Top Security Engineer Jobs

Develop and enhance ASP.NET/C# browser-based middle-tier and front-end applications, perform unit security scanning and remediate PEN test/SSDLC findings, create installation/maintenance documentation, and collaborate with stakeholders, QA, and architects to design and implement secure multi-tier solutions.

Lead a global engineering team to design, deploy, operate, and migrate physical security platforms (Genetec access control and video). Manage Genetec Security Center operations, legacy system cutovers, firmware/patching, incident management, API integrations, and onboarding of biometrics/video analytics. Partner with Network, Cybersecurity, Risk, Facilities, and stakeholders; define KPIs/OKRs and drive continuous improvement.

Pre-sales solution engineer for MuleSoft on Salesforce National Security team supporting US Intelligence customers. Perform technical discovery, demos, POCs, workshops, architecture recommendations, and respond to RFIs/RFPs. Translate technical solutions to business outcomes, partner with sales, and maintain product/certification knowledge. Role requires security clearance and US citizenship, with travel within the U.S.

Triage and respond to cybersecurity incidents in a federal SOC. Analyze alerts from SIEM and other security tools, perform vulnerability scans and compliance monitoring, investigate threats, recommend mitigations, support security tool deployment/integration, and communicate findings to stakeholders.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.

Apply to join Galaxy Ventures' invite-only Talent Network for DevOps, SRE, QA, and Security professionals. Upon acceptance, your profile may be discreetly shared with portfolio companies for relevant roles, and you'll receive invitations to exclusive networking events. Participation is confidential and non-binding.

Design and implement enterprise security architectures, lead AI/ML security (LLMs, GenAI, MLOps), develop security policies, conduct risk assessments, support incident response, mentor junior staff, and enhance cloud, network, IAM, data, and endpoint security.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Design, build, and operate automated infrastructure, CI/CD pipelines, environment configuration, and deployment to improve security compliance. Implement continuous monitoring and assessments, deliver automation for teams, and analyze network data to enhance security and performance.

Designs, implements, and sustains enterprise network security across WAN/LAN/CAN for an Intelligence Community customer. Manages firewalls, load balancers, IDS, and security incidents; conducts risk assessments, develops SOPs, evaluates new technologies, and liaises with leadership and the Designated Approving Authority.

Lead Security Engineer responsible for designing and implementing security strategy across cloud (GCP), container (Docker), CI/CD, and application security. Perform threat modeling, penetration testing, vulnerability management, incident response, and ensure compliance (HIPAA, SOC-2, PCI-DSS). Initially hands-on, then lead and mentor a team of 2–8 engineers while collaborating with product teams and reporting to the CTO.

Design, review, and build security systems for Skydio's cloud and corporate environments. Drive architecture and hands-on engineering for tooling (WAF, vuln management), harden production components, improve monitoring/patching, support identity/auth systems (SSO/SCIM), translate compliance requirements into controls, and participate in on-call rotation.

Design, review, and build security systems for multi-tenant cloud and corporate environments. Develop internal security tooling (WAF, vulnerability management), harden production components, improve monitoring/patching, contribute to authentication/identity (SSO/SCIM), translate compliance controls, and participate in the security on-call rotation.

Design, build, and scale HSM-backed cryptographic and key-management services for large-scale cloud environments. Implement PKI, TLS, client-side encryption, TEEs, and Confidential VMs. Integrate identity (OAuth/SAML/Keycloak) and secure Google Workspace services. Ensure cryptographic lifecycle, compliance (FIPS), high availability, and support secure deployments across cloud APIs, OS, and hardware.

Support and improve application security by implementing and operating SAST/DAST, API and container security solutions; triage and resolve security issues; collaborate with dev and product teams; participate in on-call rotation; drive projects to completion and integrate security into DevSecOps practices.

Lead design, implementation, and continuous improvement of IAM solutions (PAM, SSO, IGA, CIAM, MFA, AD). Configure and integrate IAM tools, automate user lifecycle, support governance/compliance, mentor engineers, lead projects, participate in on-call rotation, and drive security posture improvements.

Manage and optimize the SIEM/SOAR platform: ingest/normalize logs, build integrations and automation, tune detections, support SOC investigations, create dashboards/reports, and improve platform performance and data fidelity.

Lead accreditation efforts, perform risk assessments, and manage cybersecurity engineering and secure SDLC practices. Collaborate with cross-functional teams to ensure system and application security, implement risk management frameworks, and drive compliance and secure software development processes.

Lead product security across the platform: design secure-by-default architectures, define authentication/authorization and data protection strategies, mitigate emerging risks, embed security across development lifecycle, and mentor engineers to raise security standards.

Lead product security architecture and embed security across the SDLC. Define authentication, authorization, data protection, and supply-chain controls. Mentor engineers, collaborate with product teams, identify and mitigate security risks, and implement scalable, secure-by-default frameworks across the stack.

Lead design and implementation of cloud security controls across AWS/GCP, Kubernetes, and serverless environments. Harden infrastructure, automate IAM and secrets management, integrate security scanning into CI/CD, operationalize vulnerability management and threat modeling, and partner with engineering to embed DevSecOps practices across AI-driven workflows.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.

Lead strategy, architecture, governance, and lifecycle of enterprise physical security platforms (access control, video, visitor management, badging, alarms). Support modern endpoint and mobility platforms, drive integrations with infrastructure, lead deployments, troubleshoot incidents, manage vendors, document standards, and mentor teams while aligning security and operational objectives.

Lead cybersecurity evaluations, define item boundaries and cybersecurity concepts, and perform ISO/SAE 21434-compliant threat analysis and risk assessments (TARA). Define and manage security requirements and risk treatments for self-driving platform features, collaborate with engineering and safety teams across the product lifecycle, and maintain standards compliance across multiple projects.

Serve as the cybersecurity SME for the generation fleet: lead segmented architecture deployments and vulnerability remediation, develop fleet-wide standards, oversee compliance audits, lead incident root-cause analysis, build dashboards/metrics, and represent cybersecurity on capital projects and plant upgrades.