Top Security Engineer Jobs

Leads enterprise AWS cloud security architecture, engineering standards, guardrails, automation, governance, and operating models. Advises leadership, resolves complex security challenges, integrates AWS with IAM and cybersecurity ecosystems, and secures cloud-native workloads, infrastructure, applications, and data. Applies AI-assisted development responsibly while ensuring security, compliance, privacy, resilience, and regulatory alignment. Collaborates across cybersecurity, infrastructure, application development, risk, and data protection teams.

Leads enterprise AWS cloud security architecture, engineering standards, guardrails, automation, governance, and operating models. Advises leadership, secures cloud-native and containerized workloads, integrates IAM and cybersecurity platforms, and drives secure cloud transformation in regulated environments. Partners across engineering, infrastructure, risk, application development, and security teams while applying AI-assisted development responsibly and aligning solutions with compliance, privacy, resilience, and ethical requirements.

Serve as the technical leader for enterprise AWS cloud security. Define security architecture, engineering standards, guardrails, automation frameworks, governance, and operating models. Advise leadership, resolve complex enterprise challenges, and collaborate across cybersecurity, infrastructure, IAM, data protection, risk, and application teams. Secure cloud-native workloads, integrate enterprise security ecosystems, apply AI-assisted development responsibly, and ensure compliance, resilience, privacy, and operational objectives.

Build and operate scalable security tooling, applications, APIs, and automation for CrowdStrike’s global multi-cloud Product Security environment. Responsibilities include software supply chain security, AI-powered vulnerability discovery, platform visibility, risk assessments, CI/CD, SRE operations, datastore management, monitoring, and incident response support. The role partners across Product Security to define tooling strategy and maintain mission-critical security services.

As a Security Engineer at Remitly, you'll enhance security controls across infrastructure and SaaS, automate tooling, manage MDM policies, and participate in security assessments and operational improvements.

Secure ServiceNow instances by assessing configurations against security baselines, identifying misconfigurations, validating customer-reported findings, and providing actionable remediation guidance. The role develops hardening guidance, distinguishes product vulnerabilities from configuration issues, partners with Product Security and Engineering, supports customer escalations, and drives scalable improvements to security tooling, detection, and risk-reduction processes.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Conduct red-team assessments of formally verified systems, evaluating proofs, specifications, threat models, and trusted computing bases. Build AI-driven vulnerability discovery, triage, and exploit-generation tooling; identify and demonstrate exploitable weaknesses in software and infrastructure. Produce rigorous security reports, publish methodologies, collaborate with domain experts and third parties, and deliver engagements on fixed schedules.

Manage the vulnerability lifecycle across Datadog’s multi-cloud environment, including detection, impact assessment, prioritization, remediation, and verification. Build AI-assisted automation, tools, and workflows that reduce engineering toil and address vulnerabilities earlier in the SDLC. Analyze remediation failures, identify root causes, partner with security and engineering teams, and provide vulnerability-management expertise for SOC 2, HIPAA, PCI, FedRAMP, and ISO compliance.

Deploy, integrate, and operate enterprise threat and vulnerability detection platforms (Tenable VM). Conduct vulnerability assessments, manage remediation, configure scans and reporting, ensure FedRAMP/NIST compliance, implement security controls, collaborate cross-functionally, and mentor junior engineers.

Owns GitLab’s global security awareness and human-risk program, including training, phishing simulations, behavior-change initiatives, security culture campaigns, multimedia content, platform administration, reporting, vendor management, policy support, audit evidence, and remediation tracking. The role requires measurable risk reduction across a globally distributed enterprise and strategic influence across technical and non-technical teams.

Build and maintain scalable security observability, detection, and response systems. Develop AI- and ML-based detections, normalize large-scale security logs, automate incident workflows, respond to alerts and threats, conduct investigations and threat hunts, and participate in detection and response on-call rotations.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Design, implement, and improve security controls for operational technology (OT) networks in datacenter environments. Identify and remediate risks, create inventories and risk registers, coordinate penetration testing and vulnerability mitigation, embed security into OT systems, develop recovery and response playbooks, and present technical findings to stakeholders while partnering with engineering and third parties to reduce risk.

Design, build, deploy, and operate scalable backend security services using REST and/or gRPC APIs. Define service architecture, data models, integrations, and reliability practices while supporting observability, incident response, testing, and continuous improvement. Integrate identity providers, key-management services, HSMs, SIEMs, and access-control systems across customer environments. Collaborate with product, security, infrastructure, and customers, contribute to technical direction, and mentor engineers.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Designs, implements, configures, tests, supports, and troubleshoots physical security systems, including video surveillance, access control, sensors, and integrations. Consults with clients, leads design workshops, develops network architectures, creates test plans, supports sales activities, manages project expectations, and serves as a technical point of contact. Requires consulting, infrastructure/network, physical security systems, client communication, and occasional off-hours work, with 25%–50% travel.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Partner with product, platform, and infrastructure teams to embed security into products and AWS cloud architecture. Conduct application security assessments, code reviews, threat modeling, penetration tests, red-team exercises, and vulnerability remediation. Assess AI and agentic AI capabilities, investigate security findings and customer concerns, support incident response, monitor threat intelligence, and automate security processes. Occasional on-call participation may be required.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Implement, operate, automate, and improve Cargill's global SASE/SSE services. Configure SWG, ZTNA, CASB, DLP, and threat protection; migrate legacy remote-access solutions to cloud-delivered security; troubleshoot, maintain, monitor performance, support disaster recovery, and develop automation and documentation.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Designs, develops, and maintains SOAR and agentic AI security automations for SOC triage and response. Builds Python tools, APIs, integrations, workflows, guardrails, and evaluation processes across SIEM, EDR, threat intelligence, case management, and ITSM platforms. Partners with detection engineering, administers case-management workflows, applies Git-based engineering and CI/CD practices, measures automation effectiveness, and creates technical documentation and runbooks.