Top Security Engineer Jobs

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Design, build, and operate cloud security for a multi-account AWS environment and Kubernetes clusters. Implement detection, automated remediation, zero-trust access, shift-left security in CI/CD, and cloud posture/workload protection. Partner with infrastructure teams, mentor engineers, and develop automated guardrails and agentic detection workflows integrated into engineering workflows.

Perform red-team-style assessments across web apps, networks, Active Directory, cloud and container environments; develop offensive tooling and LLM-driven automation; manage third-party pentests; collaborate with engineers to reproduce, prioritize, and verify fixes; and produce clear technical and non-technical write-ups and remediation plans.

Perform web, external/internal network, AD, cloud, and container penetration tests; develop offensive tooling and LLM-driven automation; manage third-party pentests; collaborate with engineers to reproduce, prioritize, and verify fixes; and produce clear technical and non-technical reports.

Entry-level System Security Engineer supporting cybersecurity engineering for space and mission systems. Manage cyber requirements, design secure systems using MBSE, validate technical security implementations, and support Assessment & Authorization (A&A) to obtain/maintain Authorizations to Operate (ATO). Collaborate with cross-functional teams, apply NIST/DISA/CIS standards, perform risk analysis and security planning, and integrate DevSecOps and software security engineering practices into system development.

Provide systems security engineering support for space/mission systems: manage cyber requirements, validate technical security implementations, support ATO/Assessment & Authorization, develop program protection and anti-tamper plans, perform threat analysis (including Threat Countermeasure Trees), brief leadership, and document security guidance and reports across the acquisition lifecycle.

The Senior Security Engineer will design and implement logging systems, automate threat detection, investigate incidents, and collaborate during security responses while utilizing AI tools and strong programming skills.

Lead threat modeling and risk management for DigitalOcean's virtualization stack. Build frameworks and rubrics to assess hypervisor risk, propose and implement defense-in-depth mitigations, collaborate with engineering teams on remediation, mentor teams on secure design, and help oversee vulnerability management and security guidance.

Lead architecture and implementation of network security across edge, backbone, and datacenter environments. Provide technical leadership, conduct threat modeling and network security assessments, build security automation and IaC, integrate controls into SDN/BGP/MPLS systems, participate in incident response, and drive security reviews and best practices across teams.

Own the security risk posture for the virtualization stack by building threat models, assessment rubrics, and defenses. Propose and implement mitigations, partner with engineering teams to drive remediations, mentor engineers on secure practices, and help oversee vulnerability management and security guidance.

Lead technical design and enforcement of network security for global edge, backbone, and datacenter environments. Perform threat modeling, protocol analysis, DDoS mitigation, security automation, tooling, and incident response. Partner with network teams to integrate controls, telemetry, and IaC-based validation, and mentor engineers while driving security reviews and best practices adoption.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Senior individual-contributor on Detection & Response leading detection engineering, incident response, architecture for logging/alerting, mentoring, designing AI-assisted workflows, and driving multi-year security roadmaps to reduce risk.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Responsible for leading security initiatives, implementing policies, evaluating security architectures, and ensuring compliance with firewall and cloud security standards.

Lead technical strategy and architecture for software security across Block. Design and deliver security solutions, drive Secure SDLC adoption, threat model critical systems, mentor engineers, and execute high-priority security initiatives for scalable, resilient security services and mobile/platform security.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.

Lead system security engineering for aerospace/defense programs: define and validate cyber requirements, design secure systems (MBSE), manage A&A/ATO processes, integrate DevSecOps and cyber tools, perform risk assessments, and coordinate with stakeholders and program leadership.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead detection and response efforts: build detections, manage SIEM and orchestration tooling, deploy AI in SOC workflows, investigate incidents across AWS/EKS environments, support threat modeling and vulnerability scanning, and take on-call shifts.

Lead customer-facing security architecture for federal cloud, Kubernetes, GPU, and HPC environments. Design accredited and classified deployments, translate FedRAMP, RMF, DoD, CMMC, and STIG requirements into technical controls, and support ATO documentation and assessments. Lead proofs of concept, workload reviews, compliance automation, technical workshops, and roadmap development. Partner with federal customers, defense organizations, compliance teams, and engineering groups while supporting secure air-gapped environments and emerging AI security solutions.

Leads the design and implementation of advanced cybersecurity solutions, conducts risk and vulnerability assessments, develops incident response plans, and mitigates security incidents. Acts as a cybersecurity subject matter expert, partners with cross-functional teams and senior leadership, guides cybersecurity strategy, leads teams through influence, and evaluates emerging technologies and best practices to improve organizational security and resilience.

Designs, documents, tests, and maintains IT general and security controls across corporate, engineering, SaaS, and cloud-native systems. The role maps controls across SOX, SOC 2, ISO, NIST, PCI-DSS, privacy, and contractual requirements; manages audits, access reviews, change-management testing, remediation, policy work, and evidence automation. It also establishes governance standards for enterprise AI use and partners with IT, Security, Engineering, Finance, Legal, Privacy, and auditors.

Leads enterprise AWS cloud security architecture, engineering standards, guardrails, automation, governance, and operating models. Advises leadership, resolves complex security challenges, integrates AWS with IAM and cybersecurity ecosystems, and secures cloud-native workloads, infrastructure, applications, and data. Applies AI-assisted development responsibly while ensuring security, compliance, privacy, resilience, and regulatory alignment. Collaborates across cybersecurity, infrastructure, application development, risk, and data protection teams.