Top Security Engineer Jobs

Leads an engineering team responsible for designing, building, and operating data security products and controls. Provides technical direction, hands-on engineering leadership, and delivery ownership across DLP policy, data discovery and classification, data access controls, policy-as-code workflows, automation, integrations, testing, deployment, reliability, and operational support. Translates data security requirements into scalable solutions while mentoring engineers and driving adoption of secure engineering practices.

Designs and operates security controls across hybrid cloud environments, including IaaS, PaaS, SaaS, FaaS, CI/CD pipelines, and automated systems. The role performs cloud security architecture, risk analysis, vulnerability management, IAM implementation, security automation, compliance reviews, and incident-response support. It also integrates security into SDLC, DevOps, and MLOps processes, configures security tools, develops documentation and proofs of concept, and advises internal teams on cybersecurity best practices and regulatory requirements.

Design, implement, and assess cloud security architectures for intelligence community systems. Develop and evaluate security documentation, perform RMF assessments, recommend and deploy cloud security tools (on-prem, cloud, hybrid), and support accreditation. Collaborate with stakeholders, codify security procedures, and implement infrastructure-as-code solutions to meet mission requirements.

Lead systems engineering and information security activities across the full system lifecycle. Serve as the security coordinator for assigned products, manage security authorization and SSP reauthorization activities, support cloud migration, and ensure technical quality across ISO/IEC 15288 processes. The role requires extensive stakeholder communication, technical leadership, and coordination with sponsors, overseers, senior executives, and cloud architecture teams.

Owns company-wide security across product, infrastructure, corporate systems, and IT. Responsibilities include fixing authentication and authorization issues, managing keys and secrets, hardening internal tools, improving permissions, contributing to backend engineering, and leading security reviews, incident response, and security tooling. This hands-on role requires broad security expertise, strong software engineering ability, and comfort working in an ambiguous early-stage startup environment.

Support enterprise security sales by identifying customer requirements, demonstrating Datadog security solutions, providing technical expertise during evaluations and proof-of-value initiatives, and developing proposals and sales materials. The role partners with sales, product, and engineering teams, tracks security trends and vulnerabilities, influences product development, and represents Datadog at industry events. Travel up to 30% is required.

Drive adoption of Datadog security solutions in strategic enterprise accounts. Partner with sales teams to understand customer requirements, conduct technical demonstrations, support evaluations and proof-of-value initiatives, develop proposals, and provide technical expertise throughout the sales cycle. Maintain expertise in security products, vulnerabilities, cloud platforms, SIEM, SOC workflows, endpoint security, and application security. Relay customer feedback to product and engineering teams and participate in industry events with up to 30% travel.

Lead cloud security strategy across AWS, GCP, Kubernetes, and self-managed systems. Define security standards, reference architectures, threat-modeling practices, IAM controls, detection engineering, incident response, vulnerability management, and secure infrastructure pipelines. Serve as a senior technical leader, mentor engineers, guide cross-functional initiatives, and develop scalable security controls and playbooks. The role requires production cloud security ownership, hands-on AWS, GCP, Kubernetes, Python, and Terraform experience.

Provides technical leadership for cloud security across AWS, GCP, Kubernetes, and self-managed infrastructure. Defines security standards, reference architectures, threat-modeling practices, IAM controls, detection strategies, incident-response playbooks, vulnerability management, and Kubernetes security standards. Leads cross-functional initiatives, mentors engineers, secures infrastructure-as-code and CI/CD pipelines, and investigates cloud security incidents. This is a senior individual contributor role requiring production cloud security ownership and hands-on coding in Python and Terraform.

Provides information systems security engineering for complex, geographically distributed systems. Responsibilities include designing security architectures, validating requirements, assessing and mitigating risks, applying the Risk Management Framework, conducting vulnerability and security testing, auditing configurations, supporting certification and continuous monitoring, enforcing security policies, and collaborating with engineering, development, integration, test, program management, and customer teams.

Develop Go-based microservices and REST APIs for CrowdStrike's Cloud Security Posture Management platform. Own end-to-end delivery, follow engineering best practices, use event-driven workflows (Kafka), and store data in Cassandra/Elasticsearch/Postgres. Operate production services (on-call), deploy containers in Kubernetes with Helm, and work with cloud providers and infrastructure-as-code tools to secure cloud workloads.

Design, implement, and manage enterprise security solutions to protect users, infrastructure, and SaaS applications. Investigate malware and advanced threats, run forensics and incident response, tune SIEM detections, deploy DLP and automation, secure endpoints and IAM/SSO, perform vulnerability remediation and security reviews, and mentor junior staff. Participate in on-call rotations and collaborate cross-functionally to improve security architecture and enforce policies.

Design, implement, and manage enterprise security solutions including endpoint, network, SaaS, and cloud protections. Investigate malware and advanced threats, expand SIEM detections, deploy DLP, perform forensics and vulnerability remediation, secure IAM/SSO/MDM, automate detections and reporting, participate in on-call incident response, and mentor junior security engineers.

Lead design, implementation, and operational management of enterprise security controls: investigate malware and threats, expand SIEM detections, deploy DLP, secure SaaS and endpoints, harden configurations, run forensics and incident response, automate detections and reporting, and mentor junior engineers while participating in on-call rotations.

Protect employees, assets, and locations by designing and operating enterprise security infrastructure. Investigate malware and advanced threats, implement DLP, secure SaaS and endpoints, harden configurations, expand SIEM detections, perform forensics and vulnerability remediation, automate detections and reporting, guide security reviews, mentor junior staff, participate in on-call incident response, and recommend security architecture and tooling improvements.

Senior hands-on engineer responsible for hybrid infrastructure operations and IT security. Maintains Windows, macOS, Linux, cloud, networking, virtualization, identity, endpoint, and security environments; investigates incidents, vulnerabilities, and alerts; supports incident response, access management, audits, and compliance; and develops automation and documentation. The role requires troubleshooting across complex systems, improving security controls and operational processes, and collaborating with IT teams, stakeholders, vendors, and managed service providers. The position is temporary and requires working onsite in San Francisco four days per week.

Designs, implements, administers, and troubleshoots F5 BIG-IP and inline break-and-inspect proxy solutions within DoD enterprise and cloud architectures. Configures TLS and mutual TLS, applies cryptographic and PKI standards, resolves issues with DoD stakeholders, and supports secure modernization of legacy and new applications. The role requires a Secret clearance and familiarity with federal compliance standards, Linux or UNIX, networking, and cloud environments.

Designs, implements, integrates, and maintains Elastic-based cybersecurity systems and automation. Manages large-scale log ingestion, parsing, enrichment, normalization, ECS mapping, index lifecycle policies, data streams, dashboards, detections, alerts, and case workflows. Supports government SOC and SIEM operations, optimizes AWS and endpoint telemetry, and applies AI/ML techniques to security analytics. The role addresses complex cyber problems, develops innovative solutions, operates independently, and mentors or supervises employees.

Governs enterprise security baselines across on-premises, cloud, and hybrid environments. Conducts automated configuration compliance assessments, monitors configuration drift, manages exceptions, supports audits, develops compliance metrics and reporting, and drives risk-based remediation. Partners with infrastructure, cloud, application, engineering, vulnerability management, threat intelligence, and security teams to reduce exposure and improve security posture through automation and standards-based controls.

Designs and maintains security controls across AWS and hybrid cloud environments. Responsibilities include cloud security architecture, IAM and least-privilege access, posture management, vulnerability remediation, security monitoring, Infrastructure-as-Code automation, secure guardrails, incident support, and compliance mapping. The role partners with infrastructure, DevOps, engineering, IAM, and security teams to embed scalable, automated protections into cloud platforms and applications.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Lead architecture and implementation of AI-security products, define technical direction, drive cross-team initiatives, design secure scalable backend systems, and address systemic risks while remaining hands-on in coding, prototyping, and debugging.

The Senior Security Engineer will design and implement data protection solutions, manage security incidents, and ensure compliance in a fintech setting.

Responsible for managing operations within classified environments, overseeing cloud infrastructure, automating tasks, and ensuring system stability in a high-security setting.

Lead development of secure Identity and Access Management solutions: design, build, test, and stabilize production systems. Drive automation, CI/CD, cloud-native and AI-assisted engineering adoption, lead vendor evaluations, mentor teams on secure coding, authentication/authorization, RBAC/ABAC, and operational resilience.