Top Security Engineer Jobs

Administer Tenable Security Center, Nessus Scanners, and Nessus Manager on Linux platforms. Conduct vulnerability scans, analyze and prioritize findings, coordinate remediation, produce reports, monitor alerts, respond to incidents, maintain secure platform performance, install security products, and train users. The role supports enterprise cybersecurity environments and requires extensive cyber experience, current TS/SCI clearance, DoD certification, and the ability to pass a government polygraph.

Design and implement secure-by-default cloud infrastructure across AWS: build secrets management and IAM solutions, ship production backend changes, model threats and prioritize risk-based controls, guide partners on security and privacy, and participate in incident response and mitigation.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead cloud security as a senior individual contributor: define standards and reference architectures, drive cross-team initiatives, own threat modeling and IAM strategy, design detections and lead incident response/cloud forensics, manage vulnerability workflows, and secure self-managed Kubernetes, IaC, and CI/CD pipelines while mentoring engineers and producing durable, scalable controls.

Lead cloud security direction and standards across AWS, GCP, and self-managed Kubernetes. Own threat modeling, secure architecture, detection engineering, incident response, and vulnerability management. Harden IaC and CI/CD (Terraform), secure Kubernetes control plane and runtimes, and mentor other engineers while driving cross-functional security initiatives and tooling adoption.

Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Lead cloud security strategy and standards across AWS, GCP, and self-managed Kubernetes. Drive secure architecture, threat modeling, detection engineering, incident response, and platform/IaC security. Mentor engineers, own cross-functional initiatives, harden tooling (CrowdStrike, Tenable, SIEM), and codify playbooks and controls for large-scale distributed systems.

The Product Security Engineer partners with Engineering and Product teams to embed security throughout the development lifecycle. Responsibilities include threat modeling, architecture and security reviews, vulnerability validation, remediation planning, security-tool ownership, automation, secure coding guidance, incident response, and assessing risks in cloud and AI-enabled products. The role requires strong application security, identity, authentication, authorization, coding, communication, and cross-functional collaboration skills.

Principal Security Engineer partnering with Product and Engineering teams to embed security into SaaS and cloud product development. Advises senior stakeholders, coordinates Information Security engagement, supports privacy considerations, develops customer trust materials, mentors junior engineers, and evaluates AI-related product and security risks. The role requires strong security knowledge across data protection, identity, and application security, along with autonomy, influence, and experience translating security expectations into technical requirements.

Build and scale internal security systems, analyze security data from logs and endpoints, design detection technologies, assess infrastructure risks, recommend remediation, and execute projects improving intrusion detection, scanning, testing, and response capabilities.

Supports DoD and Navy Risk Management Framework assessment and authorization activities for enterprise and RDT&E systems. Maintains ATO documentation, security plans, risk assessments, POA&Ms, architecture diagrams, and compliance artifacts. Conducts security control assessments, continuous monitoring, STIG reviews, and risk mitigation using eMASS and related cybersecurity tools. Coordinates with government and contractor stakeholders, tracks action items, provides RMF guidance, and supports cybersecurity training and process improvements.

Designs, implements, and maintains enterprise network security infrastructure, with emphasis on Palo Alto firewalls, GlobalProtect VPN, hybrid Azure/AWS connectivity, routing, switching, and 802.1X certificate-based access control. Secures wired, wireless, camera, and IoT devices using TLS/PKI authentication; troubleshoots firewall, VPN, wireless, and network issues; manages VLAN segmentation and Ruckus switching; and may support Prisma and CASB initiatives.

Protect the firm from web-based threats by designing, implementing, and maintaining web filtering proxies, secure web gateways, and cloud proxy platforms. Develop security policies for web filtering, SSL inspection, DLP, and threat prevention; translate regulatory requirements into technical controls; automate policy management and integrate security tools with SIEM, SOAR, and identity platforms. Support incident response, secure business use cases, scalability, Zero Trust alignment, and leadership reporting on risks and program maturity.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Supports Cybersecurity Assurance teams with compliance enforcement, SIEM configuration, security administration, vulnerability management, audits, security checks, automation, documentation, technical writing, and hardware/software reviews. The intern may also assist with Windows and Linux administration, defensive cyber tools, networking, troubleshooting, scripting, compliance auditing, NIST documentation, and STIG-related work.

The Security Sales Engineer will support the enterprise sales team, drive security product adoption, conduct demos, and provide technical support throughout the sales cycle.

Conduct AI security research, agentic and LLM testing, vulnerability discovery, adversary simulations, and full-chain red team operations. Test WAF, EDR, and SIEM detection efficacy using MITRE ATT&CK, collaborate with blue teams and incident response, develop detection validation frameworks, report risks to executives, and mentor security professionals.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Leads application security engineering across the SDLC by applying AI-assisted threat modeling, security validation, vulnerability management, and automated controls. Integrates security testing into CI/CD pipelines, develops secure-by-default patterns and policy-as-code guardrails, monitors application, cloud, API, data, and AI/ML threats, and guides remediation. Partners with Engineering, Product, QA, DevOps, and AI platform teams to improve security maturity, developer enablement, and proactive defense.

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Design and build security foundations for AI products, including agent runtimes, tool permissions, retrieval, content writes, observability, and auditability. Create reusable security libraries, guardrails, test fixtures, and automated red-team testing for prompt injection, data exfiltration, tool misuse, cross-tenant leakage, and unsafe mutations. Translate threat models into engineering requirements and launch criteria, and continuously harden systems using production signals and incident learnings.

Support and maintain the SOAR platform by developing, testing, and maintaining playbooks, workflows, and integrations. Identify repetitive security operations tasks and implement automation to improve incident response. Collaborate with security analysts, document workflows and scripts, assist with platform maintenance and migrations, and troubleshoot tool integrations. The role requires foundational security knowledge, scripting ability, analytical problem-solving, and effective communication.

Design, develop, and operate security automation workflows for detection, investigation, triage, and response at scale. Build SOAR integrations with SIEM, EDR, CTI, ticketing, and SaaS platforms; develop LLM-powered analysis and response capabilities; and improve reliability, scalability, monitoring, and operational performance of AI-SOC systems. Collaborate with SOC and incident response teams to implement automated detection scenarios and resolve production incidents.

Supports Linux infrastructure and R&D researchers with a focus on cloud security. Responsibilities include cybersecurity compliance, cloud administration, automation, configuration management, patching, compute and storage deployment, container management, scripting, centralized infrastructure support, and research partnerships. The role provides hands-on onsite infrastructure support in Fort Collins and requires lifting up to 50 pounds.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.