Top Security Engineer Jobs

Design and consult on network security architecture, lead security implementations, provide L2-L3 operational support, handle work orders/change requests/incidents, perform on-site deployments, and respond 24x7 to P1/P2 incidents.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Design and build security features across product, cloud, and infrastructure. Anticipate vulnerabilities, implement secure defaults, enable developer-friendly security, and ship robust protections for code, agents, and tooling.

Hands-on senior security engineer role building and operating cryptographic, key-management, and signing services for Citi's digital assets platform. Develop Java backend services, integrate and operate HSMs, implement MPC/TSS schemes, enforce crypto best practices, embed CI/CD security tooling, and lead threat modeling and incident escalation.

Design, build, and operate Linero's secure, compliant cloud platform. Own networking, compute, storage, access controls, CI/CD, IaC, observability, and incident response. Embed FedRAMP requirements, run vulnerability management and audits, and establish monitoring, on-call, and operational runbooks to support product teams and enterprise customers.

Design and implement security architectures and deployment strategies, operate and tune security tools (firewalls, NIDS/HIDS, SIEM, endpoint protection), improve SOC workflows, gather requirements, recommend compliant solutions (PCI/HIPAA/SOX), support customers and C-level stakeholders, write SOWs/proposals, and provide technical leadership.

Perform automated and manual penetration tests on applications and infrastructure, assess security controls and network devices, document findings, and support remediation with development teams following industry best practices and frameworks.

Perform TEMPEST/EMSEC testing and signal analysis on cryptographic and COTS equipment, record and report results, identify and mitigate emanation vulnerabilities, work with vendors and project teams to verify test requirements (CTTA/NSITSSAM), and validate IASRD application while supporting onsite customer mission needs.

Implement and lead Cortex XSOAR security automation and incident response for customers. Develop playbooks, integrate with security technologies (SIEM, IDS/IPS, endpoints), troubleshoot networks, communicate with stakeholders, and lead teams to operationalize security automation.

Lead configuration, integration, tuning, and optimization of enterprise security platforms across endpoint, network, email, cloud, and identity. Perform advanced incident analysis and containment, drive post-incident hardening, manage telemetry/logging and vulnerability scanning, support penetration testing, recommend platform improvements, maintain security architecture documentation, and participate in a 24/7 on-call rotation.

Lead security architecture design and implementations, provide L2-L3 support and 24x7 incident response, manage work orders/change requests, perform on-site technical implementations and client consulting, and ensure delivery of enterprise security solutions.

Build and ship security-first systems across backend services, APIs, and infrastructure. Own identity, access control, auditability, and data lifecycle primitives. Secure agentic AI by enforcing runtime policies, sandboxing agents, and preventing data leakage. Automate security workflows and developer tooling (CI/CD checks, schema validation, runtime monitoring).

Design, build, and maintain developer-focused security tooling and automation. Deploy and optimize Wiz and Fastly WAF across CI/CD and Kubernetes, integrate cloud security tooling, perform code reviews and threat modeling, and build AI-assisted workflows to scale product security.

Design and develop secure cloud and embedded networking software, lead architecture and implementation of end-to-end solutions, evaluate and integrate new technologies, mentor engineers, ensure compliance with development standards, and collaborate on deployment, monitoring, and support for cloud engagements.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Manage and configure SAP security and GRC controls, monitor critical access, design SoD matrices and mitigating controls, support user provisioning, troubleshoot security issues, implement continuous monitoring and audit controls, and manage security changes across the SAP landscape.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Provide Level III administration, troubleshooting, and recovery for a large Global Active Directory environment. Configure and diagnose domain infrastructure (DNS, DHCP, ADLDS, ADFS, FIM Sync), Windows servers, RADIUS/NPS, Office365/Azure identity integration, and federation protocols. Support M&A AD activities, perform outage communications, rotate on-call shifts in a 24x7 operations center, and apply remediation procedures for hardware/software failures.

Lead the security design, architecture, and implementation for an enterprise AI platform. Define secure deployment patterns, embed security into CI/CD and operations, secure GenAI workflows, and lead customer security reviews and compliance activities for Fortune 1000 deployments.

Investigate and remediate embedded firmware vulnerabilities, analyze firmware packages and exposed interfaces, support secure boot/firmware signing and update validation, conduct threat modeling and risk assessments, manage vulnerability response workflows, maintain SBOMs and supplier security documentation, ensure compliance with cybersecurity standards, and collaborate with firmware, QA, and compliance teams on security testing and release readiness.

Lead design and implementation of embedded device security across firmware, OS, and cloud interfaces. Perform threat modeling, architect hardware-backed identity and secure key management, implement TrustZone/TEE/kernel solutions, integrate biometric sensor security, and apply secure SDLC and vulnerability management practices across multi-disciplinary teams.

Provide survivability and vulnerability research, security assessments, and information assurance analysis to inform USCENTCOM requirements. Develop transformational concepts, perform technical and programmatic analyses, and support Force Protection, campaign plans, and theater strategy integration.

Lead cloud and infrastructure security and detection engineering: deploy SIEM, author MITRE-mapped detections, build cloud security posture and IaC gates, own incident response playbooks and SOC 2 Type II operational evidence, and drive vulnerability remediation and security reporting.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Develop and maintain Java/Java EE applications with a strong focus on security: SSL, cryptography, authentication/authorization (LDAP, SSO, SAML, OAuth, x509, WS-Security), PCI compliance, configurable data security, scripting, audits/compliance across projects, independent problem-solving, and managing parallel tasks.