Top Security Engineer Jobs

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Owns Blueberry’s day-to-day security operations, including vulnerability management and remediation across GCP and Python/Django applications. Maintains detection, logging, monitoring, incident readiness, backups, endpoint security, network controls, access management, and IT administration. The role requires production Python experience, Linux administration, cloud experience, and hands-on familiarity with security tools and controls.

Designs and implements enterprise network security architecture, including firewalls, segmentation, access control, VPNs, proxies, zero-trust controls, and secure cloud connectivity. Leads complex security engineering projects from planning through implementation, validation, and operational transition. Serves as the senior technical authority, directs engineering teams, develops implementation and rollback plans, supports federal compliance and accreditation, and briefs government stakeholders and approval boards.

Implement and maintain cybersecurity controls across Linux, Windows, cloud, and networking environments. Conduct automated vulnerability and compliance scans, assess and remediate risks, and ensure compliance with ICD 503 and NIST 800-53. Support the Intelligence Community Assessment Process and protect critical systems against evolving threats.

Supports cybersecurity control implementation, security baselines, compliance assessments, risk mitigation, audits, documentation, and vulnerability remediation. Develops and customizes CIS and STIG benchmarks, translates baseline requirements into FISMA and NIST controls, and collaborates with technical teams to protect client systems. The role requires five-plus years supporting IT operations and eligibility for a Public Trust determination. Preferred experience includes cloud, networking, automation, infrastructure-as-code, containers, serverless technologies, monitoring, and security-related certifications.

Maintains and troubleshoots site operational technology assets across control, safety, server, endpoint, and network systems. Responsibilities include preventive and corrective maintenance, backups, antivirus, patching, firmware, firewall and account reviews, physical inspections, cyber-defense monitoring, spare management, troubleshooting, change control, documentation, and outage support. The role coordinates with operations, engineering, IT, OT security, maintenance teams, and vendors while following permits, MOC procedures, risk-based policies, and vendor requirements in a safety-critical continuous-process environment.

Designs and operates cloud and SaaS data security controls using CASB, DSPM, Microsoft 365, and preferably Zscaler. Responsibilities include secure architecture, monitoring alerts, security policy enforcement, data discovery and classification, sensitivity labeling, Microsoft 365 security administration, incident investigation, and compliance support. The role collaborates with engineering, IT, and compliance teams while developing expertise in cloud security technologies.

Leads technical pre-sales and consulting engagements for Microsoft security, compliance, cloud, and AI solutions. Develops customer and competitive strategies, designs architectures, leads demonstrations and proofs of concept, resolves technical blockers, enables partners, and influences customer decision-makers. Provides thought leadership, training, mentoring, and technical community leadership across XDR, zero trust, cloud security, Microsoft Purview, data protection, governance, privacy, and regulatory compliance.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Lead product cybersecurity across medical devices, connected technologies, digital solutions, and software. Define security requirements, maintain threat models and risk registers, lead vulnerability and penetration testing, integrate automated security tools, mature secure development practices, support incident response, and provide technical leadership to regulators, customers, auditors, and security researchers. Collaborate across IT, R&D, compliance, and other business teams.

Designs, deploys, and manages cloud network security infrastructure across GCP, AWS, and on-premises environments. Responsibilities include network segmentation, secure traffic flows, infrastructure-as-code deployment, automation, CI/CD, testing, compliance, and cloud security architecture. The role collaborates with cloud engineering teams and business stakeholders, contributes to strategic roadmaps, and improves resilient, scalable security solutions supporting cloud migration and critical workloads.

Leads the design, implementation, and operation of enterprise information security controls. Analyzes threats and manages technologies including firewalls, endpoint security, access control, email filtering, IDS/IPS, DLP, encryption, CASB, and web filtering. Reviews application and endpoint configurations, leads cross-functional security projects, monitors emerging threats, recommends improvements, and supports organizational security strategy and policy alignment.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Designs secure automation and CI/CD pipelines across development, test, and production environments. Identifies and remediates vulnerabilities across systems, applications, and cloud environments; improves infrastructure security, monitoring, and vulnerability management; supports incident response; researches emerging threats; and provides technical leadership on security and scalability initiatives.

The Application Security Engineer II secures applications throughout the secure software development lifecycle. Responsibilities include threat modeling, code reviews, vulnerability remediation, security architecture assessments, security hardening, application security testing, documentation, compliance auditing, and cloud automation. The role implements authentication, authorization, encryption, logging, and security standards while partnering with teams to resolve findings and improve application security processes.

Design, deploy, optimize, and operate enterprise security infrastructure across on-premise and cloud environments. Manage and tune security platforms, conduct SOC operations, threat modeling, and risk assessments, and protect network, cloud, application, and data assets. Support enterprise application security, governance, compliance, and cybersecurity platform development while collaborating across the organization.

Designs and leads secure automation, CI/CD pipelines, infrastructure security, vulnerability management, and cloud security across development and operational environments. Identifies and remediates risks, supports incident response, researches emerging threats, and partners with engineering and operations teams to embed security throughout the software lifecycle. Provides technical leadership and mentorship while advancing DevSecOps capabilities. Requires five or more years of security experience and an active Secret clearance, with eligibility to obtain and maintain Top Secret clearance.

Lead enterprise security engineering across DLP, zero-trust networks, endpoint protection, SaaS posture management, email security, and network defense. Design secure architectures, baseline configurations, automation, threat signaling, and risk mitigation strategies. Administer security tools, conduct incident response and threat detection, analyze logs, and support digital forensics. Partner with IT, infrastructure, risk, compliance, and engineering teams while mentoring staff and establishing cybersecurity best practices.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Leads information assurance engineering across multi-classification environments, including enterprise RMF authorization, security architecture, risk and vulnerability assessments, DoD 8140 compliance, software assurance, and authentication processes for remote sensing ground systems. Provides expert guidance, develops security solutions and policies, evaluates complex security issues, and advises stakeholders on authorization and compliance matters.

Secure JLL’s global network infrastructure through hands-on engineering of Palo Alto firewalls, WAF/CDN, API security, IDS/IPS, DDoS protection, VPNs, and related controls. Responsibilities include policy tuning, troubleshooting complex network and application issues, TLS decryption, API remediation, automation, security architecture improvements, threat defense, reporting, documentation, and executive communication.

Designs, administers, and improves enterprise cybersecurity controls across endpoints, identities, cloud, email, networks, applications, and monitoring platforms. Leads incident response, vulnerability management, security architecture reviews, risk assessments, audits, compliance activities, documentation, automation, and remediation. Provides technical leadership and mentoring while aligning security operations with HIPAA, HITRUST, NIST, PCI DSS, and organizational requirements.

Develops and executes cybersecurity engineering strategies for industrial control systems and operational technology supporting nuclear plant design. Responsibilities include threat hunting, threat intelligence, risk assessments, vulnerability remediation, security architecture, incident prevention and response, control weakness remediation, and cybersecurity reporting. The role also requires ServiceNow development and architecture, workflow and interface design, scripting, and collaboration with engineering, firewall, and systems administration teams.