Top Security Engineer Jobs

Manage and operate DHS COMSEC and KMI systems, including cryptographic key generation, distribution, accounting, storage, audits, equipment upgrades, destruction, and demilitarization. Support COMSEC policy implementation, customer account assistance, fielding, training, and technical operations for KMI, EKMS, and modernization initiatives. Maintain compliance with national, DHS, and organizational security requirements while supporting cryptographic equipment and accounting systems nationwide.

Manage and secure AWS, Microsoft 365, cloud applications, network infrastructure, and enterprise security platforms. Monitor logs and security events, support SIEM, MDR, MFA, EDR, and data protection tools, and provide advanced IT troubleshooting. Lead security initiatives, audit preparation, regulatory compliance, policy development, and secure AI adoption while supporting regulated clinical trial operations.

Provides enterprise patch management and security update operations for Department of State IT systems. Responsibilities include overseeing patch processes, deploying and testing updates, maintaining the patch FTP site, monitoring compliance, remediating deployment failures, ensuring antivirus compliance, troubleshooting incidents, and maintaining ITIL-aligned standard operating procedures. The role requires a Secret clearance, Microsoft endpoint administration expertise, and up to 10% travel.

Designs, implements, maintains, and evolves firewall and network security systems supporting a global Department of State network. Troubleshoots complex firewall-related incidents, evaluates security products and configurations, develops upgrade plans, coordinates with vendors and the CISO, and serves as a senior escalation point for administrators and technicians. The role also documents security elements, researches emerging threats, approves technical solutions, and provides guidance to junior staff.

Monitor and secure federal cloud environments across AWS, Azure, and Google Cloud. Perform cloud threat hunting, log analysis, incident response, and develop cloud security playbooks and monitoring use cases. Ensure cloud logs are integrated with SIEM tools, tune detection systems, establish KPIs, support threat information sharing, and assist with cloud SOC tool deployment and proof-of-concept efforts.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Support Sentinel (GBSD) program performing systems security and CPLM integration. Assess supply chain security, standardize engineering data, align CPLM with ERP/logistics, use JIRA for agile execution, and serve as technical liaison between Engineering, Manufacturing, and Logistics to resolve data silos and protect program information.

Own Kikoff’s data security roadmap across AWS, Snowflake, RDS, and internal pipelines. Design and implement encryption, tokenization, least-privilege access, access brokering, row- and column-level controls, audit logging, secure data flows, and AI agent permissions. Partner with Legal and Compliance on privacy and regulatory requirements, threat-model new systems, and create reusable secure engineering patterns. Support data mapping, retention, deletion, and cross-border data controls in a regulated fintech environment.

Lead embedded systems security for sensor and mission solutions: ensure compliance with government policies (JSIG, DAAPM), develop/validate cybersecurity requirements, support ST&E, perform reverse engineering/anti-tamper analysis, manage A&A documentation and POA&Ms, guide exportability and international requirements, and drive secure architecture, testing, and policy alignment across hardware and software lifecycles.

Lead identity security engineering strategy across user, development, and production environments. Guide IAM architecture, privileged access management, threat detection, adversarial testing, compliance automation, and security-control validation. Mentor engineers, define identity security roadmaps, build automation and proofs of concept, collaborate with business and security leaders, and modernize protective controls using offensive and defensive security expertise.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Performs application security assessments, secure code reviews, API and CMS security testing, threat modeling, vulnerability analysis, and remediation validation. Integrates SAST, DAST, dependency scanning, secrets management, and security controls into CI/CD pipelines. Advises developers and architects on secure coding, authentication, encryption, and DevSecOps practices while supporting monitoring and incident triage. Requires an active Top Secret clearance, technical bachelor’s degree, seven years of relevant experience, and Security+, CISSP, or CCSP certification.

Design, implement, and mature API security across applications, platforms, and AI use cases. Evaluate and operationalize API security tools, perform threat modeling and assessments, partner with engineering to remediate risks, define secure API practices, and address non-human and agentic identity models.

Build and mature the application security program across the SDLC. Manage SAST, DAST, SCA, and IAST tooling; conduct penetration tests and vulnerability assessments; drive remediation; and embed Secure by Design practices. Partner with engineering on threat modeling, secure coding, architecture reviews, and CI/CD integration. Support HIPAA, NIST, and GDPR compliance through audits, reporting, documentation, policies, and cross-functional risk reduction initiatives.

Lead system security engineering for secure platforms across architecture, design, integration, and deployment. Define system-level requirements, identify and mitigate technical risks, develop security documentation and program protection plans, mentor engineers, and communicate technical results to sponsors and program leadership. Support evaluation, accreditation, and implementation of cryptographic and supply-chain protections.

Design, implement, and maintain data security controls and safeguards across data platforms. Manage access controls, perform risk assessments, implement encryption and DLP, respond to incidents, support compliance and audits, document controls, and deliver data security training in coordination with data governance and compliance teams.

Lead design, integration, and deployment of trustworthy secure platforms. Define system security requirements, architect cybersecurity solutions, evaluate systems for cyber, reverse-engineering, and supply-chain threats, develop security documentation per government requirements, configure and monitor security infrastructure, mentor junior engineers, and present technical results to stakeholders.

Coordinate and develop hardware/software BOMs, manage vendor relations and purchase orders, track inventory and capital receipt, and lead rollout of network hardware to remote sites. Provide advanced router/switch configuration and system administration (Cisco required), ensure high-availability network designs, and produce clear technical documentation and status communications.

Lead and perform red-team and penetration testing engagements across network, application, wireless, data center and cloud environments. Conduct complex security assessments, analyze findings, present remediation recommendations, implement solutions, and transfer knowledge to client staff. Partner with senior engineers and apply multi-discipline expertise to solve real-world security challenges.

Design and implement advanced cybersecurity solutions for DOE/NNSA programs. Perform security engineering, assessments, risk analysis, and compliance activities; develop software and technical solutions; support multi-lab teams; deliver cybersecurity training; and manage stakeholder priorities while using tools like Splunk, RSA, Tenable Nessus, and SELinux.

Own and harden cloud and device security for a wearable robotics fleet: design PKI and device identity, secure boot and OTA pipelines, harden GCP infrastructure, build security tooling and CI/CD signing, partner with firmware teams, and support compliance readiness for regulated market entry.

Perform RMF lifecycle tasks to obtain/maintain IATT/AO/ATO, implement and test DoD STIG/SRG controls, run vulnerability assessments (ACAS/SCAP/SCC), maintain POA&Ms in eMASS/VRAM, patch and harden Windows Server and Cisco assets, image/re-image systems, and support configuration management and PPSM for NSWC-PD.

Execute offensive security engagements (red team, app/cloud assessments), develop custom exploits/payloads and tools, translate field findings into product improvements, integrate AI tooling into workflows, and mentor peers while producing clear, actionable client reports.

Support RMF processes and system security engineering for government systems. Collaborate with stakeholders to complete security documentation, perform audits, apply NIST 800-53 Rev.5 controls, implement defense-in-depth strategies, ensure STE/STN compliance, and assist in system authorization and assessments.