Top Senior Security Engineer Jobs

Lead and mentor engineers to support, implement, and maintain IT infrastructure. Organize maintenance activities, anticipate and mitigate network or other attack vectors, and create and maintain network configuration and process documentation.

Lead design and operation of platform vulnerability management and real-time threat detection across bare-metal, containers, and cloud. Integrate security into CI/CD and IaC, run triage/prioritization, automate posture assessment, conduct platform security assessments, and collaborate with engineering to drive remediation and hardening.

Design, implement, and maintain scalable network security controls (firewalls, IDS/IPS, VPNs) across on-prem and cloud. Drive segmentation, security standards, monitoring/SIEM investigations, architecture reviews, automation, and mentor junior engineers.

Build and operate secure, scalable infrastructure and developer-friendly security platforms. Manage and harden Kubernetes clusters and container registries, run PKI and secrets management, provision secure AWS infrastructure via infrastructure-as-code, enhance CI/CD with automated security checks, develop vulnerability management and CMDB tooling, improve observability, investigate incidents, and partner with engineering and SRE teams to integrate security into developer workflows.

Design, build, and operate secure, developer-friendly infrastructure platforms. Own Kubernetes and container registry security, build vulnerability management and CMDB tooling, provision secure AWS infra via IaC, integrate automated security checks into CI/CD, improve observability, troubleshoot incidents, and collaborate with engineering and SRE teams to scale security across the organization.

Design, build, and operate secure, scalable infrastructure and developer-friendly security platforms. Own and secure Kubernetes platforms and container registries, build vulnerability management and CMDB tools, provision AWS infrastructure with IaC, enhance CI/CD with automated security checks, troubleshoot incidents, improve security observability, and partner with engineering teams to integrate security into developer workflows.

Lead development of security risk-generation platforms for structured products, managing offshore engineers and partnering with portfolio managers and quants. Build scalable, high-performance data infrastructure, reporting tools, and production-quality software that implements complex financial and mathematical models. Improve processes for robustness and performance, enforce coding best practices, perform code reviews, and mentor junior team members.

Design, integrate, and maintain secure multi-enclave network architectures meeting NSA CSfC and DoD/Army requirements. Configure and troubleshoot firewalls, VPNs, routing, VRF, IDS/IPS, virtualization, Windows and RHEL systems, and SIEMs. Develop automation scripts, produce architecture and test documentation, perform vulnerability assessments, and support lab, integration, and field activities with up to 25% travel.

Lead system-level engineering for SATCOM and in‑flight connectivity products, translating customer needs into requirements and use cases, performing system/sub-system design and verification, and maintaining technical documentation. Design and integrate embedded cybersecurity across wired/wireless aircraft systems, perform threat modeling, vulnerability assessments, pen testing, incident response, and security assurance to support certification and regulatory compliance. Mentor juniors, manage technical projects, and scout emerging technologies.

Design and implement Linux-based security architectures for embedded systems, perform security assessments and vulnerability management, integrate DevSecOps practices, implement encryption/authentication, support incident response, train teams, and ensure compliance with security frameworks and standards for embedded Linux devices.

Lead design and deployment of secure automation, infrastructure security, and CI/CD pipelines. Remediate vulnerabilities, support incident response, embed security across development and production, mentor engineers, and drive security strategy and documentation for DevSecOps environments in a defense/aerospace context.

Lead technical and governance cybersecurity for a classified defense program: hands-on vulnerability management, SIEM/ELK/Splunk operations, STIG hardening, RMF/ATO lifecycle ownership, ATO/SSP/POA&M development, ISSM leadership, government stakeholder briefings, and compliance with NIST, CMMC, and DCSA requirements.

Lead design and implementation of security infrastructure for aviation ISR programs. Manage lifecycle of engineering and DevSecOps platforms (RHEL, GitLab/GitHub, Artifactory, 3DX, Cameo, Jama), enforce DISA STIG/NIST/ISO controls, troubleshoot integrations, mentor engineers, and support ATO/RMF and audits.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead design and implementation of security infrastructure and application/platform administration across RHEL/Linux environments. Administer GitLab/GitHub, JFrog Artifactory, 3DX/Cameo/Jama/Teamcenter tools, manage integrations, apply DISA STIGs, support ATO/RMF, perform troubleshooting, and mentor junior engineers while ensuring compliance, change management, and operational readiness in a classified defense program.

Lead design and implementation of security infrastructure and administer mission-critical engineering and DevOps applications. Manage Linux/RHEL systems, JFrog Artifactory, GitLab/GitHub, 3DX/Cameo/Jama/Teamcenter platforms, integrations, DISA STIG hardening, CI/CD integrations, and provide Tier 2/3 troubleshooting, compliance support, and ATO/RMF evidence for a classified defense program.

Lead design and implementation of secure database and enterprise storage architectures across relational, NoSQL, and cloud platforms. Manage performance, backup/recovery, HA, SAN/NAS, security hardening (DISA STIG/NIST), and ATO/RMF evidence. Serve as technical escalation, mentor junior staff, and support program architecture and acquisition decisions in a cleared defense environment.

Lead RMF-based authorization and cybersecurity engineering for weapon and PIT systems. Assess architectures, perform A&A tasks, recommend mitigation, develop security requirements and strategies, use scanning tools (Nessus/ACAS/SCAP/STIGs), support DevSecOps reviews, and implement program protection plans including CPI/CC and Tempest considerations.

Lead design and implementation of secure IT infrastructure for ISR/aviation programs. Perform advanced security monitoring, threat analysis, incident response, and digital forensics. Conduct risk and vulnerability assessments, develop and enforce security controls, research security technologies, oversee breach documentation, and mentor junior engineers. Requires on-call participation and occasional travel.

Design, implement, and monitor security controls and architectures. Develop automation and tools, deploy endpoint agents, lead penetration testing and vulnerability remediation, triage alerts, and produce assessment reports. Provide after-hours availability for outages and project rollouts.

Lead and execute hands-on red team operations simulating real-world adversaries across applications, cloud, and enterprise environments. Identify and chain high-impact vulnerabilities, perform manual exploitation and control bypasses, validate detections and response, produce actionable remediation guidance, improve tooling/automation, and mentor junior red team engineers.

Design and build agentic AI-driven security testing systems and automation frameworks. Integrate static/dynamic analysis, reverse engineering, network analysis, and custom tooling to enable autonomous and human-in-the-loop workflows that scale security testing across mobile, desktop, IoT, and APIs. Prototype, evaluate, and productionize agent orchestration, evaluation, and MLOps infrastructure.

Design, configure, deploy, monitor, and troubleshoot network security solutions. Lead NAC (Cisco ISE) and 802.1x implementations, migrate legacy platforms, provide assessments, capacity planning, documentation, and support multi-tier application integrations and threat remediation.

Lead cloud security engineering to implement and scale cloud-native security controls across AWS/Azure/GCP. Drive CSPM/CNAPP posture management (Wiz, native policies), policy-as-code, IaC automation, container/Kubernetes and API security, and AI-driven security capabilities. Partner with engineering, DevSecOps, IAM, governance, and audit teams to translate controls into repeatable patterns, improve remediation workflows, and support regulatory and risk objectives.

Build and maintain scalable vulnerability management systems and tooling. Drive automation and integrations with scanners, SIEMs, and CI/CD pipelines. Partner cross-functionally to prioritize, track, and remediate vulnerabilities, design aggregation pipelines, and embed security automation across the development lifecycle.