Top Security Engineer Jobs

Design, implement, and maintain enterprise security platforms and identity solutions across hybrid environments. Modernize IAM and identity governance, enhance email security, collaborate with infrastructure and cloud teams, automate controls using scripting and APIs, and provide secure-by-design engineering guidance.

Lead the Data Leakage Prevention (DLP) engineering squad to design and deliver cyber security controls, manage vendors, engage stakeholders, and drive modernization to reduce risk. Develop and execute security strategy, monitor KPIs, ensure high availability of systems, enforce security best practices, and support transformation projects across cloud and on-prem environments.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Perform adversary-emulation informed cybersecurity operations and analytics to evaluate and improve detection, visibility, tooling, and automated defensive processes. Work with red teams, analyze network traffic, configure and maintain network infrastructure, build virtual environments, and develop automation and data-driven solutions to harden sponsor systems.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Implement and maintain data and digital security controls across network, infrastructure, applications, and databases. Perform firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project tasks to uphold DDS program requirements and security standards.

Implement and operate perimeter and infrastructure security controls (firewalls, IPS/IDS, SIEM, DLP). Support vulnerability assessments, incident response, security monitoring, firewall engineering, SOC procedures, audits (PCI), and security tool evaluation/implementation. Provide advisory and hands-on support to network/infrastructure teams and stakeholders.

Implement and maintain perimeter security, firewall engineering, logging/monitoring, alerting, incident handling, vulnerability and configuration management. Support security research, product evaluations, consulting, and project-level security tasks to meet Data & Digital Security program requirements.

Implement and operate data and digital security controls across network, infrastructure, applications, and databases. Responsibilities include firewall engineering, logging/monitoring, alert management, incident handling, vulnerability and configuration management, security research, product evaluation, and project support to meet program requirements.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Administer and maintain Tenable Suite (Security Center, Nessus Scanners, Nessus Manager) on Linux, perform vulnerability scans and analysis, prioritize and remediate findings with IT teams, generate reports, monitor alerts and incidents, and provide training and status reporting to stakeholders.

Design and implement Oracle IAM solutions across environments. Configure OAM/OAAM, customize login modules and admin UIs, implement federation, configure roles/policies in OIM, integrate applications via LDAP/database connectors, perform user loads/reconciliation, and provide knowledge transfer to BCA staff.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Implement and design IAM solutions, gather requirements, configure SSO/SAML integrations (customer and internal), troubleshoot authentication issues, document designs, and support adoption of authentication technologies.

Design, evaluate, and secure complex LAN/WAN and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model and test solutions, perform MTBF/MTTR analyses, analyze vulnerabilities, evaluate architectures, research COTS/GOTS, optimize wired and wireless networks, develop security documentation, and ensure compliance with government security requirements.

Design, implement, and document Identity and Access Management solutions and SSO/SAML integrations. Gather requirements, configure PoC/dev environments, resolve authentication issues, ensure platform stability under load, coach teams, and research new authentication technologies while supporting internal users and stakeholders.

Provide systems engineering and programmatic support to the U.S. Navy FMS directorate, both on-site and off-site. Oversee system security solution development and compliance with TIG and Anti-Tamper frameworks, support risk management, develop and review SEPs/SEMPs and vendor AT plans, produce technical briefs and correspondence, and maintain program schedules.

Designs, deploys, and optimizes AI-driven security workflows and agents (using Microsoft Copilot tools) to automate threat detection, incident response, and alert enrichment. Develops prompts and automations for threat hunting, triage, compliance reporting, creates dashboards (Splunk, Sentinel), maintains runbooks/SOPs, participates in on-call rotations, and collaborates with SOC, engineering, and GRC teams.

Define and decompose product security requirements, develop and run manual and automated security validation tests (functional and abuse tests) at vehicle, system, sub-system and ECU levels using SIL/HIL. Build test cases in multiple languages, document results for compliance (UN R155, ISO 21434), triage findings, collaborate with development teams to recommend and validate fixes, and align documentation with CSMS and GRC processes.

Own and administer enterprise WAN/LAN/wireless and multi-vendor firewalls across on-prem and cloud, ensure network performance and 99% uptime, manage GCP org governance, support CMMC Level 2 and SOC 2 audit readiness, resolve Tier 2+ network incidents, maintain network documentation, and contribute to automation and hybrid cloud networking solutions.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Lead architecture and execution of detection and response capabilities across AWS and broader infrastructure. Build AI-augmented detection/triage pipelines, design SIEM/SOAR ingestion and alerting frameworks, drive incident response for high-impact events, close detection gaps, mentor engineers, and set team standards for responsible AI usage.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.