Top Senior Security Engineer Jobs

Leads the design, implementation, and evaluation of security controls for AI systems across AWS and corporate environments. Researches AI threats and vulnerabilities, develops security architecture and standards, supports AI governance, monitors systems, and participates in AI R&D initiatives. Provides technical guidance to engineering, product, IT, risk, and cyber defense teams while advancing AI-enabled security operations and risk management. The role also requires secure SDLC, DevSecOps, threat modeling, vulnerability management, cloud security, and automation expertise.

Own and improve CoreWeave’s vulnerability management program across applications, cloud infrastructure, and hardware. Build production security automation, triage and remediation workflows, prioritization models, metrics, and risk reporting. Investigate hardware-adjacent vulnerabilities, support zero-day response, conduct root-cause analysis, and collaborate with engineering and operational stakeholders. Contribute to architecture decisions, technical standards, code reviews, documentation, and teammate onboarding.

Build and maintain scalable detection and response systems, security observability capabilities, AI-driven security automation, logging pipelines, and rule- or ML-based detections. The role includes incident response, threat hunting, security alert investigation, workflow automation, detection engineering, and participation in detection and response on-call rotations.

Own cloud security posture across multi-account AWS and Kubernetes environments, including EKS, Istio, identity, PKI, encryption, and policy-as-code. Design security guardrails, harden platforms against compliance standards, develop detections, threat hunt, automate controls with Terraform and Python, and support incident response. Partner with engineering, AppSec, and GRC teams, produce compliance evidence, mentor teammates, and develop AI-assisted security automation.

Architects and implements network security for hyperscale cloud and AI infrastructure, including firewalls, intrusion prevention, segmentation, zero trust, monitoring, and incident response. Secures GPU clusters, high-speed interconnects, and cloud services while collaborating with networking, infrastructure, DevOps, and software teams. The role also contributes to security policies, compliance controls, design reviews, automation, and security education across the organization.

Lead technical direction for vulnerability management, including security tooling, automation, LLM-based workflows, risk assessment, remediation, and vulnerability investigations. Build production services integrating security data, coordinate remediation across engineering teams, participate in vulnerability response, conduct post-mortems, and mentor engineers. The role also evaluates exploitability, attack paths, CVEs, and remediation priorities across cloud, Linux, container, and Kubernetes environments.

Designs, implements, validates, and maintains cybersecurity and information system security solutions across the program lifecycle. Assesses assets, risks, threats, and vulnerabilities; supports RMF accreditation and authorization; develops remediation estimates; and applies security standards including NIST 800-53, JSIG, and NISPOM. Coordinates with engineering, network, software, testing, administration, and program management teams. Requires active TS/SCI clearance, DoD 8570 IAT Level II certification, and 9 or more years of related experience.

Designs, deploys, administers, and maintains enterprise Privileged Access Management solutions across hybrid-cloud environments. Automates vault operations, privilege elevation, and credential rotation using PowerShell and infrastructure-as-code practices. Integrates PAM with enterprise systems, monitors performance, troubleshoots issues, manages upgrades and disaster recovery, and enforces least privilege, compliance, and auditing standards. Develops operational documentation and partners with architecture, infrastructure, and application teams.

Design, build, and operate secure, reliable cloud software platforms and distributed systems. Develop backend APIs, data ingestion pipelines, workflows, automation, and agentic pipelines. Lead architecture, implementation, testing, deployment, observability, and production support while writing high-quality Python code. Provide technical leadership, mentor engineers, document systems, and evaluate cloud-native, AI, and workflow technologies.

Develop and mature SaaS and AI security programs, including security baselines, identity and access controls, data protection, risk assessments, monitoring, and remediation. Assess SaaS platforms, integrations, AI agents, models, and workflows for security risks. Partner with engineering, legal, privacy, procurement, and business teams to establish responsible AI controls, standards, and guidance. Automate assessments and evidence collection, communicate risks to stakeholders, and mentor junior security engineers.

Leads enterprise cryptography, PKI, key management, and data protection strategy. Designs HSM and KMS integrations, encryption architectures, certificate automation, lifecycle controls, and post-quantum migration plans. Partners with engineering teams on secure libraries, threat modeling, security testing, vulnerability remediation, and shift-left security practices. Advises senior stakeholders on cybersecurity risks and mentors teams while ensuring systems are reliable, observable, auditable, and resilient.

Provides technical leadership for Zscaler’s proxy architecture, including QUIC/HTTP/3, HTTP/2, TLS/SSL inspection, and Layer 7 security. Defines architectures, design patterns, and scalable solutions; partners with product and engineering teams on delivery; modernizes code, addresses technical debt, and improves production quality. The role also mentors engineers and governs architecture across teams while designing and troubleshooting high-throughput, low-latency network security products.

Design, build, and operate secure cloud services and AI agents for application security, including vulnerability triage, sandboxed testing, and remediation support. Implement infrastructure as code, isolation, least-privilege access, secrets management, and defenses against untrusted input and prompt injection. Evaluate AI accuracy, cost, and latency while collaborating with security teams, communicating risk, reviewing code, and mentoring engineers.

Lead security design for machine-learning features, maintain safeguards maps, and red-team LLM systems for jailbreaks, prompt injection, prompt leaks, and toxicity. Develop evaluation cases, mitigation strategies, security metrics, and production fixes with ML engineers. Monitor AI attack research, review safeguard changes, and ensure defenses remain effective across models and prompts.

Own workforce identity and access management, including Okta administration, SaaS integrations, SSO, provisioning, lifecycle automation, RBAC/ABAC, privileged access, and non-human identity governance. Strengthen access controls and compliance evidence for ISO 27001 and SOC 2, support endpoint and SaaS security initiatives, investigate incidents, document processes, and participate in on-call coverage.

Lead product security incident response for post-release vulnerabilities, including deep investigations, exploit analysis, CVE assignment, CVSS scoring, coordinated disclosure, remediation tracking, and postmortems. Coordinate engineering, product, release, security, and external research teams during significant security events. Improve secure development practices and vulnerability response processes across the SaaS platform while participating in on-call coverage.

Lead product security incident response for post-release vulnerabilities, including deep-dive investigations, exploit analysis, remediation coordination, CVE assignment and disclosure, advisory review, and incident leadership. Partner with engineering, product, release, customer-facing, and external security teams to reduce exposure windows, verify fixes, conduct postmortems, and improve secure development processes and PSIRT capabilities.

Leads product security incident response for post-release vulnerabilities, coordinating investigations, remediation, release fixes, CVE scoring and coordinated disclosure. Partners with engineering, product, release, customer-facing, and external security teams during significant incidents. Conducts exploit analysis, validates mitigations, authors postmortems, and improves secure development practices and SDLC processes.

Leads security architecture, technical strategy, and complex engineering initiatives across major platforms and security domains. Drives threat modeling, risk assessments, security reviews, vulnerability response, and penetration testing. Serves as a senior technical authority, mentors engineers, and influences enterprise security direction. Leads AI-focused security initiatives and validates AI-assisted recommendations for security, resiliency, auditability, and data sensitivity. Partners with engineering, product, risk, operations, and business leaders to manage threats and disruptive events.

Leads cybersecurity engineering and architecture reviews across applications, cloud platforms, APIs, integrations, and third-party solutions. Performs threat modeling, secure design reviews, vulnerability analysis, and risk assessments; recommends mitigations and architecture improvements; partners with engineering, product, vendors, and senior stakeholders during remediation and incidents. Promotes AI-assisted security validation, automation, secure-by-design practices, and cybersecurity communities of practice.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Leads application security engineering by designing scalable AppSec processes, integrating SAST, DAST, SCA, secrets detection, and IaC controls into CI/CD workflows, and improving security tooling and defect prioritization. Recommends risk mitigations, supports governance, audits, compliance, and reporting, and collaborates with cybersecurity leadership. The role also applies AI-assisted development responsibly while addressing security, privacy, compliance, and operational risks.

The Senior Information Security Engineer will design and automate application security processes, integrate SAST, DAST, SCA, secrets detection, and IaC controls into CI/CD workflows, and improve security tooling precision. Responsibilities include technical leadership, risk mitigation, governance, reporting, audits, compliance, and SSDLC maturity. The role also involves responsible use of AI-assisted development tools and collaboration with cybersecurity leadership, control management, and cross-functional teams.

Designs and implements scalable application security processes, automation, tooling integrations, and CI/CD controls. Leads SAST, DAST, SCA, secrets detection, IaC security, and SSDLC improvements; tunes security rules, recommends risk mitigations, manages upgrades and compliance, supports audits, and represents AppSec in governance forums. The role also applies AI-assisted development responsibly while accounting for security, privacy, compliance, and operational risks.

Leads application security engineering by designing scalable AppSec processes, integrating SAST, DAST, SCA, secrets detection, and IaC controls into CI/CD workflows, and improving security tooling precision. Provides technical leadership, recommends risk mitigations, supports audits and governance, manages platform resiliency and compliance, and advances secure software development practices. Uses AI-assisted development tools responsibly while addressing security, privacy, compliance, and operational risks.