Top Security Engineer Jobs

Lead enterprise endpoint security deployments, integrations, upgrades, platform lifecycle management, automation, monitoring, incident response, vulnerability remediation, and operational resilience. Act as a subject matter expert and technical leader, developing scalable endpoint security solutions, guiding architecture, partnering with stakeholders, and supporting strategy, governance, and service ownership across a large enterprise.

Designs and operates identity and access management systems across human, service, workload, and AI identities. Owns lifecycle automation, data-driven access models, time-bound entitlements, identity-as-code, cloud IAM, and AI-powered access reviews. Partners with Engineering, IT, and Compliance to reduce unnecessary access, support audits, and respond to identity-related incidents. Requires strong software engineering skills and hands-on experience with Okta, enterprise SaaS provisioning, AWS IAM, and AI or LLM tooling.

Reviews and assesses RMF authorization documentation for classified information systems, including security plans, control matrices, monitoring plans, and incident response artifacts. Evaluates technical compliance with information assurance directives, performs security design and threat assessments, documents POA&Ms and risk reports, conducts site assessments, and supports incident response activities. The role requires experience with NIST controls, Windows or Linux, virtualization or cloud environments, Splunk, and DoD security compliance.

Build and evolve mission-critical backend infrastructure and commercialization tools for Waymo’s autonomous vehicle fleet. Collaborate with Product, Security, and engineering teams to develop secure systems, including vehicle configuration, secure parts transactions, key provisioning, and security infrastructure. Apply backend engineering, microservices, cryptography, PKI, authentication, encryption, and access-control expertise to solve business-critical problems.

Owns Federal release-gate security evidence, Continuous Monitoring automation, FedRAMP boundary coordination, vulnerability remediation, and compliance with STIG, SCAP, FIPS, NIST, and other Federal requirements. Manages hardened container registries, supports defense and intelligence projects, triages customer-reported vulnerabilities, and collaborates with product, engineering, compliance, and operations teams to implement security controls throughout the deployment lifecycle.

Serve as the senior security advisor embedded with product and engineering teams to design security into features, influence senior stakeholders, mentor junior staff, coordinate with security and privacy (DPO) teams, and produce customer trust materials and questionnaire knowledge bases while staying current on AI-related risks.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.

Leads application security engineering across web, API, mobile, cloud-native, container, and CI/CD environments. Designs automated security testing and vulnerability-management workflows, performs threat modeling and manual assessments, validates exploitability, and provides remediation guidance. Partners with engineering and cloud teams to embed secure development practices, applies AI-assisted vulnerability analysis, supports cybersecurity incidents, mentors engineers, and drives application security strategy.

Architect, build, and support highly available enterprise edge infrastructure and security controls. The role includes threat hunting, mitigation, monitoring, DNS and load balancing, infrastructure automation, security standards, observability, technical documentation, technology evaluations, and cross-functional delivery. The engineer participates in an on-call rotation and helps shape the organization’s edge security strategy and roadmap.

Develops firmware verification plans and automated Python tests for NVMe, enterprise SSD, security protocols, and customer specifications. Performs end-to-end testing across simulations, FPGA prototypes, and SSD hardware; investigates regression failures and resolves complex firmware defects. Collaborates with firmware engineers through code reviews to improve architecture and test coverage. Owns test reporting and communicates technical issues, solutions, and mitigation plans to engineering and management.

Designs and scales enterprise security across IAM, corporate SaaS, endpoints, and infrastructure. Responsibilities include automating joiner-mover-leaver workflows, access reviews, zero-trust controls, SaaS security posture management, endpoint protections, vendor risk assessments, and AI-powered security automation. The role partners with IT, Legal, HR, and Compliance on security frameworks, documentation, audits, and strategic roadmap initiatives.

Defines and implements cloud infrastructure and application security standards, integrates security into DevOps and CI/CD, develops security automation, assesses vulnerabilities and risks, performs penetration testing, guides cloud architecture, and supports secure coding and configuration practices across cloud environments.

The Cloud Security Engineer develops and implements cloud infrastructure and application security standards, integrates security into DevOps and CI/CD processes, automates secure provisioning and deployment, assesses vulnerabilities and risks, performs penetration testing, guides cloud architecture, and maintains secure coding and configuration practices. The role requires experience with public cloud platforms, containers, networking, software-defined networking, automation, Linux, and security tools. It follows a hybrid schedule with four days in-office in Wyoming, MI or Atlanta, GA.

Secure the product throughout its lifecycle by partnering with developers on security design and architecture reviews, threat modeling, penetration testing, secure code reviews, and security standards. Operate SAST, DAST, dependency, and supply-chain scanning tools; triage findings and guide remediation. Contribute security evidence to SOC 2 and ISO 27001 compliance efforts while improving developer security practices.

Develops Python scripts, automations, integrations, dashboards, reports, and documentation to improve incident response, vulnerability management, security monitoring, and security operations. Supports security engineering initiatives, learns DevOps and agile practices, and collaborates with senior engineers and global teams. The role requires programming ability, version-control familiarity, cybersecurity knowledge, and strong analytical and communication skills.

Design and operationalize an enterprise API security program: implement runtime protections, embed security into CI/CD, provide secure API design guidance, build telemetry-driven analytics, define governance, support audit readiness, and partner with engineering to reduce API risk at scale.

Designs, implements, and manages AWS cloud security policies, architecture, and technologies. The role oversees firewalls, DLP, vulnerability scanning, monitoring, logging, IAM, incident response, compliance, and remediation. It provides security guidance for AWS solutions, supports migrations of mission-critical applications, researches new technologies, documents standards, presents to varied audiences, and mentors less experienced engineers. The position requires strong AWS expertise, infrastructure-as-code proficiency, knowledge of regulated healthcare environments, and experience securing highly available cloud and serverless architectures.

Reviews security system estimates, designs, submittals, installations, testing, and documentation for technical accuracy, compliance, and quality. Conducts peer reviews, onsite inspections, audits, commissioning support, and deficiency tracking. Collaborates with engineering, operations, project management, field teams, customers, and leadership to resolve issues and improve standards. Develops quality procedures, technical manuals, training, and corrective actions while ensuring compliance with codes, contracts, safety policies, and government requirements.

Leads security operations engineering across enterprise, cloud, and hybrid environments. Responsibilities include threat hunting, detection engineering, SIEM/SOAR/EDR platform administration, incident response, security validation, log pipeline maintenance, infrastructure-as-code, CI/CD automation, scripting, SOAR playbooks, and AI workflow integration. Serves as a Tier 2 escalation point, mentors analysts, supports red team engagements, and provides cybersecurity strategy and technical leadership.

Implements and improves security controls across cloud, endpoint, network, identity, and application environments. Manages security technologies, investigates alerts and incidents, develops detections and response workflows, performs vulnerability management, and supports penetration testing. The role secures Azure and AWS environments, assists with IAM and CI/CD security, analyzes logs and forensic evidence, and supports compliance audits involving HIPAA, HITRUST, SOC 2, and PCI-DSS. It partners with technical and GRC teams to remediate risks and maintain security documentation.

Design, implement, maintain, and support cybersecurity tools and platforms, including EDR, DLP, web proxy, messaging security, vulnerability management, and identity and access management. Develop security playbooks and troubleshooting documentation, assist with incident response, collaborate across teams, and improve the confidentiality, integrity, and availability of systems and data.

Designs, implements, maintains, and supports information security tools and platforms protecting systems, networks, and data. Performs security engineering, operations, vulnerability management, incident management, threat intelligence, threat hunting, and cyber threat analytics. Manages EDR, DLP, web proxy, messaging, vulnerability management, and identity-access tools; develops playbooks and troubleshooting documentation; and assists with incident response while collaborating cross-functionally to improve security posture.

Oversee application security scanning, vulnerability remediation, and security-related release readiness while developing and maintaining full-stack Java web applications. Coordinate with IRS personnel, create remediation milestones, lead technical meetings, troubleshoot environments, review code, perform testing, and document technical solutions. The role requires extensive J2EE development, security tooling, CI/CD, OpenShift, mainframe integration, and vulnerability management experience in a federal environment.

Designs, builds, deploys, and operates shared security services, libraries, middleware, and platform patterns in TypeScript. Responsibilities include identity and authentication, authorization, secrets and key management, encryption, audit logging, rate limiting, abuse prevention, monitoring, and reliability. The engineer will establish secure defaults and CI guardrails, partner with engineering teams, mentor engineers, and provide technical leadership while owning solutions end to end.

Designs, integrates, operates, and continuously improves enterprise security platforms. Responsibilities include security monitoring, incident management, platform integrations, automation, log onboarding, alert correlation, detection tuning, SLA adherence, capacity planning, 24x7 support, and creation of security metrics, dashboards, and executive reports. Partners with cybersecurity, infrastructure, application, and engineering teams to improve security visibility, operational resilience, and the organization’s security posture.