Top Senior Security Engineer Jobs

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Lead technical direction for vulnerability management, including security tooling, automation, LLM-based workflows, risk assessment, remediation, and vulnerability investigations. Build production services integrating security data, coordinate remediation across engineering teams, participate in vulnerability response, conduct post-mortems, and mentor engineers. The role also evaluates exploitability, attack paths, CVEs, and remediation priorities across cloud, Linux, container, and Kubernetes environments.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Designs and implements network security architecture for CoreWeave’s hyperscale AI cloud infrastructure. Responsibilities include firewalls, intrusion prevention, segmentation, Zero Trust, monitoring, incident response, and securing GPU clusters and high-speed interconnects. The role collaborates with networking, infrastructure, DevOps, and software teams; develops security policies; supports compliance; leads initiatives; and mentors engineers.

Build and operate security solutions for detection engineering, threat hunting, incident response, and threat intelligence. Investigate security incidents, perform root-cause analysis, monitor systems, and help scale a world-class SOC. The role involves large-scale distributed systems, endpoint and cloud security technologies, collaboration across platform teams, project ownership, and participation in on-call rotations.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.

Build and operate threat detection systems across cloud, endpoint, identity, email, and application environments. Own detection lifecycles, detection-as-code workflows, data pipelines, CI/CD, integrations, threat intelligence enrichment, and AI-assisted security capabilities. Partner with Security Operations and engineering teams on investigations, incident response, threat hunting, and automation. The role requires strong Python and SQL skills, SIEM expertise, cloud and Linux knowledge, and independent project leadership.

Develop advanced threat detection capabilities, custom alert logic, threat-hunting exercises, and real-time incident response processes. The role collaborates with Red and Purple Teams, researches emerging threats, improves security visibility, contributes to security architecture and controls, and supports security assessments. Responsibilities include Kubernetes-focused detection, multiple query and programming languages, endpoint event analysis, incident containment, remediation, and occasional after-hours on-call participation.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Monitors and investigates security alerts across SIEM, endpoint, identity, cloud, email, and network environments. Conducts threat hunting, incident response, containment, remediation, vulnerability management, and post-incident reviews. Develops playbooks, automation, integrations, detections, and infrastructure-as-code deployments. Uses and tunes agentic SOC tooling while maintaining human oversight. Coordinates with technical and business teams, participates in a 24/7 on-call rotation, mentors junior engineers, and improves security operations through metrics and continuous improvement.

Secure Realtor.com’s AI platforms across AWS and GCP by designing agent guardrails, identity controls, containment, supply-chain protections, detection, and incident response. Lead threat modeling, secure CI/CD, AI red teaming, and secure-by-default platform frameworks. Partner with enterprise cybersecurity, build security automation using AI agents, educate teams, evaluate emerging threats and vendors, and advise leadership on AI governance and risk.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.

Leads enterprise email security strategy, architecture, engineering, modernization, and lifecycle management. Oversees phishing protection, threat detection, encryption, DLP, cloud security, incident response, risk remediation, governance, metrics, vendor relationships, and regulatory alignment. Partners with cross-functional stakeholders, presents to executives, leads engineering teams, and applies AI-enabled workflows to improve security analysis and operational effectiveness.

Leads cloud security strategy and architecture for a SaaS platform handling sensitive health information. Responsibilities include implementing SIEM log sources, driving security initiatives, researching threats and technologies, defining security standards, advising cross-functional teams, conducting forensics and incident response, and monitoring permissions and configurations for least-privilege compliance. The role also mentors security and compliance staff and requires on-site work in Austin, Texas, or Madison, Wisconsin, with limited travel.

Design, build, and operate secure LLM platforms and RAG pipelines for security analytics and automation. Develop agentic workflows, continuous monitoring, governance, and adversarial testing to mitigate AI risks and integrate protections into security tooling and cloud-native ML pipelines.

Own the security architecture and implementation of Datadog’s Bits Code cloud coding agent from design through production. Build threat models for agentic risks such as prompt injection, secure untrusted workload execution through sandboxing, develop security libraries, guide engineering processes, and support production operations. Collaborate across engineering, product, infrastructure, and security teams while making pragmatic trade-offs and participating in on-call responsibilities.

Owns infrastructure security across AWS, Azure, and GCP cloud environments. Defines security standards, IAM policies, secrets management, guardrails, and infrastructure-as-code controls. Conducts threat modeling, vulnerability assessments, and penetration testing; monitors alerts and leads incident response. Drives SOC 2 and ISO 27001 compliance, audit readiness, and AI-assisted threat detection. Partners with platform, engineering, operations, legal, and business stakeholders to remediate risks and strengthen cloud security.

Implements and sustains cybersecurity across an automotive manufacturing plant. Responsibilities include vulnerability remediation, endpoint security, incident response, disaster recovery, readiness assessments, OT patching and firmware updates, risk communication, stakeholder coordination, documentation, and issue tracking. The role balances cybersecurity requirements with production continuity and supports continuous improvement of plant security controls and operational resilience.

Build and operate secure, resilient distributed systems for secrets and key management across Cloudflare’s global network. Re-architect internal PKI and machine or workload identity systems, participate in on-call incident response, support internal developers, and advise engineering teams on secure system design. The role requires software development, distributed systems expertise, Linux/UNIX administration, and hands-on security implementation experience.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Design, build, and operate MongoDB Atlas features and distributed backend systems, with a focus on encryption, compliance, customer-managed keys, and cloud security across AWS, Azure, and GCP. Lead complex technical projects and fleet-wide production rollouts, collaborate with product, design, customers, and support teams, mentor engineers, resolve production issues, and participate in on-call support.

Manage deployments, operations, incident response, and on-call support for products in classified U.S. government environments. Oversee AWS, private cloud, container, and virtual machine infrastructure. Develop Python scripts, containerized services, and monitoring automation while improving reliability, scalability, and DevOps practices. Maintain security and compliance through vulnerability scanning, patch management, documentation, and escalation management. The role is fully onsite and requires an active U.S. Government Secret clearance.

Develops AI-enabled SOC automation, security tooling, data integrations, dashboards, detection engineering, and investigation workflows. Supports incident response and operational readiness across network, infrastructure, and physical security services. Partners with engineering, facilities, networking, and security teams to automate processes, troubleshoot issues, improve signal quality, and strengthen resilience. The role requires security engineering, programming, SIEM, networking, incident response, and security automation expertise.

Designs, implements, and improves enterprise security capabilities across endpoint, cloud, network, data protection, email security, vulnerability management, SIEM, SOAR, and Zero Trust environments. Owns major security platforms including Rapid7, Microsoft Defender, Microsoft Purview, Mimecast, and Zscaler. Develops scalable architectures, detection and automation workflows, vulnerability controls, email protections, and security integrations while partnering with infrastructure, network, cloud, application engineering, security operations, and MDR teams.