Top Security Engineer Jobs

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Senior network/security engineer responsible for Palo Alto firewall and Panorama administration, proxy engineering, DLP and SCM integration, packet-level troubleshooting (tcpdump/Wireshark), SIEM log correlation (Splunk/ELK), Zero Trust network design, and ensuring IRS/NIST boundary protection compliance. Leads firewall normalization, Panorama 12.x integration with Strata Cloud Manager, and DLP plugin upgrades.

Protect Lambda's AI cloud by building and tuning SIEM/EDR detections, responding to incidents, hardening production systems, reviewing architectures and code, and shipping security tooling (Python/Go). Partner across engineering teams to mature detection, incident response, and automation for AI-specific threats.

Design, deploy, and manage cybersecurity tools and monitoring across IT environments. Lead evaluations, proofs-of-concept, and integration of security technologies. Support incident response, forensics, vulnerability assessments, documentation, and security policy development. Train infrastructure staff and coordinate with Corporate Security.

Lead Information Systems Security Engineer responsible for designing, building, and sustaining DSCA's security automation architecture in AWS. Translate RMF/NIST/DISA STIG regulatory requirements into Policy-as-Code and automated operational code. Serve as lead technical authority for enterprise-level cloud security engineering, configuration management, compliance validation, and orchestration.

Leads application and web security for global digital and commerce platforms. Manages WAF policies, CDN security, IAM, RBAC, privileged access, MFA, and identity governance. Conducts secure code reviews, penetration testing, DAST/SAST, and API security assessments. Tracks vulnerabilities, prioritizes remediation, supports SOC and SIEM workflows, and ensures compliance through secure development and operational defenses.

Participate in live security operations, cloud architecture defense, and compliance automation. Execute continuous monitoring, assess security risks and vulnerabilities across SaaS/PaaS/IaaS, design automation for control evaluations, and collaborate with cross-functional teams to advance Appian's global information security program.

Build and own end-to-end authentication and authorization for the member platform, implement delegated/agent-based access and application-layer encryption, drive threat modeling and remediation, write RFCs and lead design reviews, and ship production code that protects sensitive member data.

Partner with product and platform teams to embed secure-by-design practices, build and deploy security tooling and application primitives, collaborate on platform mitigations, and help lead incident response efforts to raise the company's security posture.

Lead security for the full stack: design secure architectures, build CI/CD and IaC tooling, run threat modeling, red-team/pen tests, incident response, and operate the bug bounty program to prevent and remediate vulnerabilities.

Support cybersecurity architecture and engineering across enterprise environments including Zero Trust, cloud security, DevSecOps, AI/GenAI security, PQC, SSO, vulnerability scanning, automation, and documentation. Develop technology roadmaps, conduct market research and proofs of concept, and support integration, CONOPS, and engineering activities.

Implement and maintain GRC solutions, evaluate and configure security controls, inspect system configurations for compliance, analyze machine-generated log/event data, collaborate with stakeholders to remediate risk, and support continuous monitoring and accreditation processes. SES.2 hires take on broader solution development and stakeholder/priority management.

Designs and implements security features and information assurance requirements for servers, workstations, and networks. Analyzes network topology and vulnerabilities, monitors IDS/firewalls and SIEMs, develops documentation and recommendations, supports regulatory reviews, and provides security engineering and integration services to customers.

Designs complex electronic and physical security systems for critical infrastructure, corporate, and government facilities. Develops engineering documents, specifications, technical reports, and construction packages while coordinating with multidisciplinary MEP teams. Monitors project execution, conducts technical reviews, supports quality assurance, manages risks, and mentors junior engineers. Designs must meet client needs, applicable codes, budget, schedule, maintainability, and performance requirements.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Implement and operate security controls on AWS, perform vulnerability scanning and remediation, support ATO evidence for NIST 800-53/FedRAMP, run continuous-monitoring and threat-detection tooling, partner with DevSecOps to automate security, and support incident response and forensics.

Responsible for reducing IT security risk and responding to incidents by enforcing security policies, administering and troubleshooting security tools, documenting procedures, researching mitigation controls, and monitoring/advising on security issues across servers, networks, cloud, authentication, encryption, and applications.

Lead design and operation of an enterprise cybersecurity program: architect detection and response, manage Defender XDR/SIEM/MDR and endpoints, run incident response and forensics, perform audits, vulnerability assessments and pen tests, enforce NIST/ITAR controls, automate security workflows, and develop change control and security awareness programs.

Lead design, implementation, and maintenance of enterprise PKI systems. Support certificate lifecycle management (CLM), configure CAs and templates, manage HSMs and RAs, automate processes with Ansible, Terraform, and PowerShell, enforce key-management policies, and troubleshoot certificate/TLS issues to maintain secure operations.

Harden and extend a Chromium-based browser runtime running in microVMs: debug and optimize Chromium builds, implement network isolation and proxy/IP handling, collaborate on unikernel isolation and kernel security, build tooling for binary analysis, crash triage, and vulnerability monitoring, and support secure supply chain and reproducible browser images.

Lead cyber security engineer to design, implement, and support data protection (DLP), encryption, API security, and Layer7 API Gateway solutions. Provide L3 production support, HA architecture design, incident response, SIEM integration, automation/DevOps improvements, technical leadership, documentation, and cross-team collaboration for secure, scalable deployments.