Top Security Engineer Jobs

Leads application security assessments, secure code reviews, penetration testing, threat modeling, and vulnerability management. Partners with engineering teams to embed security into the SSDLC, CI/CD pipelines, cloud-native platforms, APIs, and AI-enabled applications. Manages SAST, SCA, DAST, secrets scanning, and related tooling while advising stakeholders on risk, remediation, and security standards.

Supports the full threat and vulnerability management lifecycle, including vulnerability assessment, risk prioritization, remediation tracking, validation, reporting, threat intelligence research, asset ownership validation, governance, audit support, and security automation. Partners with infrastructure, application, cloud, and technology teams to reduce enterprise security risk and improve vulnerability management processes.

Manage and continuously improve the enterprise vulnerability management program. Responsibilities include identifying, validating, prioritizing, tracking, and verifying remediation of vulnerabilities across on-premises, cloud, application, infrastructure, and network environments. The role also handles threat intelligence, security automation, platform integrations, exception governance, critical vulnerability response, metrics, reporting, audits, and cross-functional remediation coordination.

Designs and leads enterprise network security architecture across hybrid, multi-cloud, and operational technology environments. The role drives SASE and ZTNA migration, Zero Trust implementation, network segmentation, cloud security, NDR, PKI, encryption, infrastructure automation, and policy enforcement. It provides technical leadership during incidents, establishes engineering standards and metrics, evaluates emerging technologies, leads modernization initiatives, and mentors cross-functional security, cloud, infrastructure, and network teams. The position follows a hybrid schedule with rotating 24/7 on-call responsibilities.

Designs, deploys, and manages secure network infrastructure across GCP and AWS. Responsibilities include network segmentation, cloud security architecture, Infrastructure as Code, CI/CD automation, compliance, container security, and securing cloud-to-on-premises traffic. The engineer collaborates with cloud teams and business stakeholders, contributes to strategic roadmaps, and develops automated, resilient solutions using Terraform, Python, Golang, Kubernetes, and cloud SDKs.

Configure, deploy, monitor, troubleshoot, and maintain enterprise network access control, Cisco ISE, NAC, IDS/IPS, firewall, and network security solutions in a 24/7 environment. Develop security designs, network diagrams, implementation plans, bills of materials, risk documentation, and change plans. Resolve escalated LAN and NAC issues, support projects and tickets, coordinate with vendors and IT teams, and provide network security expertise to customers and management.

The Security Engineer role involves identifying vulnerabilities, automating tasks in penetration testing, and creating security reports for various audiences.

Designs, implements, and manages enterprise IT security solutions. Partners with architects, developers, and leadership on security plans; identifies system vulnerabilities; strengthens user access controls, networks, applications, and security platforms; maintains protective tools; and mitigates risks associated with complex projects. The role requires extensive enterprise IT experience and supports the security and resilience of a large e-commerce organization.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

The Customer Security Engineer will deliver pentesting services, support customers throughout the process, and translate findings into actionable next steps to improve security.

Own end-to-end security for SideShift’s web app, APIs, iOS app, cloud infrastructure, identity systems, payment flows, and AI-agent workflows. Responsibilities include threat modeling, secure code review, secrets management, cloud security, fraud prevention, detection and incident response, penetration testing, vulnerability disclosure, CI security controls, and customer security reviews. The role requires production coding experience, application and cloud security expertise, and in-person work five days per week in NYC.

Implements and sustains cybersecurity at a manufacturing plant, including vulnerability remediation, endpoint security, incident response, disaster recovery, readiness assessments, and OT patching and firmware updates. Coordinates cybersecurity work plans and remediation across plant operations, IT, suppliers, and global teams. Communicates risks and potential production impacts, documents activities, tracks issues through resolution, and improves operational resilience while minimizing disruption to manufacturing.

Designs, deploys, and operates network security monitoring for sovereign and government cloud environments. Responsibilities include managing firewalls, proxies, IDS/IPS, and traffic inspection platforms; building telemetry pipelines; developing detections and alerts; analyzing packet captures and security logs; automating detection and incident response workflows; integrating monitoring platforms; creating operational dashboards; and leading incidents and on-call operations.

Leads the design, implementation, and evaluation of security controls for AI systems across AWS and corporate environments. Researches AI threats and vulnerabilities, develops security architecture and standards, supports AI governance, monitors systems, and participates in AI R&D initiatives. Provides technical guidance to engineering, product, IT, risk, and cyber defense teams while advancing AI-enabled security operations and risk management. The role also requires secure SDLC, DevSecOps, threat modeling, vulnerability management, cloud security, and automation expertise.

Designs, implements, and maintains information security systems and network security infrastructure for an intelligence customer. Responsibilities include RMF and A&A compliance, security policy and documentation, incident response, vulnerability remediation, audit and log analysis, security configuration, infrastructure troubleshooting, and AWS-based security solutions. The engineer supports firewalls, gateways, IDS, load balancers, and monitoring tools while collaborating with developers, system engineers, project managers, and users.

Leads implementation, support, and lifecycle management of enterprise Cisco ISE and network access control solutions. Designs authentication, authorization, device visibility, posture assessment, segmentation, and Zero Trust capabilities across wired, wireless, VPN, and cloud-connected environments. Integrates ISE with identity, certificate, endpoint, SIEM, and orchestration platforms; troubleshoots complex access issues; develops automation and security standards; supports risk controls and audits; partners with technology teams and vendors; and mentors junior engineers.

Designs and delivers cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection systems. Develops automation for vulnerability management, detection, and compliance monitoring; advises on incident response and forensics; integrates security into enterprise platforms; evaluates security technologies; establishes engineering standards; and supports security tools. Requires at least five years of cybersecurity or IT experience, cloud experience, and experience implementing automated security solutions.

Designs, implements, and maintains cybersecurity architecture across SIEM, firewalls, intrusion prevention, DLP, vulnerability management, endpoint protection, IAM, and zero-day defense technologies. The role monitors security systems, responds to threats, documents configurations, supports compliance with financial-sector regulations, conducts risk assessments, and provides Tier 2 and on-call support. It also requires collaboration with IT, compliance teams, vendors, and third-party providers.

Leads the operation and security of classified DoD network infrastructure. Configures and troubleshoots Cisco routers, switches, LAN/WAN, VPN, and VMware environments; monitors network health; manages access controls, software updates, licensing, and patching; supports incident response and vulnerability remediation; maintains documentation; and assists with RMF, continuity planning, and enterprise system integration.

Build and mature enterprise IAM and CIAM capabilities, including identity lifecycle management, RBAC and ABAC, access reviews, authentication, authorization, PAM, and access governance. Integrate identity platforms with enterprise applications, investigate access issues, perform risk and compliance assessments, support audits, document controls, and remediate findings. Partner with cybersecurity, IT, auditors, application owners, and business stakeholders while mentoring operations staff and improving IAM processes aligned with NIST, NYDFS, Zero Trust, and least-privilege principles.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Establishes a security engineering practice, develops production Go code, and secures cloud and container infrastructure across multiple providers. Responsibilities include access controls, network defenses, credential handling, workload isolation, audit logging, application security, and secure coding. The engineer also builds security capabilities for external users and advises client technical teams on platform security requirements.

The job description provides no role-specific responsibilities or qualifications. Based on the title, this role likely focuses on securing products and identifying or mitigating application and product security risks.

Manages enterprise information assurance and cybersecurity support for DHS/TSA, including incident response, vulnerability management, risk and compliance services, RMF-based assessment and authorization, security audits, POA&M remediation, and security architecture. Coordinates cybersecurity teams, stakeholders, system owners, and government offices while monitoring performance, identifying risks, and recommending mitigation strategies.

Implements and operates AWS security controls, performs vulnerability scanning and security testing, tracks remediation, supports NIST 800-53 and FedRAMP ATO evidence, operates continuous monitoring and threat-detection tools, automates DevSecOps security, and supports incident response and forensics.