Top Security Engineer Jobs

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Design, implement, and operate Apollo’s security controls across identity, cloud infrastructure, endpoints, and incident response. Build secure-by-default systems, evaluate security vendors, lead security projects, shape the roadmap, and promote effective security practices across the organization. Key initiatives include zero-trust migration, agentic SOC development, sandbox hardening, third-party access reviews, incident response, and penetration-testing tooling.

The Cloud Security Engineer will design, implement, and maintain cloud-based security services, ensuring consistent integration of security in DevOps practices and collaborating on security compliance and vulnerability management.

Develop ROM code, bootloaders, and runtime firmware for secure enclaves in custom ASICs supporting secure boot, attestation, OTA updates, provisioning, telemetry, recovery, and tamper monitoring. Collaborate with hardware and communications engineers on interfaces, pre-silicon development, integration, and validation. Support post-silicon ASIC bring-up, debugging, and embedded firmware validation.

Designs, deploys, and integrates secure Google Cloud Platform and Microsoft Azure environments with existing infrastructure. Implements cloud-native security controls, monitors compliance, investigates and remediates complex security incidents, automates controls through CI/CD pipelines, and enforces regulatory requirements. The role also evaluates cloud security tools, documents best practices, collaborates with technical teams, and mentors junior security staff.

Conducts technical security assessments and RMF activities for complex information systems. Develops security assessment plans, authorization packages, system security plans, contingency plans, POA&M reports, and mitigation recommendations. Collaborates with system owners, security officers, developers, and IT operations to categorize systems, assess controls, document risks, and support continuous monitoring. The role requires independent coordination with stakeholders, strong NIST RMF knowledge, and eligibility to obtain and maintain a customer clearance.

Leads global physical security design standards across BNY locations. Develops specifications for access control, video monitoring, perimeter controls, and specialized secure spaces; oversees security design for office construction and renovation projects; applies CPTED principles; partners with architects, facilities teams, construction managers, vendors, and stakeholders; ensures compliance with codes, enterprise standards, audit requirements, and evolving security threats.

Conduct technical security assessments and risk assessments for complex information systems under NIST RMF guidelines. Develop security assessment plans, Security Assessment Reports, POA&M reports, authorization packages, system security plans, and contingency plans. Coordinate assessments with system owners, security officers, developers, and IT operations personnel. Support IA RMF and continuous monitoring programs, provide remediation recommendations, and independently manage assessment activities.

Provide SIEM, SOAR, and security platform engineering support; develop detection content, dashboards, and automations; lead Tier 3 incident investigations and response; create configuration standards and documentation; provision cloud resources with infrastructure-as-code; maintain CI/CD, secrets, and EDR systems; ensure asset hardening and observability across the estate.

Leads security engineering across application, cloud, infrastructure, and on-premises environments. Designs security controls, vulnerability-management processes, patching cycles, image refreshes, cloud guardrails, network isolation, WAF, identity, and secrets-management practices. Prioritizes remediation using CVSS, EPSS, CISA KEV, and SLA-driven metrics. Provides technical direction, reviews fixes, mentors engineers, builds standards and runbooks, and coordinates cross-functional security initiatives globally without direct people-management responsibility.

Secures and hardens application, cloud, infrastructure, operating systems, containers, CI/CD pipelines, and networks across multi-cloud and on-premises environments. Improves patching and golden-image processes, scales AI-assisted SAST and SCA tooling, prioritizes vulnerabilities, validates fixes, tracks remediation metrics, creates reusable tooling and runbooks, mentors junior engineers, and partners with application and platform teams to deliver security improvements.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Secure and scale cloud infrastructure by implementing CI/CD, hardening DigitalOcean and other cloud environments, managing certificates and DNS, integrating IAM/SSO and KYC providers, applying DevSecOps practices, automating infrastructure as code, participating in incident response, and collaborating with engineering teams to optimize deployments and reduce downtime.

Support and mature the cybersecurity Site Reliability Engineering capability for critical security platforms. Operate SIEM, XDR, CyberArk, SOAR, NDR, IPS, and related systems; perform monitoring, incident response, problem management, and root cause analysis. Build automation with Python, Ansible, APIs, and infrastructure-as-code. Maintain observability dashboards, define SLIs and SLOs, document runbooks, support production handovers, participate in on-call duties, and conduct disaster recovery and resilience testing.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Owns security and compliance across IT, software development, GCP infrastructure, and subprocessors. Responsibilities include managing SecOps tools, improving software security posture, conducting security and AI audits, maintaining compliance artifacts, developing data and AI governance, vetting technologies, and managing contractual security obligations. The role partners with engineering teams and requires experience with Vanta, cloud DevOps, infrastructure as code, identity platforms, security reviews, and regulated industries.

Lead design and delivery of Agentic AI IAM and secrets management across hybrid environments. Build secure authentication/authorization, centralized secrets vaulting, automated rotation, governance, monitoring, and operational metrics. Partner with infrastructure, cloud, DevOps, application, and risk teams to implement Zero Trust, machine identity security, and AI agent safeguards while driving enterprise program execution and compliance.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Build and own a multi-tenant platform connecting enterprise customers and sovereign deployments to inference infrastructure. Responsibilities include authentication, tenant isolation, quotas, rate limiting, usage metering, entitlements, public inference APIs, SSO, access controls, audit logs, data residency, and security testing. The role requires strong Python and backend or platform engineering expertise, API design experience, and familiarity with billing, credits, reconciliation, regulated environments, and enterprise identity systems.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Designs, implements, and maintains cybersecurity infrastructure across networks, servers, workstations, applications, and cloud environments. Responsibilities include firewall administration, security monitoring, vulnerability scanning, intrusion detection, access auditing, compliance documentation, security architecture, policy development, disaster recovery planning, and incident prevention. The role also evaluates security products, leads concurrent projects, collaborates with IT teams, mentors security staff, and develops security awareness materials.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Designs, develops, and operates encryption, tokenization, and key management platforms that protect sensitive data. Leads secure, scalable architecture and production implementation, ensuring high availability, disaster recovery, observability, compliance, and auditability. Partners with security, compliance, governance, product, and application teams; applies cryptography standards; mentors engineers; and improves platform performance, cost efficiency, reliability, and developer experience. Requires strong software engineering, cloud, SRE, cryptography, stateful systems, CI/CD, and infrastructure-as-code expertise.

Design and implement onboard networking and security for spacecraft: define Ethernet switching/routing, packet and file encryption, FPGA-to-FPGA links and NoC, apply FEC, integrate PHY/MAC, validate link health, and author architectural documentation.

Protect and harden Wolters Kluwer's centralized GenAI platform (FAB) by implementing cloud-native security controls, IAM and least-privilege practices, DevSecOps automation, vulnerability management, security monitoring, and compliance support (SOC 2, HIPAA). Collaborate with engineering and audit teams to integrate security into CI/CD pipelines, triage findings, and support incident response and audit readiness.