops Terraform and GitOps automation, manages AI and MCP security controls, assesses third-party risk, supports detection and response, and conducts threat modeling and security assessments. The engineer also guides development teams, improves compliance and auditability, and helps protect a distributed workforce.

Lead the design and implementation of cloud-based identity governance and administration capabilities. Shape enterprise identity engineering strategy across human and non-human identities, support governance, privileged access, and federation platforms, and reduce security risks through access analysis, segregation of duties, and least-privilege enforcement. Automate identity processes integrated with HRIS systems and guide recommendations for improving governance and access controls.

Detect, investigate, and prevent threats across corporate IT by performing incident response, digital forensics, threat hunting, designing security controls and alerts, and deploying and operating security tooling across identity, endpoints, networks and cloud.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Leads cryptographic engineering for space and ground satellite communications systems supporting the U.S. Space Force. Responsibilities include crypto unit trade studies, technical design, hardware and firmware integration, testing and verification, secure key management, requirements traceability, lifecycle management, and compliance with cybersecurity standards. The role interfaces with government and industry partners, contributes to design reviews, mentors engineers, and requires an active TS/SCI clearance with extensive systems engineering and cryptography experience.

Leads security operations covering threat monitoring, detection, incident response, vulnerability management, access management, compliance, reporting, and security awareness. Develops security controls, documentation, dashboards, executive reports, training content, and phishing campaigns. Investigates complex incidents, performs root-cause analysis, drives remediation, advises IT teams on secure architecture, and mentors junior engineers. Requires advanced cybersecurity certifications, strong Microsoft and network security expertise, and at least six years of incident response and remediation experience.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

Supports enterprise network security engineering initiatives, including Cisco ISE and Cisco SNA deployments, access control, authentication, threat visibility, testing, troubleshooting, and system implementations. The role develops security requirements, analyzes network behavior, manages deployment processes, identifies risks, and partners with technical and business stakeholders across a global enterprise network.

Designs, deploys, operates, and maintains endpoint security solutions across workstations, servers, VDI, and mobile devices. Responsibilities include managing CrowdStrike Falcon, Symantec DLP, Skyhigh, and Zscaler technologies; monitoring telemetry and sensor health; troubleshooting endpoint issues; executing upgrades and migrations; supporting SIEM/SOAR integrations, malware coverage, automation, documentation, and security roadmap initiatives.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.