Top Security Engineer Jobs

Designs, implements, and maintains information security systems and network security infrastructure for an intelligence customer. Responsibilities include RMF and A&A compliance, security policy and documentation, incident response, vulnerability remediation, audit and log analysis, security configuration, infrastructure troubleshooting, and AWS-based security solutions. The engineer supports firewalls, gateways, IDS, load balancers, and monitoring tools while collaborating with developers, system engineers, project managers, and users.

Designs and implements secure cloud and mobile platforms supporting law enforcement. Responsibilities include developing cybersecurity and infrastructure controls, conducting risk and vulnerability assessments, enhancing threat detection and event correlation, analyzing security data, and developing incident response and cyber resiliency strategies. The role also requires secure architecture guidance, federal compliance, executive briefings, cross-functional collaboration, and potential Public Trust eligibility.

Designs and maintains secure IT services for a Defense Intelligence Agency customer. Responsibilities include implementing Zero Trust and ICAM capabilities, applying RMF security controls, developing cybersecurity test cases, preparing Assessment and Authorization documentation, overseeing security testing and evidence collection, supporting vulnerability remediation, and advising on information assurance, physical security, and special-program controls.

Design and embed product security for connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, updates, identity, key management, HSM). Integrate security into SDLC/CI-CD, lead V&V activities (pen testing, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA, IEC 81001-5-1, ISO 14971, and NIST guidance.

Design and embed security into connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, firmware updates, key management, HSMs). Integrate security into SDLC and CI/CD, define V&V activities (pen tests, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA guidance, IEC 81001-5-1, ISO 14971 and relevant NIST frameworks.

Leads the cybersecurity strategy and roadmap for a regulated, multi-site organization. Implements and tunes network, endpoint, identity, and cloud security controls; maintains policies aligned with NIST, ISO 27001, CIS, and regulatory requirements; manages SIEM, EDR, vulnerability remediation, incident response, audits, vendor risk, identity hardening, and security awareness programs.

Engineers and optimizes information security controls across on-premises and cloud environments. Configures security technologies, monitors and responds to incidents, conducts vulnerability assessments, analyzes logs and network traffic, and develops Python or PowerShell automation. Supports security architecture, risk assessments, audits, regulatory compliance, documentation, and control validation. Provides technical guidance to analysts and participates in an on-call rotation for critical security events.

Leads teams designing and deploying AI-driven enterprise and cloud security solutions. Responsibilities include developing machine learning systems, integrating data infrastructure and pipelines, performing advanced modeling and analysis, and building AI applications with Python, Java, and C++. The role involves client engagement, strategic problem-solving, stakeholder validation, coaching, process innovation, and operational excellence while addressing complex cybersecurity and privacy challenges.

Leads the design and development of AI-driven enterprise and cloud security solutions. Manages teams delivering data, analytics, and machine learning engineering projects; oversees AI model implementation, data infrastructure, pipelines, and platform deployments. Uses Python and C++ for algorithm development, analyzes data, improves data quality, ensures technical compliance, mentors staff, manages client expectations, and drives innovation across cybersecurity and privacy initiatives.

Own assigned eMASS authorization packages and lead IATT extension activities. Develop POA&Ms, prepare RMF and DoD authorization artifacts, conduct STIG assessments, coordinate remediation, support Microsoft 365 DDIL testing, track vulnerabilities, and maintain security control documentation. Collaborate with ISSMs and Authorizing Officials while monitoring and reporting system security posture.

Lead software engineering for the Weapons Storage and Security System Vault Modernization Program. Develop software plans, procedures, standards, and documentation; coordinate requirements across stakeholders; assess software performance, cybersecurity, and nuclear surety; maintain design and testing databases; and manage government ACAT deliverables for milestones including SRR and PDR.

As a Staff Security Engineer, you'll lead the technical strategy for Vulnerability Management, oversee automation initiatives, mentor engineers, and collaborate with teams to enhance security processes and responses.

Design, deploy, maintain, and automate enterprise data security capabilities across on-premises, cloud, and hybrid environments. Support DLP and DSPM rollout, monitoring, compliance playbooks, SOPs, and Python or PowerShell automation. Partner with IT, security architects, compliance, and investigation teams to implement NIST-aligned controls, reduce data-loss risk, strengthen security posture, and improve detection and prevention of data exfiltration.

Own and secure the cloud infrastructure for a multi-tenant SaaS product: design secure cloud architecture, deploy infrastructure security (access, certificates, logging), develop isolation/sandboxing, review IaC changes, audit environments for vulnerabilities, and create secure cloud policies and procedures.

Build and improve platform security for software operating across cloud, factory, edge, and air-gapped environments. Responsibilities include implementing identity, access control, secrets management, data protection, and system boundaries; hardening Kubernetes, Linux, cloud, and edge deployments; securing software supply chains; automating CI/CD security controls; conducting threat modeling and vulnerability remediation; and supporting accreditation through technical controls, evidence, and system designs.

Reviews and assesses RMF authorization documentation for classified information systems, including security plans, control matrices, monitoring plans, and incident response artifacts. Evaluates technical compliance with information assurance directives, performs security design and threat assessments, documents POA&Ms and risk reports, conducts site assessments, and supports incident response activities. The role requires experience with NIST controls, Windows or Linux, virtualization or cloud environments, Splunk, and DoD security compliance.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Tests and certifies fire alarm, access control, and smoke detection systems to UL standards. Manages certification projects, defines test programs, coordinates laboratory activities, reviews product compliance, develops reports and procedures, resolves engineering issues, and communicates technical findings and project status to clients. The role also provides technical guidance, supports standards and test-method development, and may travel to client sites or industry events.

Provides technical execution of the County’s Information Security Program by administering, integrating, troubleshooting, and optimizing security platforms. Implements and validates controls across infrastructure, applications, cloud technologies, and operating systems. Develops security documentation, supports risk assessments and vulnerability analysis, performs advanced troubleshooting, integrates and automates security tools, and advises departments on security engineering projects and corrective actions.

Owns Federal release-gate security evidence, Continuous Monitoring automation, FedRAMP boundary coordination, vulnerability remediation, and compliance with STIG, SCAP, FIPS, NIST, and other Federal requirements. Manages hardened container registries, supports defense and intelligence projects, triages customer-reported vulnerabilities, and collaborates with product, engineering, compliance, and operations teams to implement security controls throughout the deployment lifecycle.

Lead security across the hardware lifecycle including secure silicon, firmware, supply chain, and cloud deployment. Design secure firmware/hardware interfaces, implement hardware root-of-trust and Confidential Computing features, apply cryptanalysis, and mitigate side-channel attacks while ensuring secure development practices.

Supports the development, integration, documentation, and security engineering of Naval surface weapons, combat, and fire control systems. Responsibilities include designing systems security measures, integrating hardware and software protection, developing Program Protection Plans, managing requirements, coordinating system changes, and supporting system stakeholders. The role requires engineering or technical experience and an active Secret U.S. Government clearance, with AEGIS Combat System experience and knowledge of relevant DoD instructions preferred.

Investigate infrastructure security incidents, conduct host-based and network forensics, triage real-time security events, and participate in 24x7 on-call coverage. The role develops threat detections, anomaly detection models, and adversary-focused use cases; tunes security controls and sensors; and automates incident response using Python, PowerShell, or Bash. Responsibilities also include leading security projects, supporting cloud security architecture, and applying AI to improve cybersecurity operations.

Serve as the senior security advisor embedded with product and engineering teams to design security into features, influence senior stakeholders, mentor junior staff, coordinate with security and privacy (DPO) teams, and produce customer trust materials and questionnaire knowledge bases while staying current on AI-related risks.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.