Top Security Engineer Jobs

Detect, investigate, and prevent threats across corporate IT by performing incident response, digital forensics, threat hunting, designing security controls and alerts, and deploying and operating security tooling across identity, endpoints, networks and cloud.

As a Security Engineer, you'll embed security in applications, lead assessments, partner with teams for remediation, and drive security improvements.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Designs, implements, and operates security controls across Oracle Cloud Infrastructure, Oracle Cloud Applications, and hybrid Oracle environments. Responsibilities include cloud security architecture, workload hardening, identity and access management, vulnerability and compliance programs, incident response, threat detection, SIEM integration, and automation. The engineer collaborates with cross-functional teams, reviews designs and code, documents solutions, and mentors junior engineers.

Lead strategic security efforts for Microsoft Edge across proactive research, engagement, and incident response. Drive vulnerability research, fuzzing, exploit analysis, code auditing, threat modeling, and AI-assisted security workflows. Guide cross-functional security reviews, define secure architecture and deployment standards, mentor engineers, and coordinate responses to emerging threats while influencing long-term security roadmaps and community collaboration to improve Chromium and web platform security.

Design, implement, and validate secure cloud platform features across hardware, firmware, and software. Develop tools, automation, telemetry, and diagnostics. Drive features from requirements through deployment and resolve complex system-level security issues.

Leads F5’s enterprise incident response and cyber crisis management program, coordinating high-severity cyber and product security incidents from detection through recovery and post-incident review. Owns response governance, playbooks, metrics, executive reporting, tabletop exercises, and operational improvements. Provides technical leadership across cloud, identity, endpoint, application, API, Kubernetes, AI, and product security environments while coordinating engineering, legal, privacy, communications, customer support, and business stakeholders.

Leads the transition and lifecycle management of Intelligence Community Cross Domain Solution RMF authorization packages into Xacta. Develops and maintains security documentation, evaluates controls against NIST and IC requirements, manages remediation and continuous monitoring, coordinates with government and cybersecurity stakeholders, and provides knowledge transfer. The role is on-site at CNMOC Headquarters and requires active TS/SCI clearance.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

Lead design, architecture, and delivery of an enterprise Digital Asset Platform supporting token lifecycle, wallets, smart contracts, interoperability, and onchain settlement. Drive end-to-end platform engineering, collaborate with architects, product and DevOps teams, enforce security, compliance and resiliency, mentor engineers, and influence cross-functional stakeholders to bring tokenized deposits, securities, and client solutions into production.

Supports enterprise network security engineering initiatives, including Cisco ISE and Cisco SNA deployments, access control, authentication, threat visibility, testing, troubleshooting, and system implementations. The role develops security requirements, analyzes network behavior, manages deployment processes, identifies risks, and partners with technical and business stakeholders across a global enterprise network.

Designs, deploys, operates, and maintains endpoint security solutions across workstations, servers, VDI, and mobile devices. Responsibilities include managing CrowdStrike Falcon, Symantec DLP, Skyhigh, and Zscaler technologies; monitoring telemetry and sensor health; troubleshooting endpoint issues; executing upgrades and migrations; supporting SIEM/SOAR integrations, malware coverage, automation, documentation, and security roadmap initiatives.

Designs and maintains security architectures, access controls, identity governance, segregation-of-duties policies, and SAP role administration across public-cloud SAP environments. Implements IAM, SSO, MFA, provisioning, vulnerability monitoring, compliance controls, and HANA security. Supports SAP security incident investigations and remediation while collaborating with cloud, SAP functional, GRC, and integration teams. The hybrid Dearborn role requires occasional travel to suppliers, test houses, and customer sites.

Audits information systems and technical controls for security, compliance, and architectural standards. Monitors firewalls, IDS/IPS, anti-malware, logs, patching, SIEM tools, and audit scans. Investigates incidents and performs forensics, develops security procedures and standards, recommends enterprise security solutions, and provides risk mitigation guidance and compliance reports. The role collaborates with technical and non-technical teams and requires occasional after-hours and weekend support.

Lead cloud and identity security across Snyk's multi-cloud estate (AWS/GCP). Own cloud IAM and least-privilege, CSPM/CNAPP posture, detection and prevention, Kubernetes and enterprise IdP security. Build preventative IaC guardrails, AI/agent automation for remediation and investigations, secure AI adoption and model pipelines, and mentor engineers while participating in on-call rotations and incident response.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Determines project scope and specifications for security device testing and certification projects. Communicates with clients about technical requirements, costs, schedules, and compliance issues. Establishes test programs, reviews samples against UL requirements, coordinates laboratory technicians, prepares reports and procedures, resolves engineering variations, and supports development of UL requirements, test methods, and equipment. The role also includes project administration, continuous improvement, and occasional industry representation.

Oversee the security of firm applications, networks, systems, hardware, and mobile devices throughout their lifecycles. Develop security requirements and architecture, manage controls and configurations, perform certification and accreditation, maintain asset inventories, and ensure secure development and acquisition practices. Collaborate across departments and mentor team members while serving as a primary technical security contact. The role requires independent judgment, strong analytical ability, knowledge of security frameworks and technologies, and at least seven years of related experience.

Embed security throughout the software development lifecycle by partnering with engineering teams to design secure systems, perform code reviews, identify vulnerabilities, and integrate SAST, DAST, SCA, and CI/CD security tooling. The role applies offensive and defensive security practices, cloud security controls, authentication and cryptography expertise, and automation to reduce production risk. Responsibilities also include communicating with technical and non-technical stakeholders and supporting secure software delivery in Agile environments.

Designs, implements, and maintains information security systems and network security infrastructure for an intelligence customer. Responsibilities include RMF and A&A compliance, security policy and documentation, incident response, vulnerability remediation, audit and log analysis, security configuration, infrastructure troubleshooting, and AWS-based security solutions. The engineer supports firewalls, gateways, IDS, load balancers, and monitoring tools while collaborating with developers, system engineers, project managers, and users.

Provides information assurance and cybersecurity engineering for government systems. Responsibilities include security policy and A&A documentation, RMF compliance, incident response, vulnerability remediation, audit and forensic log analysis, network security infrastructure operations, system hardening, security architecture, troubleshooting, and integration testing. The role supports AWS-based environments, perimeter security technologies, security tools, network infrastructure, and collaboration with developers, engineers, project managers, and users.

Designs and implements secure cloud and mobile platforms supporting law enforcement. Responsibilities include developing cybersecurity and infrastructure controls, conducting risk and vulnerability assessments, enhancing threat detection and event correlation, analyzing security data, and developing incident response and cyber resiliency strategies. The role also requires secure architecture guidance, federal compliance, executive briefings, cross-functional collaboration, and potential Public Trust eligibility.

Designs and maintains secure IT services for a Defense Intelligence Agency customer. Responsibilities include implementing Zero Trust and ICAM capabilities, applying RMF security controls, developing cybersecurity test cases, preparing Assessment and Authorization documentation, overseeing security testing and evidence collection, supporting vulnerability remediation, and advising on information assurance, physical security, and special-program controls.

Design and embed product security for connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, updates, identity, key management, HSM). Integrate security into SDLC/CI-CD, lead V&V activities (pen testing, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA, IEC 81001-5-1, ISO 14971, and NIST guidance.

Design and embed security into connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, firmware updates, key management, HSMs). Integrate security into SDLC and CI/CD, define V&V activities (pen tests, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA guidance, IEC 81001-5-1, ISO 14971 and relevant NIST frameworks.