Top Security Engineer Jobs

Lead development of secure Identity and Access Management solutions: design, build, test, and stabilize production systems. Drive automation, CI/CD, cloud-native and AI-assisted engineering adoption, lead vendor evaluations, mentor teams on secure coding, authentication/authorization, RBAC/ABAC, and operational resilience.

Own the company’s security engineering program across AWS infrastructure, Kubernetes, application security, vulnerability management, penetration testing, bug bounty operations, and compliance support. Harden cloud and application environments, identify and remediate security gaps, partner with engineers on secure designs and code fixes, and improve monitoring, incident readiness, secrets management, and defense in depth.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

The Application Security Engineer will identify security gaps, build tooling, conduct code reviews, and drive vulnerability remediation, ensuring secure product delivery.

Provide cybersecurity engineering support for programs: validate security requirements and designs, perform technical assessments and A&A documentation under NIST RMF, support incident response, identify and mitigate system risks, and implement enterprise security controls using tools like Splunk, Tenable, and HBSS. Requires coordination with engineers, PMs, and stakeholders and maintaining system Authorizations to Operate.

Provide cybersecurity engineering support to develop, validate, and maintain secure systems. Manage cyber requirements, perform technical security assessments, support Incident Response and Assessment & Authorization (A&A) per NIST RMF, produce A&A documentation, mitigate risks, and advise architects and program stakeholders on security design and compliance.

Investigate and respond to security incidents through alert monitoring, digital forensics, log and network analysis, evidence preservation, threat containment, and recovery recommendations. The engineer collaborates with technical and non-technical stakeholders, supports vulnerability management and security assessments, improves detection systems, develops automation, documents findings, and participates in a 24x7 on-call rotation.

Two-year rotational program for graduating students to design, build, and enhance secure applications, systems, controls, automations, and infrastructure. Participants gain experience in secure software development, DevSecOps, identity and access management, vulnerability remediation, and cybersecurity while collaborating across engineering and security teams. The program emphasizes leadership development, Agile delivery, project ownership, mentorship, and cross-functional communication.

Support high-severity cyber and product security incident response across cloud, corporate, application, and customer-facing environments. Coordinate incident workstreams, communications, stakeholder engagement, containment, recovery, documentation, and post-incident reviews. Develop AI security incident response capabilities, support threat hunting and investigations, improve detection and response metrics, conduct tabletop exercises, and advance automation and resilience across hybrid multicloud environments.

Identify and mitigate security risks across IoT devices and infrastructure through penetration testing, firmware extraction, reverse engineering, vulnerability research, threat modeling, and security assessments. Document findings, policies, and procedures; manage security solution deployment; triage externally reported issues; drive remediation; and collaborate with infrastructure, application, product, and other stakeholders to reduce security and privacy risks.

Lead global cloud security architecture across AWS, Azure, or GCP, including Zero Trust, IAM, micro-segmentation, encryption, AI/ML security, policy-as-code, CNAPP/CSPM, threat modeling, and automated compliance. Develop security automation and testing within CI/CD pipelines, reduce cloud threat detection times, and advise architecture and executive leadership on security risks and regulatory requirements.

Designs, implements, and maintains cloud security controls and infrastructure, including access provisioning, monitoring, incident response, vulnerability management, and security automation. Evaluates cloud architectures, tunes security tools, develops response documentation, and partners with engineering, compliance, and leadership to improve security posture. Requires expertise in cloud and network security, programming, databases, CI/CD, Linux, SQL, and security technologies, plus a bachelor's degree and at least five years of public cloud experience.

Provides 24/7 oversight and support for an IT security program, including security technology implementation, monitoring, incident response, access control, vulnerability mitigation, security awareness training, disaster recovery, compliance, documentation, and vendor coordination. Leads security projects, audits system performance, manages patches and upgrades, and supports adherence to PCI DSS, tribal gaming regulations, and security best practices.

Design and build backend services for a digital asset custody platform, including secure transaction orchestration, wallet lifecycle management, integrations with custody providers and blockchain infrastructure, resilient APIs, high-availability systems, observability, and close collaboration with security and product teams.

Owner of application-layer security across consumer flows, GraphQL APIs, and AI-driven tooling. Build and operate AppSec tooling and triage, run threat modeling and security reviews, lead HackerOne and offensive testing, automate vulnerability triage and remediation with AI agents, and partner with engineering to harden authentication, authorization, and container/cloud security.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Join a growing cybersecurity firm to help clients secure information and protect reputation. Roles span DevSecOps, application and network security, architecture, risk assessment, threat modeling, penetration testing, analysis, business analysis, and project management. Candidates will interact with customers, represent the company, and should have strong verbal and written communication. Degree or certifications are a plus; direct hire or contract engagements available.

Lead design, development, testing, and integration of secure firmware and platform security features. Architect secure boot, hardware root-of-trust, key management, and cryptographic solutions. Drive cross-functional initiatives, review designs and code, mentor engineers, and evaluate emerging security technologies for integration into products.

Lead development of security enforcement integrations that warn or block unsafe AI artifact installations, serve sanitized alternatives, and record audit events. Build reliable event-driven backend systems with queues, webhooks, idempotency, retries, back-pressure, approval flows, dry runs, audit logs, and rollback mechanisms. Integrate third-party security, infrastructure, and identity APIs, with potential future work on fleet-wide revocation controls and security platform integrations.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Leads the design and implementation of secure IT infrastructure, performs security monitoring and threat analysis, enforces security controls, evaluates security technologies, manages patching and vulnerability scanning, and maintains continuous system security. Provides guidance to stakeholders, manages security projects, mentors junior engineers, and participates in incident-response on-call rotations.

Develop and support Ambiq's Trusted Execution Environment and related security implementations for embedded systems, ensuring compliance with security standards and seamless integration with customer builds.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Administers and troubleshoots enterprise firewall and network security infrastructure, including VPNs, routing, NAT, segmentation, SD-WAN, access controls, SSO, and certificates. Serves as a subject matter expert, resolves complex network issues, leads projects, develops documentation and processes, and supports change management. Coaches team members, transfers technical knowledge, collaborates with stakeholders, and contributes to improvements across network infrastructure and security services.

Build and secure an on-premises AI platform on owned hardware, including local model serving, database-backed search and provenance, and sandboxed execution for AI-generated code. Implement default-deny networking, untrusted-code isolation, auditable infrastructure, data classification, and trust-boundary controls. This founding generalist role requires deep backend and systems engineering experience, bare-metal expertise, and the ability to establish secure foundations before scaling the team.