Top Senior Security Engineer Jobs

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

Design, build, and operate Identity & Access Management solutions across cloud infrastructure, SaaS, and internal systems. Implement role design, least-privilege models, automated access reviews, SIEM-based observability, and Terraform/IAC automation. Drive end-to-end IAM projects, reduce privilege sprawl, and codify secure-by-default practices and runbooks.

Design, build, and scale IAM solutions across cloud and internal systems. Implement role design and least-privilege models, automate access workflows and reviews, integrate logging/metrics into SIEM, reduce privilege sprawl, identify and mitigate risky permissions, and operationalize IAM projects end-to-end with documentation and runbooks.

Leads SIEM engineering and cloud security for hybrid on-premises and cloud environments. Responsibilities include onboarding applications and workloads, integrating and parsing log sources, creating detection use cases, securing AWS and Azure migrations, supporting EDR and network monitoring, and applying incident response, identity management, segmentation, DLP, and healthcare security practices.

Conducts technical security assessments and RMF activities for complex information systems. Develops security assessment plans, authorization packages, system security plans, contingency plans, POA&M reports, and mitigation recommendations. Collaborates with system owners, security officers, developers, and IT operations to categorize systems, assess controls, document risks, and support continuous monitoring. The role requires independent coordination with stakeholders, strong NIST RMF knowledge, and eligibility to obtain and maintain a customer clearance.

Conduct technical security assessments and risk assessments for complex information systems under NIST RMF guidelines. Develop security assessment plans, Security Assessment Reports, POA&M reports, authorization packages, system security plans, and contingency plans. Coordinate assessments with system owners, security officers, developers, and IT operations personnel. Support IA RMF and continuous monitoring programs, provide remediation recommendations, and independently manage assessment activities.

Lead the strategy, architecture, and development of Uber’s enterprise endpoint security platform across macOS, Windows, and Linux. Drive vulnerability management, application security, scalable defense automation, and AI-enabled security operations. Establish technical direction, mentor engineers, promote engineering excellence, and collaborate across IT, product, and operations teams to improve security posture at cloud scale.

The Security Sales Engineer will support the enterprise sales team, drive security product adoption, conduct demos, and provide technical support throughout the sales cycle.

Designs, deploys, configures, and maintains enterprise Privileged Access Management solutions across hybrid-cloud environments. Automates vault operations, privilege elevation, and credential rotation using PowerShell and infrastructure-as-code. Integrates privileged accounts and target systems with enterprise PAM architecture, monitors performance, troubleshoots issues, manages upgrades, and ensures high availability and disaster recovery. Maintains least-privilege compliance, auditing, technical documentation, standard operating procedures, and operational guides.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Lead strategy and technical execution of vulnerability management, offensive security, and AI-augmented defenses. Own full VM lifecycle, integrate scanning and asset systems, automate remediation, generate security insights, define KPIs/SLAs, advise executives, and mentor engineers to improve organizational security posture and compliance.

Leads KeyBank’s Red Team and offensive security program, including adversary emulation, penetration testing, physical and application assessments, cloud security testing, AI security evaluations, and purple team exercises. Develops testing strategy, methodologies, tooling, metrics, and maturity roadmaps; mentors engineers; coordinates internal and third-party engagements; validates remediation and attack paths; and presents findings and strategic recommendations to executives and cybersecurity stakeholders.

Leads application security engineering for enterprise systems, including SAST and DAST scanning, security control implementation, web application protection, and pipeline development. Uses Veracode, Burp tools, Linux, and programming or scripting languages to identify and remediate vulnerabilities. Applies OWASP, CVSS, CWE, federal compliance standards, and secure architecture practices while supporting scalable digital transformation initiatives. Requires Public Trust eligibility and U.S. citizenship.

Secures and hardens application, cloud, infrastructure, operating systems, containers, CI/CD pipelines, and networks across multi-cloud and on-premises environments. Improves patching and golden-image processes, scales AI-assisted SAST and SCA tooling, prioritizes vulnerabilities, validates fixes, tracks remediation metrics, creates reusable tooling and runbooks, mentors junior engineers, and partners with application and platform teams to deliver security improvements.

Manage and secure endpoint devices across a manufacturing site, including configuration, software deployment, patching, antivirus/EDR, encryption, access control, and authentication. Maintain site cybersecurity policies and controls, monitor security alerts, and coordinate investigations and incident response with corporate IT and security teams. Provide troubleshooting and technical support while collaborating with global teams.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead product security assessments, threat model features, triage and own vulnerability lifecycle from bug bounty, SAST, fuzzing, and pentests. Build AI/LLM-driven automation and tooling to scale triage and enrichment, mentor engineers, and influence security across distributed cloud products.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

As a Solutions Architect, engage with customers to architect cloud solutions, optimize workloads, and provide technical leadership while collaborating with engineering teams.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead design, deployment, and optimization of Cortex XSIAM detections and analytics. Develop XQL detections and threat hunts, build automated response playbooks, integrate security telemetry (endpoint, network, cloud, identity), collaborate with SOC and incident responders, mentor staff, and improve detection fidelity and MTTR at enterprise scale.

Lead product security architecture and offensive testing, including threat modeling, architecture reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, secure design definition, code reviews, and remediation validation. Partner with engineering teams on authentication, authorization, data protection, trust boundaries, and cloud-native security while communicating risks and leading cross-functional security initiatives.

Manage and administer Check Point firewalls, Infoblox DNS and IPAM, and web application firewalls. Implement cybersecurity controls, improve threat detection and vulnerability management, correlate security events, and research emerging security technologies. The role requires troubleshooting complex network security challenges, supporting enterprise infrastructure, tuning security solutions, and participating in rotating on-call duties. Preferred experience includes Cloudflare, Zero Trust, cloud security across Azure, AWS, and GCP, and CISSP certification.

Design, implement, and assess cloud security architectures for intelligence community systems. Develop and evaluate security documentation, perform RMF assessments, recommend and deploy cloud security tools (on-prem, cloud, hybrid), and support accreditation. Collaborate with stakeholders, codify security procedures, and implement infrastructure-as-code solutions to meet mission requirements.

Lead systems engineering and information security activities across the full system lifecycle. Serve as the security coordinator for assigned products, manage security authorization and SSP reauthorization activities, support cloud migration, and ensure technical quality across ISO/IEC 15288 processes. The role requires extensive stakeholder communication, technical leadership, and coordination with sponsors, overseers, senior executives, and cloud architecture teams.