Top Security Engineer Jobs

Develops and manages cybersecurity authorization and compliance packages for complex missile defense systems. Responsibilities include RMF implementation, SSP/IATT/ATC/ATO documentation, vulnerability and risk analysis, security control validation, audit remediation, POA&M tracking, eMASS artifact management, and cybersecurity briefings. The role also leads program planning, coordinates deliverables, supports senior stakeholders, and mentors junior ISSOs.

Design, administer, and modernize enterprise security infrastructure focused on secrets management, certificate lifecycle management, PKI, machine identities, and cloud security. Maintain highly available HashiCorp Vault and Consul environments, support migration to cloud-native secrets platforms, automate infrastructure with Terraform and scripting, manage GCP and AWS security infrastructure, troubleshoot complex access issues, and implement monitoring and alerting. The role also contributes to reliability, disaster recovery, architectural standards, and mentoring.

Leads security engineering across enterprise applications, cloud platforms, networks, and critical infrastructure. Designs and implements security controls, performs monitoring and threat detection, supports incident response and vulnerability management, develops security policies and documentation, and advances cyber resilience and compliance. Provides technical mentorship and may support DevSecOps, container security, AI-enabled applications, cross-domain solutions, infrastructure automation, and cryptographic key management in cleared government environments.

Owns preventative security controls and security hygiene initiatives, including identity, endpoint, email, data protection, vulnerability management, and secure configuration controls. Coordinates security testing, penetration tests, SAST/DAST remediation, incident response, audit evidence, and control validation. The role also secures enterprise AI ecosystems and partners with IT, engineering, security operations, auditors, and external providers to reduce risk and improve security posture.

Leads enterprise mobile device security strategy, architecture, hardening, MDM/EMM configuration, threat assessment, incident response, compliance, and continuous monitoring. Evaluates mobile applications, operating systems, communications protocols, and device configurations while ensuring alignment with federal cybersecurity frameworks. Provides training and technical guidance to security stakeholders and supports secure remote access, BYOD, audits, pilots, rollouts, and modernization projects.

Designs, builds, and deploys classified IT infrastructure for U.S. Government programs through TS/SCI and SAP levels. Responsibilities span facility readiness, power and cooling, rack and cabling design, servers, networks, storage, virtualization, cryptographic devices, physical security, testing, troubleshooting, documentation, and RMF/ATO evidence. The role requires extensive hands-on work in SCIFs, SAPFs, data centers, and construction environments, coordination with facilities and contractors, and up to 50% travel.

Provides technical leadership for Zscaler’s proxy architecture, including QUIC/HTTP/3, HTTP/2, TLS/SSL inspection, and Layer 7 security. Defines architectures, design patterns, and scalable solutions; partners with product and engineering teams on delivery; modernizes code, addresses technical debt, and improves production quality. The role also mentors engineers and governs architecture across teams while designing and troubleshooting high-throughput, low-latency network security products.

Provides technical leadership for Zscaler’s Layer 7 proxy architecture, including QUIC, HTTP/3, HTTP/2, TLS, and SSL inspection. Defines reference architectures, drives solution design, improves scalability and performance of network security products, modernizes legacy code, resolves technical debt, and mentors engineering teams. The role requires designing high-throughput, low-latency security software using C and public cloud infrastructure.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Designs, develops, and implements cybersecurity architectures, network security controls, vulnerability mitigations, and security-enabled systems supporting the FBI. The role defines information system security requirements, integrates Cross Domain Solutions, develops interface specifications, and ensures hardware, operating systems, applications, and networks meet cybersecurity requirements. Requires Top Secret clearance, CI Poly eligibility, relevant cybersecurity experience, security-tool familiarity, and an approved cybersecurity certification.

Build and lead application security for WRITER’s enterprise AI platform. Responsibilities include threat modeling, secure architecture, SAST/DAST automation, code reviews, secure coding standards, penetration testing, vulnerability remediation, and security controls for AI agents, data pipelines, and model-training environments. The role also researches emerging LLM security threats, partners with engineering teams, and enables secure developer workflows.

Build AI-specific threat detections, automated response playbooks, and detection-as-code frameworks for WRITER’s AI infrastructure. Lead incident response, forensic investigations, and proactive threat hunting across GPU clusters, training pipelines, inference endpoints, and distributed environments. Collaborate with cloud, application security, software security, and AI research teams while maintaining an on-call rotation and improving security automation and coverage.

Manages a physical security testing laboratory supporting a federal agency. Installs, configures, integrates, and evaluates access control, video management, intrusion detection, intercom, and network systems. Develops test methods, troubleshoots hardware and software issues, analyzes results, writes technical reports and procedures, maintains equipment documentation, supports demonstrations, and periodically validates third-party physical security installations. Travel may reach 10% outside the Washington, DC area.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Administer, configure, troubleshoot, and maintain enterprise physical security systems across corporate and data center facilities. Manage access control, CCTV, alarms, credentials, system upgrades, inspections, documentation, incident response, compliance audits, and vendor coordination. Support new facility and retrofit projects, network integration, preventative maintenance, and on-call incidents while training junior staff and ensuring alignment with FedRAMP, PCI DSS, ISO 27001, and NIST 800-53 requirements.

Supports installation, configuration, monitoring, troubleshooting, maintenance, and compliance documentation for physical security systems across data centers. Assists with access control, CCTV, alarms, incident response, inspections, asset tracking, audits, and vendor coordination. Collaborates with IT, operations, project managers, and customers while participating in on-call rotations and maintaining secure, compliant facility environments.

Protect enterprise systems, applications, identities, networks, and cloud environments by administering DLP and CASB controls, supporting IAM, vulnerability management, threat analysis, application security reviews, and incident investigations. Configure and manage security infrastructure including firewalls, endpoint protection, SIEM, IPS/IDS, and cloud controls. Serve as a security subject matter expert across projects, communicate technical findings, document requirements, track KPIs, coordinate remediation, and produce progress reports.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Implements and operates AWS security controls for a federal filing platform. Performs vulnerability scanning, security testing, remediation tracking, ATO evidence collection, continuous monitoring, and threat detection. Partners with DevSecOps to automate security in pipelines and supports incident response and forensics. The role also applies NIST 800-53 and FedRAMP controls and uses AI-assisted security tools for detection and triage.

Design, implement, and operate F5 LTM load-balancing and secure networking solutions (BGP, IPv6, HA). Troubleshoot using tmsh/bash/imish, manage upgrades/patching, support Azure virtual networking, partner with security teams, produce technical documentation, and secure email components to support DoD mission-critical infrastructure.

Design, build, and maintain defensive security architectures and automated controls. Administer Elastic Stack for detection, logging, and analytics; perform threat hunting, vulnerability assessments, incident response, and forensics; implement IAM, IDS/IPS, and enterprise security standards; collaborate across teams to improve detection, alerting, and event correlation.

Designs and maintains SIEM detection logic, alerts, and threat monitoring; supports Netskope SWG and CASB policies, firewall changes, risk assessments, compliance audits, access management, and security technology improvements. Partners with incident response, threat hunting, vulnerability management, and platform teams, participates in an on-call rotation, and develops security policies and standards.

Conduct internal and external network penetration tests independently from scoping through reporting, client readouts, remediation guidance, and retesting. Perform purple team and adversary simulation work, build an AI red team practice for chatbots, agents, RAG pipelines, and MCP servers, and develop testing methodologies and internal automation. Present findings to technical and executive audiences while contributing to cybersecurity products and repeatable client services.

Provides security architecture and advisory guidance for large-scale cloud and infrastructure initiatives. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation across application and infrastructure stacks. Partners with engineering and product teams to implement secure designs, improve secure development processes, and prioritize risk-based security initiatives. The role requires expertise in cloud security, identity and access management, networking, encryption, and security communication, with preferred experience in offensive security, Kubernetes, code analysis, and infrastructure security tooling.

Defines enterprise OT cybersecurity strategy, architecture, standards, and roadmap across global manufacturing, distribution, and laboratory operations. Leads initiatives involving segmentation, monitoring, secure remote access, risk remediation, policy development, audits, and executive engagement. Partners with operational and engineering stakeholders to improve security, uptime, resilience, and organizational maturity.