Top Security Engineer Jobs

Lead design, implementation, and operation of DSPM and DLP solutions to discover, classify, and protect sensitive data across cloud, SaaS, and enterprise systems. Partner with security and infrastructure teams to reduce exposure, enforce access controls, support audits (FINRA/SEC), develop standards and runbooks, and advise leadership on data security risks and roadmap improvements.

Lead design and delivery of secure storage software across OS, kernel drivers, microservices and containerized environments. Act as security consultant, manage vulnerability backlog and remediation, influence architecture and compliance (FIPS, Common Criteria, DISA STIG), mentor engineers, and evaluate vendors and technologies to ensure product security and certification readiness.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Provide pre-sales technical support and technical account management for Vectra's AI-driven threat detection platform. Lead technical discovery, demos, proofs-of-concept, and solution design; build strong customer and partner relationships; collaborate cross-functionally on deployments, integrations, and product feedback; maintain deep knowledge of security landscape, competitors, and product capabilities. Travel within region as needed.

Senior Tier-3 NOC engineer serving as final technical escalation for major network incidents. Leads RCA, incident recovery, and architecture guidance across multi-vendor environments. Expert in Palo Alto and Zscaler security platforms, packet analysis, automation/IaC, and enterprise routing/segmentation. Mentors junior staff, coordinates vendor escalations, and shapes operational standards to improve stability and observability.

Provide Tier 3 network security engineering for INSCOM: install, configure, and harden network and security infrastructure; troubleshoot switching, routing, VPNs, and Next-Gen firewalls; manage ACLs and firewall policies; configure F5 BIG-IP (LTM/ASM); perform packet analysis; apply STIGs/NIST hardening; collaborate across teams and support enterprise SDLC.

Lead design and implementation of embedded device security across firmware, OS, and cloud interfaces. Perform threat modeling, architect hardware-backed identity and secure key management, implement TrustZone/TEE/kernel solutions, integrate biometric sensor security, and apply secure SDLC and vulnerability management practices across multi-disciplinary teams.

Provide survivability and vulnerability research, security assessments, and information assurance analysis to inform USCENTCOM requirements. Develop transformational concepts, perform technical and programmatic analyses, and support Force Protection, campaign plans, and theater strategy integration.

Lead cloud and infrastructure security and detection engineering: deploy SIEM, author MITRE-mapped detections, build cloud security posture and IaC gates, own incident response playbooks and SOC 2 Type II operational evidence, and drive vulnerability remediation and security reporting.

Maintain and enforce cloud security standards across AWS, Azure, and GCP. Ensure cloud logging is ingested into centralized SIEM, operate CSPM tools to detect and drive remediation of misconfigurations, support incident response and risk assessments, and collaborate with engineering and security teams to enforce governance and improve cloud security posture.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Design, implement, and operate public-facing backend APIs and services in Go; author design and architecture docs; collaborate with frontend, product, and security teams; ensure stability, performance, and scalability; mentor engineers; use AI coding agents in daily work; participate in on-call rotation and support CI/CD-driven deployments.

Develop and maintain Java/Java EE applications with a strong focus on security: SSL, cryptography, authentication/authorization (LDAP, SSO, SAML, OAuth, x509, WS-Security), PCI compliance, configurable data security, scripting, audits/compliance across projects, independent problem-solving, and managing parallel tasks.

Protect corporate systems, networks, software, and data by implementing perimeter defenses, performing incident response and malware analysis, analyzing IDS/IPS/firewall/network flow logs, using SIEM and IDS consoles, tracking malicious IP activity, producing security reports, and troubleshooting security incidents.

Assess systems, applications, and activities for vulnerabilities; develop and execute risk mitigation plans; align security resources to risks; liaise with law enforcement and industry partners; protect personnel data, IP, networks, and operations.

Protect global systems, networks, and data by designing and operating perimeter defenses, investigating security incidents, analyzing security logs (IDS/IPS, firewalls, SIEM, AV), performing malware analysis, tracking malicious IP activity, and producing security reports for management and auditors.

Perform vulnerability assessments and large-data analysis, define and implement remediation plans, conduct web application and malware analysis, analyze security logs (IDS/IPS, firewalls, network flow, AV) using SIEM, produce and automate daily security reports and feeds, create product and support documentation, troubleshoot security issues, and communicate with stakeholders.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Lead Security Mobile Engineer serves as product security point of contact, embedding security and privacy into the SDLC for mobile apps, SDKs, APIs, cloud, and IoT devices. Responsibilities include architecture reviews, threat modeling, secure coding guidance, testing/ethical hacking, incident response, mentoring engineers, and validating third-party installations. Role requires cross-functional collaboration to ensure scalable, high-performing, and secure product lifecycles. Approximately 15% travel.

Design, implement, and operate AWS cloud security and infrastructure: least-privilege IAM, network segmentation, multi-account governance, detection and response, vulnerability management, HIPAA compliance, and embedding security into the development lifecycle. Build automated remediation pipelines, maintain GitHub CI/CD automation, validate SIEM logging, and produce prioritized gap analyses for active care programs.

Own cloud and network security, identity and PKI systems, and compliance for cloud and hybrid environments. Design secure cloud networking, manage NGFW/IDS/IPS, implement IAM/PAM/MFA, operate PKI and cryptography, maintain SIEM/EDR, and implement controls for CMMC L2, FedRAMP, and NIST 800-171. Support audits, documentation, risk assessments, and automation for compliance evidence and hardening standards.

Lead design, implementation, and oversight of security policies, access controls, firewalls, SIEM, IDS/IPS, and compliance (SOX/PCI). Recommend security products, manage implementations and large projects, mentor engineers, perform audits, analyze access and vulnerabilities, and maintain incident response, encryption, and disaster recovery processes.

Build and ship security features for an AI control plane: enforce enterprise policies, improve risk policy systems (deterministic and LLM-judged), integrate identity providers, and harden platform security. Collaborate across product and engineering, participate in on-call rotations, and own features from design through production and support.

Perform thorough WordPress malware cleanup, remove injected scripts, resolve Google Search Console penalties, implement firewall and malware scanning protections, optimize PHP and databases, and accelerate page load speeds while documenting remediation and communicating clear project updates.