Top Senior Security Engineer Jobs

Design, build, and maintain enterprise security services for security configurations and controls. Analyze systems and business processes, develop secure solutions, build AI agents, troubleshoot complex issues, fix bugs within SLAs, and support operations. Collaborate on development tasks, testing, debugging, code reviews, monitoring, incident response, and technical problem resolution. Apply cloud security, application security, secure SDLC practices, and scalable software engineering to protect enterprise applications and infrastructure.

Lead engineering-driven enterprise data protection and DLP capabilities across cloud, SaaS, endpoint, email, collaboration, and web environments. Build automated policy-as-code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, and operational health checks. Partner with technical, compliance, privacy, legal, and business teams to improve data protection effectiveness. Investigate events, reduce false positives, establish governance standards, and define metrics demonstrating risk reduction and operational maturity.

Design, implement, and maintain secure Azure Government cloud architectures; enforce zero-trust and RBAC; configure Azure security controls; automate compliance with IaC and scripting; integrate SIEM/SOAR for monitoring and incident response; conduct vulnerability assessments and manage POA&Ms; support ATO/RMF processes and produce security documentation and SSPs; liaise with mission owners, assessors, and compliance teams to maintain ongoing federal compliance.

Designs, implements, and maintains enterprise network security infrastructure, with emphasis on Palo Alto firewalls, GlobalProtect VPN, hybrid Azure/AWS connectivity, routing, switching, and 802.1X certificate-based access control. Secures wired, wireless, camera, and IoT devices using TLS/PKI authentication; troubleshoots firewall, VPN, wireless, and network issues; manages VLAN segmentation and Ruckus switching; and may support Prisma and CASB initiatives.

Lead application security for Dynamics 365, Azure, and IFS ERP: design RBAC, run assessments, threat model, integrate SAST/DAST into CI/CD, automate provisioning, guide secure SDLC practices, respond to incidents, and support compliance and audits.

Lead system security engineering for program protection, supply chain risk management, and counterfeit prevention across acquisition lifecycle. Develop SCRM/PPIP/CPP plans, conduct vulnerability and criticality analyses, support RMF/SSP/assessment efforts, mentor junior engineers, liaise with suppliers and stakeholders, and support authorization and Agile development.

Provides operational and security support for production web environments by administering ASPM, SSPM, and related security platforms. Integrates security tooling with code repositories, CI/CD, ticketing, vulnerability management, identity, cloud, and security systems. Evaluates technologies, leads proofs of concept, defines requirements and success criteria, supports governance audits, communicates risks, mentors peers, manages vendors, and improves secure-by-design workflows.

Lead secure architecture strategy across application, cloud, identity, edge, and AI security domains. Conduct threat modeling for complex services and LLM systems, define AI security practices, build security tooling, harden CI/CD and infrastructure-as-code environments, and manage AWS and WAF security controls. Serve as a technical escalation lead for security incidents, influence enterprise security strategy, represent security in executive architecture discussions, mentor senior engineers, and participate in 24/7 on-call support.

Lead product security for regulated medical device software, integrating security across the development lifecycle. Conduct threat modeling, risk and vulnerability assessments, security architecture reviews, penetration testing, code reviews, incident response, vendor assessments, and compliance activities. Support secure boot, communications, updates, access controls, and data protection. Collaborate with Agile scrum teams, document security practices, promote security awareness, and contribute to product security strategy for current and next-generation devices.

Build and operate reliable, scalable, secure infrastructure for SaaS security and Snowflake data systems. Automate infrastructure provisioning, deployments, and incident response using Terraform, Spinnaker, Kubernetes, and related tools. Ensure security and compliance, participate in on-call rotations, lead incident response and root-cause analysis, and collaborate with development, data science, and security teams on architectural decisions and service implementation.

Own and direct cybersecurity design for multiple medical devices. Develop security architectures, requirements, threat models, risk analyses, and system specifications for embedded and hosted systems. Perform vulnerability scanning, secure code analysis, penetration testing, fuzz testing, and CWE/CVE analysis. Lead cross-functional cybersecurity improvements, resolve technical constraints, support regulatory interactions, and ensure compliance with quality systems and design controls.

Designs and operates identity security controls across enterprise platforms, including conditional access, privileged access, workload identities, and phishing-resistant authentication. Analyzes security logs, supports FIDO2 rollouts, manages identity risk, and participates in attack path management. The role also researches AI-assisted security tooling, automates operational workflows, documents standards and runbooks, and collaborates with Security, Systems, DevOps, Network, and Development teams.

Develops and validates hardware and software security solutions for DoD sensor payloads and mission systems. Responsibilities include systems security architecture, requirements development, anti-tamper and cybersecurity implementation, reverse engineering, security testing, RMF compliance, technical release analysis, exportability assessments, cryptographic protection, A&A documentation, and POA&M maintenance. The role collaborates with government, program, business development, and international stakeholders and provides technology-release training. This is a full-time, on-site position in Rolling Meadows, Illinois.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Designs and operates SAP security and GRC frameworks across S/4HANA, ECC, Fiori, BTP, and SuccessFactors landscapes. Responsibilities include SAP role and authorization design, user provisioning, segregation-of-duties analysis, GRC Access Control and Process Control operations, audit support, cloud security, logging, security-note remediation, documentation, and mentoring. Partners with audit, compliance, business, Basis, and DBA teams to maintain secure and auditable SAP environments.

Lead assessment and implementation of system security controls for national security systems. Manage enterprise cryptographic inventory compliance, engage stakeholders, produce leadership reports, and implement detection, vulnerability, and event-correlation controls. Mentor teammates and support CISO organization to improve security posture and compliance.

Secure and scale cloud infrastructure by implementing CI/CD, hardening DigitalOcean and other cloud environments, managing certificates and DNS, integrating IAM/SSO and KYC providers, applying DevSecOps practices, automating infrastructure as code, participating in incident response, and collaborating with engineering teams to optimize deployments and reduce downtime.

Design, implement, and operate enterprise SASE/SWG/SSE infrastructure (Netskope) to secure traffic and data. Architect traffic steering, tunnel termination (IPsec/GRE), SD‑WAN integration, BGP routing, and DLP controls. Provide platform optimization, incident escalation, troubleshooting, and collaborate with security/identity teams. Drive automation, policy tuning, and migrations from legacy proxies to cloud SASE models in a regulated financial environment.

Secure medical device product lifecycle by integrating security controls into embedded and connected systems. Conduct threat modeling and vulnerability assessments, design secure architecture (secure boot, communications, updates), apply NIST/OWASP/IEC standards, mentor teams, and support regulatory cybersecurity submissions to improve product resilience.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Lead and implement security engineering controls across the platform: identify real risks, build secure-by-default libraries and guardrails, enforce least-privilege for services protecting patient data, harden developer machines, and partner with compliance to convert requirements into effective technical controls.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Leads the architecture, implementation, integration, automation, testing, and optimization of ServiceNow and Veza identity security solutions. Advises clients on identity governance, authorization visibility, access analytics, compliance, and cybersecurity strategy. Conducts workshops, demonstrations, training, troubleshooting, and technical delivery from discovery through deployment. Develops scripts, applications, dashboards, and workflows while mentoring junior staff and supporting proposals, estimates, and sales opportunities.

Owns product security for DoD autonomous systems, including end-to-end RMF and ATO execution, security architecture, requirements, threat modeling, STIG applicability, vulnerability management, monitoring, secure updates, SBOMs, and secure SDLC practices. Acts as the security subject-matter expert for engineering teams and government cyber or program offices, securing embedded hardware, software, air-gapped systems, and command-and-control platforms through authorization.