Top Security Engineer Jobs

Provide advanced network security engineering for a U.S. Government customer: procure, deploy, configure, and maintain hardware and network devices (firewalls, proxies, VPNs, load balancers); perform site surveys, create technical design packages, lead teams, plan hardware projects, perform security planning, risk analysis, and design trusted inter-system relationships. Support SIGINT-focused complex systems and validate hardware in coordination with systems and test engineering.

Design, implement, and support enterprise network security solutions (firewalls, IPS/IDS, proxies, load balancers). Provide after-hours support, troubleshooting, packet analysis, vulnerability management, and collaborate with global partners on security projects and remediation.

Own and implement security measures across cloud infrastructure and the software lifecycle: threat modeling, risk assessments, security testing, incident response, secure CI/CD, and developer enablement to remediate vulnerabilities and ensure compliance with standards.

Serve as senior technical authority leading DOJ Security Assessment and Authorization (SAA) and RMF programs: guide system categorization, select and implement security controls, oversee assessments and continuous monitoring, advise leadership on risk, support incident response and audits, mentor security staff, and ensure audit-ready authorization artifacts.

Manage and optimize the Tripwire deployment, perform discovery and health checks, develop remediation plans, and lead incident response including advanced malware detection, mitigation, and security event analysis. Work under variable schedules to troubleshoot, configure, and maintain security tooling and analytics.

Provide Nexpose and Nessus implementation, configuration, tuning, and reporting. Collaborate with staff to identify risks, develop mitigation plans, improve scanning processes, manage projects, and transfer knowledge to technical teams. Produce technical and management reports and ensure environment meets agency requirements.

Contract Security Engineer focusing on malware detection, reverse engineering (Windows), incident response, and security event analytics using ArcSight SIEM and McAfee ePO, plus automation scripting and network/protocol analysis.

Install, configure, maintain, and monitor IDS/IPS, SIEM, EDR, HBSS/ESS and related security devices; perform intrusion detection analysis, incident response planning, network troubleshooting, reporting, and countermeasure development; maintain DISA-mandated products and provide LAN/WAN support and TDY/shift coverage.

Lead control testing, reporting, and remediation for IT risk and security. Maintain assurance programs, develop metrics and training, drive regulatory and contractual compliance, and coordinate stakeholders to ensure effective IT controls.

Lead deployment and implementation of CyberArk Privileged Identity Management (v7–9) for large customers: gather requirements, design and architect the solution, perform compliance checks, produce alerts/reports, investigate and perform RCA for incidents, provide technical leadership, and administer Windows/VMware environments. Travel to customer sites as required.

Contract Network Engineer in Columbia, SC (6-12 months). Responsibilities include administering network environment, rights management, diagnosing and troubleshooting computer and network issues, configuring/troubleshooting Windows client/server systems, developing admin procedures/policies, and strong verbal/written communication. Preferred experience with security standards (PCI/NIST/Pub1075), networking protocols, MS Exchange, PowerShell, disaster recovery, and change management.

Design, harden, and operate cloud infrastructure for a medical AI platform. Own security posture, compliance, and resilience of production systems; improve security observability and implement defense-in-depth controls across services and data platforms handling sensitive medical information.

Perform security engineering for design, implementation, and assessment of secure networks/enclaves. Conduct technical security assessments, risk analysis, and recommend mitigations. Validate security requirements, integrate cybersecurity components, and support trusted relationships among systems.

Configure, tune, and manage Nexpose and Nessus enterprise vulnerability scanning environments. Produce technical and management reports, develop procedures and process improvements, identify security risks, assist mitigation, and transfer knowledge to technical staff while collaborating across teams and managing project deadlines.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Provide network and mainframe security oversight, evaluate infrastructure and applications for security, recommend hardware/software, participate in security projects, support disaster recovery testing and documentation, and assist in creating and reviewing information security policies and standards.

Lead design, implementation, tuning, and administration of enterprise ArcSight SIEM (ESM/Logger/SmartConnectors). Develop content (reports, filters, dashboards, FlexConnectors), optimize deployments, translate use cases to detection content, and support DoD information assurance and log management requirements.

Provide system administration and security engineering for Focused Operations (FO) FISMA systems across on-prem and cloud. Maintain forensic and threat detection tools, manage firewalls/switches, PKI and patching, implement automation/orchestration, perform health monitoring, follow RFC/change control, produce security reports and documentation, and support incident remediation and system testing.

Protect and maintain the firm's global information infrastructure by managing firewalls, IPS, proxies, endpoint security, SIEM monitoring, incident response, security audits, documentation, and collaborating with IT teams and end-users.

Install, configure, and support security appliances and solutions (Next‑Gen firewalls, Cisco ASA, IPSEC VPNs, IDS/IPS, secure mail/web gateways, AV, mobile security, DLP). Document and communicate technical details clearly; maintain and troubleshoot network security infrastructure.

Designs, implements, and maintains enterprise identity and access management (AD DS, Entra ID, SSO, MFA). Architects RBAC, JIT, conditional access and non-human identity governance. Leads PKI, privileged access, detection engineering, identity incident response, automation (PowerShell, APIs, IaC), and Tier-3 support. Collaborates across security, DevOps, and infrastructure, authors documentation and runs on-call rotation.

Design, implement, and manage company-wide network and IT security standards to meet PCI compliance. Assess and remediate vulnerabilities, perform pen tests, create incident response plans, lead security meetings, and support network security events and audits.

Manage and implement McAfee endpoint security (antivirus, DLP, HIPS) and Symantec endpoint encryption (PGP). Define SLAs and SOPs, perform remote infrastructure management, handle incident/change management using ticketing tools, lead a team, interact with customers, and support 24x7 operations.

Own and mature Odysseys application security posture: perform code reviews, run SAST/DAST/SCA assessments, remediate vulnerabilities, embed security into CI/CD, maintain SOC 2 Type II compliance, evaluate AI/data pipeline risks, and partner cross-functionally to translate findings into actionable remediation.

Perform detection and response for security events and incidents, analyze malware and network traffic, manage SIEM and IDS/IPS, run vulnerability and web app scans, perform penetration testing, maintain security metrics, develop encryption standards and security advisories, and support incident response and remediation.