Top Security Engineer Jobs

Support DoD cloud security by implementing NIST/FedRAMP/DoD controls, configuring IAM/RBAC/Zero Trust, conducting vulnerability assessments and incident response, and producing SSPs, SARs, and POA&Ms to ensure compliance.

Lead security consulting across IT and applications: drive Secure Development Lifecycle, run source-code analysis (Fortify), perform network and WLAN security assessments, penetration/red-team engagements, firewall policy design, ensure PCI/HIPAA/SOX compliance, and provide security training and threat modeling.

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Lead application security efforts: perform automated and manual analyses (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD/DevSecOps pipelines, support developers on secure design and remediation, lead threat modeling and documentation. Work on mission-critical DoD software; must be U.S. citizen and able to obtain DoD Secret clearance.

Designs, implements, and operates enterprise security solutions; monitors and responds to security events; leads vulnerability assessments; creates security policies and procedures; ensures regulatory/HIPAA compliance; mentors IT security staff and coordinates with vendors and compliance teams to improve security posture.

Administer, integrate, automate, and optimize enterprise security tools. Develop APIs, scripts, and automation for tool interoperability. Design vulnerability scanning strategies and SIEM data models. Build dashboards and alerts for SOC/CDM stakeholders, aggregate logs and asset data, support audit readiness, and use CI/CD, containers, and cloud-native automation to improve security engineering workflows.

Support security and architecture team to design, accredit, and maintain systems handling extremely sensitive data across multiple network fabrics and cloud/on‑prem environments. Lead A&A activities, incident response, POA&M tracking, cloud cost optimization, vulnerability focal duties, technical reviews, and support adoption of security tools and encryption solutions.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead assessments, design secure infrastructure and controls, implement scalable security solutions, operate and administer enterprise security tools, drive vulnerability management, incident response, and risk analysis, and report security posture to stakeholders and senior leadership.

Serve as a trusted security liaison embedding security-by-design into product and business lifecycles. Lead early security discussions, translate business objectives into risk-oriented priorities, maintain risk registers, track metrics, and coordinate cross-functional mitigation to enable innovation while managing risk.

Lead and shape Outtakes security function as the second security hire: secure cloud infrastructure (AWS, EKS, Vercel, Supabase), build detection & response (SIEM/SOAR), design secrets and access management, implement secure-by-default patterns, and perform hands-on incident response while partnering with engineering to balance security and velocity.

Provide Tier-3 support and maintenance for Microsoft Active Directory and related Windows Server environments. Serve as SME for AD escalations, troubleshoot outages, advise customers on preventative configurations, and support VMware virtualization. Requires a security background and hands-on server engineering skills. 12-month contract with option to hire; must be GC/EAD or US citizen.

Lead secure design, deployment, and governance of cloud systems; assess and mitigate cloud risks; integrate security into CI/CD; perform threat modeling; evaluate third-party cloud tools; support incident response, audits, and regulatory compliance in a financial environment.

Design, implement, and support network security and firewall solutions. Lead security architecture, policy optimization (Firemon), change monitoring, and incident/level 2-3 operational support. Deliver consulting, on-site implementations, and 24x7 response for P1/P2 incidents.

Lead threat modeling, secure design reviews, penetration testing and deep code review for Unity products. Build and operate security automation and AI-assisted tooling, secure AI/LLM integrations and agentic systems, drive remediation with engineering teams, investigate AppSec incidents, and contribute to the secure development lifecycle and compliance.

Lead security architecture design, implement and troubleshoot firewall and network security solutions, operate FireMon policy optimization, provide Level 2-3 support, handle work orders/change requests/incidents, and deliver on-site/remote consulting and 24x7 response for critical incidents.

Work with development teams to identify, assess, and remediate application security vulnerabilities; perform risk-based assessments and penetration tests using static and dynamic tools; integrate security tooling (including AI-driven code analysis) into CI/CD; review commits/PRs and architecture changes; provide training and risk reporting; research new attack vectors and consult on secure designs.

Advise cloud, IAM, and engineering teams on secure configurations, architecture reviews, CSPM remediation, logging/monitoring, and incident response for primarily Azure (plus AWS/GCP). Support audits, documentation, ISO27017 activities, and participate in on-call security rotations.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.

Build and maintain scalable security platforms, automation, and tooling to protect data across SaaS, cloud, endpoints, collaboration tools, AI systems, and data warehouses. Develop data discovery, classification, governance, DLP, DSPM/SSPM, insider-risk, and access controls; leverage AI and automation to improve detection, prevention, and incident workflows while partnering with cross-functional teams.

Provide cybersecurity engineering and architecture for mission and enterprise systems, translate NIST/CNSS controls into secure designs, troubleshoot Linux/Windows servers and endpoints, Cisco network devices, and enterprise storage, implement continuous monitoring (vulnerability scanning, SIEM), perform technical security assessments using Tenable and DISA STIGs, prioritize risk, and lead remediation efforts to maintain compliance and mission assurance.

Lead network security architecture and firewall projects, implement and operationalize FireMon policy optimization, provide L2-L3 support and 24x7 response for priority incidents, handle work orders, change requests, and customer-facing consulting engagements.

Design and implement cloud security controls across multi-cloud environments, harden Kubernetes clusters, enforce IAM and least-privilege, manage IaC security, run CSPM and container scanning, automate compliance evidence, and monitor runtime container security.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.