Top Senior Security Engineer Jobs

Own cloud security posture across multi-account AWS and Kubernetes environments, including EKS, Istio, identity, PKI, encryption, and policy-as-code. Design security guardrails, harden platforms against compliance standards, develop detections, threat hunt, automate controls with Terraform and Python, and support incident response. Partner with engineering, AppSec, and GRC teams, produce compliance evidence, mentor teammates, and develop AI-assisted security automation.

Monitors and investigates security alerts across SIEM, endpoint, identity, cloud, email, and network environments. Conducts threat hunting, incident response, containment, remediation, vulnerability management, and post-incident reviews. Develops playbooks, automation, integrations, detections, and infrastructure-as-code deployments. Uses and tunes agentic SOC tooling while maintaining human oversight. Coordinates with technical and business teams, participates in a 24/7 on-call rotation, mentors junior engineers, and improves security operations through metrics and continuous improvement.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Develop and operate detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include building detections-as-code, triaging alerts, leading incident response and forensic investigations, threat hunting, automating workflows, maintaining SIEM and security data pipelines, developing AI-enabled security tooling, and participating in on-call rotations. The role also involves threat intelligence collaboration, security engineering mentorship, and continuous improvement of detection and response systems.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-driven security systems, participating in on-call rotations, and mentoring engineers.

Build and maintain detection and response capabilities across enterprise, cloud, and product environments. Responsibilities include developing detections-as-code, triaging alerts, investigating and responding to incidents, conducting digital forensics and threat hunting, automating workflows, building security tooling, supporting SIEM and security data lake pipelines, developing AI-enabled security systems, participating in on-call rotations, and mentoring engineers.

Conduct red-team assessments of formally verified systems, evaluating proofs, specifications, threat models, and trusted computing bases. Build AI-driven vulnerability discovery, triage, and exploit-generation tooling; identify and demonstrate exploitable weaknesses in software and infrastructure. Produce rigorous security reports, publish methodologies, collaborate with domain experts and third parties, and deliver engagements on fixed schedules.

Manage the vulnerability lifecycle across Datadog’s multi-cloud environment, including detection, impact assessment, prioritization, remediation, and verification. Build AI-assisted automation, tools, and workflows that reduce engineering toil and address vulnerabilities earlier in the SDLC. Analyze remediation failures, identify root causes, partner with security and engineering teams, and provide vulnerability-management expertise for SOC 2, HIPAA, PCI, FedRAMP, and ISO compliance.

Build and maintain scalable security observability, detection, and response systems. Develop AI- and ML-based detections, normalize large-scale security logs, automate incident workflows, respond to alerts and threats, conduct investigations and threat hunts, and participate in detection and response on-call rotations.

Leads spacecraft and avionics cybersecurity architecture, cryptographic subsystem integration, secure boot, key storage, red/black isolation, threat assessment, and security verification. Designs constellation and vehicle networks across RF and optical links, manages requirements and supplier coordination, supports DoD RMF compliance, and briefs customers and government stakeholders on product-level security.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.

Lead security engineering across AI systems, cloud infrastructure, product security, GRC automation, GitHub controls, and compliance workflows. Develop AI-specific threat models and guardrails, automate security checks and evidence collection, strengthen AWS and GCP environments, manage CSPM tooling, and secure software supply chains. Partner with Engineering, Product, Legal, IT, and GRC to establish security programs and practical controls for Jasper’s AI platforms.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Designs and implements scalable application security processes, tooling integrations, automation, and CI/CD controls. Leads SAST, DAST, SCA, secrets detection, IaC security, and SSDLC improvements; tunes security rules, recommends mitigations, manages compliance and resiliency, supports audits, and represents AppSec in governance forums. The role also applies AI-assisted development responsibly while addressing security, privacy, compliance, and operational risks.

Designs and implements scalable application security processes, automation, tooling integrations, and CI/CD controls. Leads SAST, DAST, SCA, secrets detection, IaC, and SSDLC initiatives; tunes security rules, recommends risk mitigations, manages resiliency and compliance, and supports audits. Partners with cybersecurity leadership and governance forums while applying AI-assisted development responsibly and validating AI-generated outputs against security, privacy, compliance, and operational requirements.

Leads application security engineering by designing scalable AppSec processes, integrating SAST, DAST, SCA, secrets detection, and IaC controls into CI/CD pipelines, and improving security tooling. Recommends risk mitigations, supports SSDLC maturity, governance, audits, compliance, and reporting, and collaborates with cybersecurity leadership. The role also applies AI-assisted development responsibly while evaluating security, privacy, compliance, and operational risks.

Leads application security engineering by designing scalable AppSec processes, integrating SAST, DAST, SCA, secrets detection, and IaC controls into CI/CD workflows, and improving vulnerability detection and prioritization. Provides technical leadership, manages tooling and compliance, recommends risk mitigations, supports audits, and contributes to governance. The role also applies AI-assisted development responsibly while accounting for security, privacy, compliance, and operational risks.

Leads application security engineering by designing scalable AppSec processes, integrating security tools into CI/CD and software development workflows, tuning vulnerability detection, and recommending risk mitigations. The role provides technical leadership, supports governance, audits, compliance, reporting, and enterprise security controls. It also requires responsible use of AI-assisted development tools, including validation of outputs and management of associated security, privacy, and operational risks.

Designs and scales application security processes, integrates security tooling into SDLC and CI/CD workflows, tunes detection rules, and recommends risk mitigations. Provides technical leadership for AppSec automation, governance, audits, compliance, and enterprise security controls. The role also applies AI-assisted development responsibly while addressing security, privacy, compliance, and operational risks.

Leads application security engineering by designing scalable AppSec processes, integrating security tools into CI/CD pipelines, tuning vulnerability detection, and recommending risk mitigations. Provides technical leadership for SAST, DAST, SCA, secrets detection, IaC, SSDLC, and AI-assisted development security. Partners with cybersecurity leadership and control management, supports governance, reporting, audits, regulatory reviews, and third-party assessments while maintaining enterprise compliance and resiliency.

Responsible for designing, implementing, and maintaining security measures to protect systems and data. Automates security processes and collaborates with engineering teams to identify vulnerabilities and ensure compliance with standards.

Lead secure design reviews, threat modeling, and security risk assessments for products and features. Partner with engineers, product managers, and designers to develop secure architectures, provide remediation guidance, promote security culture through training and mentoring, oversee vulnerability management, and explain security events. Build security tooling, automate secure development practices, and establish architectural patterns and processes that reduce security risk across DigitalOcean’s engineering organization.

Lead and evolve the insider threat program by engineering detection, automating investigation workflows, tuning UEBA/SIEM/DLP/UAM/SOAR detection content, conducting threat hunting and DFIR, collaborating with HR/Legal, and using data analytics (e.g., Pandas) to investigate anomalous activity and reduce internal risk.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Protect corporate data through DLP implementation, tuning, alert review, false-positive reduction, and control optimization across web, endpoint, email, cloud, and SaaS environments. The engineer will review data protection programs, improve monitoring and blocking controls, collaborate with business partners, and use automation and emerging AI tools to strengthen security operations.