Top Senior Security Engineer Jobs

Lead design and implementation of security systems and controls for large-scale AI and HPC cluster infrastructure. Drive incident response, risk assessment, system hardening, governance, audit readiness, and cross-team collaboration to protect hardware, software, and datacenter platforms.

Administers, monitors, maintains, tests, and improves information security systems and infrastructure. Handles escalated security issues, reviews threats and audit findings, recommends remediation, enforces security best practices, and collaborates with users, vendors, and partners to resolve incidents and support policy compliance.

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.

Leads cybersecurity engineering and Risk Management Framework execution across mission systems. Performs risk assessments, maintains RMF packages, validates controls, develops malware identification processes, evaluates secure hardware and software, coordinates patching and cybersecurity roadmaps, monitors security events, assesses configuration changes, and supports audits and incident response. The role also guides junior security analysts, participates in secure system design, and may travel domestically and internationally.

Designs and implements cloud security architectures and controls for government systems, focusing on AWS GovCloud and Databricks. Integrates cybersecurity, compliance, authorization, DevSecOps, monitoring, threat detection, incident response, data security, infrastructure automation, containers, and CI/CD security. Supports RMF activities, researches security capabilities, advises clients, strengthens cloud environments, and mentors cloud security professionals.

Designs, implements, and manages enterprise cloud security solutions across AWS, Azure, and Oracle OCI. Leads CSPM, CASB, CNAPP, SSE, DevSecOps, application security testing, identity, network, vulnerability, and monitoring capabilities. Develops security policies, standards, roadmaps, and compliance controls; supports audits, incident response, remediation, vendor evaluations, and maturity assessments. Collaborates with architecture, infrastructure, and cybersecurity teams, communicates recommendations to leadership, and mentors junior staff. Occasional travel supports remote network installations and upgrades.

Consult with clients to design, implement, configure, test, troubleshoot, and support physical security systems, including video surveillance, access control, sensors, and integrations. Develop network architectures, lead design workshops, execute test plans, document solutions, and serve as a technical customer contact. Support project delivery, sales engagements, upgrades, and complex hardware/software problem resolution while managing timelines, expenses, and customer expectations. Travel and occasional off-hours work are required.

Leads enterprise network security engineering and monitoring, establishing secure network designs, standards, and policies. Responsibilities include engineering, designing, troubleshooting, and supporting firewalls, DMZs, NAC, SD-WAN, VPNs, secure tunneling, VLANs, routers, switches, and network architectures. Provides subject matter expertise and Level III support while collaborating with cybersecurity engineering leadership.

Design, deploy, and maintain SOAR capabilities for security automation, develop workflows, and integrate AI tooling for enhanced security responses.

Designs, builds, deploys, and operates shared security services, libraries, middleware, and platform patterns in TypeScript. Responsibilities include identity and authentication, authorization, secrets and key management, encryption, audit logging, rate limiting, abuse prevention, monitoring, and reliability. The engineer will establish secure defaults and CI guardrails, partner with engineering teams, mentor engineers, and provide technical leadership while owning solutions end to end.

Supports cybersecurity risk management and authorization for the VA.gov Platform. Assesses NIST security controls, performs gap and risk analyses, maintains SSPs, POA&Ms, and authorization evidence, and translates deficiencies into engineering remediation. The role supports ATO/cATO readiness, OSCAL automation, threat modeling, secure design reviews, stakeholder coordination, incident response, and continuous synchronization between technical changes and security documentation.

Leads and mentors security professionals implementing the RMF lifecycle for federal IT systems. Oversees system categorization, control selection, implementation, assessment, authorization documentation, continuous monitoring, risk analysis, remediation, incident response, audit support, and stakeholder training. Serves as a senior cybersecurity advisor while tracking security engineering risks and improvement opportunities. Requires extensive security engineering experience, DoD 8140.03 advanced proficiency, specialized certifications or an advanced degree, and an active TS/SCI clearance with polygraph eligibility.

Assess and document cybersecurity controls across federal information systems, coordinate remediation with system stakeholders, and oversee RMF activities throughout the system authorization lifecycle. Guide categorization, control selection, implementation, assessment, continuous monitoring, risk documentation, audit support, and incident response. Serve as a senior technical cybersecurity advisor, communicate risks and metrics to leadership, and provide security guidance and training while maintaining alignment with NIST and DoD requirements.

Lead enterprise vulnerability management and security configuration programs. Analyze vulnerabilities, assess business risk, develop remediation and mitigation strategies, manage exceptions, and engineer automated configuration compliance capabilities. Partner with infrastructure, cloud, application, engineering, and security teams to improve cyber risk visibility and security posture. Serve as a subject matter expert, technical escalation point, and mentor while translating complex findings into actionable recommendations for technical and business stakeholders.

Provides senior cybersecurity engineering support across system lifecycles, implementing DoD RMF and Zero Trust controls. Performs ACAS vulnerability assessments, remediation validation, continuous monitoring, Azure security architecture, Azure Policy administration, and Defender for Cloud security posture management. Develops Xacta automation and Infrastructure as Code workflows for evidence collection, compliance validation, and continuous authorization. Collaborates with cloud, DevSecOps, architecture, and security teams while supporting assessments and authorization activities.

Own corporate security by protecting workforce identities, endpoints, and enterprise applications. Build Okta-based identity and access controls, endpoint security through MDM and EDR, secure SaaS configurations, and software integrations that automate policy enforcement and identify security gaps. The role also supports phishing-resistant authentication, least privilege, patching, device posture controls, endpoint investigations, and secure management of OAuth and AI-tool integrations.

Own infrastructure security foundations, improve cloud security across IAM, networking, and systems, and strengthen authentication, authorization, identities, and secrets management. Build production security tooling and automation to prevent vulnerabilities, detect configuration drift, and reduce manual work. Partner with infrastructure and product engineers on secure design reviews, vulnerability remediation, centralized logging, and detection and response capabilities.

Lead identity and access security across a global portfolio, including authentication, authorization, non-human identities, PAM, JIT access, and Cloudflare ZTNA. Design Okta policies, integrate endpoint and SaaS security signals, manage identity governance and compliance, and automate security workflows using infrastructure-as-code, scripting, and AI tooling. Influence cross-functional teams, modernize access controls, and drive complex security initiatives to completion.

Leads the architecture and implementation of Uber’s cyber defense platform across multi-cloud and hybrid environments. Defines security strategy, builds scalable CSPM, vulnerability management, threat detection, and incident response capabilities, and applies AI/ML automation. Provides incident leadership, establishes security standards, mentors engineers, drives technical direction, and collaborates with executive and cross-functional teams on security, privacy, compliance, and engineering initiatives.

Lead the design, development, deployment, and operation of highly available endpoint security backend services. Set architectural direction, drive technical initiatives, ensure performance and resiliency, establish engineering and operational excellence standards, conduct code reviews, mentor engineers, and collaborate across product, infrastructure, and engineering teams. The role focuses on Netskope Cloud DLP and endpoint data protection solutions, with responsibilities spanning observability, incident response, CI/CD, documentation, and AI-assisted development practices.

Designs, leads, and supports enterprise network security and infrastructure solutions. Responsibilities include network engineering, NAC, IAM, ZTNA, VPN, certificate and PKI management, secure connectivity, identity-driven access controls, segmentation, highly available distributed environments, platform upgrades, lifecycle management, and capacity planning. The role also evaluates technology solutions and leads cross-functional initiatives focused on performance, reliability, scalability, and capacity.

Leads AI security, platform modernization, and developer productivity initiatives. Designs enterprise solutions, manages AI vulnerability remediation, develops CI/CD and DevSecOps automation, modernizes Java platforms, enables rapid security releases, and establishes secure AI development standards. Partners with architecture, security, infrastructure, and engineering teams to deliver secure, scalable platforms and improve software delivery efficiency.

Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks.

Design, build, operate, and secure identity and authorization services supporting vehicle, cloud, and enterprise systems. Own SpiceDB authorization models, APIs, SDKs, workload identity, OAuth2/OIDC, mTLS, key distribution, and cloud-native deployments on Go, Kubernetes, and AWS. Partner cross-functionally on platform adoption, incident response, vulnerability mitigation, regulatory compliance, and security architecture. Mentor engineers and lead platform capabilities from requirements through production operationalization.

Leads development and architectural evolution of an AI-powered code security scanner. Responsibilities include building user-facing dashboards and workflows, implementing secure authentication, extending backend scanning and orchestration services, integrating LLM-based security analysis, automating vulnerability validation and reporting, enhancing scalability, and mentoring junior engineers.