Top Security Engineer Jobs

Designs, implements, and supports secure cloud infrastructure across Azure, AWS, and GCP. Develops reusable Infrastructure as Code, automation, CI/CD pipelines, and Policy as Code solutions while enforcing IAM governance and security controls. Partners with application, infrastructure, and security teams to support cloud adoption, evaluates architectures and emerging services, establishes secure standards, and troubleshoots complex identity, cloud, and infrastructure issues.

Own product security for Lambda’s AI cloud infrastructure, including threat modeling, design reviews, multi-tenant isolation, code and infrastructure-as-code vulnerability remediation, security tooling, vulnerability management, enterprise security reviews, and secure engineering patterns. Partner across product engineering, data center operations, detection and response, and GRC while mentoring engineers and building Python or Go automation.

Develop and execute software engineering security strategy across Android devices, AWS, payment products, CI/CD, containers, and software supply chains. Implement security tooling, vulnerability management, code signing, cloud and container controls, Android/AOSP hardening, threat modeling, and secure design reviews. Establish metrics, support compliance and certifications, remediate findings, and coach engineering teams while partnering across security, product, quality, compliance, and external organizations.

Own day-to-day security operations across a hybrid AWS, Azure, and on-premises environment. Responsibilities include alert investigation, vulnerability management, endpoint protection, access reviews, incident response, PCI DSS evidence collection, detection engineering, security awareness training, and on-call support. The role also supports periodic physical security activities at the Long Island data center and coordinates audits, remediation tracking, and compliance documentation.

Leads application, infrastructure, and cloud security initiatives; performs threat modeling and risk assessments; manages incident response; builds security automation; supports SOC 2 and PCI compliance; improves vulnerability remediation and security controls; partners with engineering and operations teams; provides secure coding education; and mentors security engineers.

Run vulnerability management and security scanning across cloud, platforms, containers, applications, endpoints, and SaaS. Secure Azure and Kubernetes environments, establish hardening baselines, review infrastructure-as-code and architecture changes, and embed security checks into delivery pipelines. Perform ISO 27001 control testing, maintain audit evidence, automate security operations with AI-assisted workflows, drive remediation, report risk trends, and contribute to the security roadmap.

Develops and maintains enterprise security baselines using CIS Benchmarks, DISA STIGs, and NIST guidance. Supports vulnerability management, remediation, compliance, risk assessments, authorization, continuous monitoring, audit readiness, and secure configuration implementation. Researches vulnerabilities through NVD and CVE resources, translates technical requirements into FISMA and client-specific controls, and creates technical security documentation. Requires Public Trust eligibility and collaboration with engineering, operations, and cybersecurity teams.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Designs, integrates, administers, and manages enterprise physical security systems, including access control, video surveillance, and intrusion detection. Provides Tier 3 troubleshooting, root cause analysis, lifecycle planning, compliance support, system integration with Active Directory and network infrastructure, and technical project support. Partners with IT, Facilities, Security Operations, and vendors to improve reliability, security, scalability, and availability across multiple healthcare facilities.

Hands-on Security Engineer responsible for IAM administration, access controls, vendor risk assessments, incident detection and response, security tool configuration, monitoring, alert tuning, and security program development. The role partners with internal IT teams and external MSSP/MDR providers, supports incident response and compliance activities, develops policies and playbooks, and participates in 24/7 incident escalation coverage.

Administer and optimize Splunk Enterprise Security, develop SIEM use cases and threat detection searches, create alerts and dashboards, analyze security events, monitor logs, troubleshoot issues, integrate SOAR solutions, automate security workflows, and support incident response and continuous improvement of security operations.

Design and embed security into connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, firmware updates, key management, HSMs). Integrate security into SDLC and CI/CD, define V&V activities (pen tests, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA guidance, IEC 81001-5-1, ISO 14971 and relevant NIST frameworks.

Leads cybersecurity architecture for cloud-based digital health platforms, connected medical-device ecosystems, web and mobile applications, APIs, and remote monitoring services. Responsibilities include defining security requirements, threat modeling, risk analysis, identity and access controls, encryption, secrets management, SBOM requirements, DevSecOps controls, monitoring, vulnerability management, and compliance readiness. The role coordinates audits, evidence collection, remediation, regulatory submissions, and security programs involving engineering, quality, privacy, IT, and business stakeholders.

Design, build, and operate secure, reliable cloud software platforms and distributed systems. Develop backend APIs, data ingestion pipelines, workflows, automation, and agentic pipelines. Lead architecture, implementation, testing, deployment, observability, and production support while writing high-quality Python code. Provide technical leadership, mentor engineers, document systems, and evaluate cloud-native, AI, and workflow technologies.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Leads organization-wide product security response architecture and software system development for AI and automation initiatives. Evaluates technologies, designs multi-platform architectures, reviews projects for security and development compliance, mitigates failure risks, influences executive and external stakeholders, and mentors engineers. The role requires deep software architecture expertise, testing methodology experience, innovation, strong communication, and 10+ years of experience.

Supports the development, testing, deployment, and maintenance of secure Windows, web, and cloud-based software applications. Responsibilities include coding, debugging, unit testing, code reviews, Agile participation, secure coding, troubleshooting, cloud monitoring, and release support under senior engineer guidance. Collaborates with cross-functional teams to deliver reliable software solutions while learning software engineering and security best practices.

Develop and test endpoint security software, support AI/ML initiatives on devices, build prototypes, analyze requirements, debug and document code, and evaluate AI applications for security and user experience. Collaborate with engineering, security, and product teams while presenting technical findings. The internship requires Python and another programming language, software engineering fundamentals, testing and version-control experience, and enrollment in a relevant master’s program.

Designs, develops, and tests enterprise device-security software and automation tools. Analyzes telemetry to identify risks, supports Azure and AWS integrations, develops security proofs of concept, troubleshoots defects, and documents technical solutions. The intern participates in code reviews and Agile development while collaborating with engineering, cloud, security, UX, and product teams.

Designs, implements, configures, troubleshoots, and supports enterprise network security solutions including DLP, WAF, SSE, firewalls, proxies, and zero-trust technologies. Partners with cybersecurity, architecture, vendors, and managed service providers to maintain security controls, investigate incidents, improve policies, monitor DLP events, and deliver secure enterprise architectures. Serves as a subject matter expert, escalation point, mentor, and contributor to strategic planning, documentation, training, and proof-of-concept initiatives.

Security Engineer responsible for securing and scaling on-premises datacenter, cloud, compute, systems, and networking environments. Duties include secure architecture, Infrastructure-as-Code, firewall and switch management, DevSecOps and CI/CD security integration, resilient infrastructure, incident response, vulnerability scanning, monitoring, logging, and detection engineering. The role requires hands-on infrastructure experience, cloud and virtualization knowledge, strong networking fundamentals, server and workstation management, and end-to-end operational ownership.

Lead a team building automated systems and tools to discover, explain, and remediate vulnerabilities in native Windows code. Develop scalable detection methods, enable automated security testing for developers, collaborate with product teams, and drive team clarity and execution.

Designs, implements, tests, and maintains embedded cybersecurity and anti-tamper solutions for DoD weapon systems. Conducts threat modeling, vulnerability analysis, risk mitigation, security requirements decomposition, verification, and assessment and authorization activities. Integrates security across hardware, firmware, software, and systems engineering while addressing supply-chain risks, NIST controls, cryptography, and critical program information protection.

Perform system administration, deployment, integration, testing, configuration, and Tier-3 support for SIGINT collection and geolocation systems. Manage Linux, Kubernetes, containerized, cloud, and DevSecOps environments; troubleshoot critical operational issues; provide 24/7 support; integrate systems with enterprise infrastructure and databases; maintain technical documentation; and support system standards management. Travel is required for installation, maintenance, and troubleshooting.

Performs security assessments, validates system security requirements, designs and integrates information assurance solutions, and mitigates cybersecurity risks across networking and multi-enclave environments. Supports security architecture, trusted system relationships, risk management, certification and accreditation, compliance reviews, and security planning for national security programs.