Top Senior Security Engineer Jobs

The Senior Identity Security Engineer manages identity security for Palantir's infrastructure, designing systems, threat modeling, and ensuring security in diverse environments.

As a Senior Identity Security Engineer, you'll oversee identity security infrastructure, architect authentication systems, and lead identity threat modeling, while collaborating with engineering teams on governance and policy enforcement.

As a Senior Identity Security Engineer, you'll oversee the identity security infrastructure, architecting authentication systems, threat modeling, and enhancing identity security outcomes.

Responsible for managing operations within classified environments, overseeing cloud infrastructure, automating tasks, and ensuring system stability in a high-security setting.

Lead security engineer responsible for designing, building, and reviewing secure, high-performance API-first services and integrations. Provide technical guidance, implement secure production code, influence product and architecture decisions, and embed AI-assisted security practices within the SDLC. Ensure scalable, cloud-native distributed systems, validate AI outputs, and uphold traceability, resiliency, and auditability across security workflows.

Senior hands-on security engineer responsible for designing, building, and implementing enterprise security solutions across cloud, hybrid, and on-prem environments. Integrates security into SDLC, automates controls, performs threat modeling and risk assessments, leverages AI-assisted tools, mentors junior engineers, and leads incident response and post-incident improvements.

Lead corporate security investigations and incident response across identity, endpoints, SaaS, email, and security platforms. Improve detection, response, Zero Trust controls, automation, and incident readiness. Conduct vendor security assessments, support customer security questionnaires, document risk decisions, and collaborate with Security, IT, Engineering, Legal, GRC, Procurement, Sales, and Customer Success teams.

Lead and improve the Secure SDLC across software, firmware, cloud, and AI-enabled environments. Conduct application and architecture reviews, threat modeling, source code assessments, vulnerability management, and penetration testing support. Define secure coding standards and security gates, implement DevSecOps controls including SAST, DAST, SCA, secrets scanning, and container security, and automate security testing. Partner with engineering and DevOps teams, mentor developers, and drive security-by-design practices.

Designs and maintains security controls across cloud, SaaS, on-premises, and corporate environments. Embeds security into software development and CI workflows, leads vulnerability management, conducts threat modeling and risk assessments, develops security automation, responds to incidents, and supports compliance audits. The role also guides secure coding, manages AWS and Azure security controls, develops policies, monitors threats, and mentors engineering teams.

As an Endpoint Platform Staff Engineer, you will design and manage enterprise mobile device management solutions, ensuring secure operations and compliance across multiple platforms. You will work with teams to optimize processes and define key performance indicators for continuous improvement.

As an Endpoint Platform Staff Engineer, you'll design, implement, and manage mobile device management solutions, ensuring security and efficiency across various devices. You'll collaborate on optimizing operations and establishing best practices for endpoint management and automation.

Leads and mentors cybersecurity professionals implementing the RMF lifecycle for IT systems. Oversees system categorization, security control selection and implementation, assessments, authorization documentation, continuous monitoring, risk analysis, remediation, incident response, audits, and stakeholder reporting. Provides technical guidance, training, and cybersecurity expertise while maintaining alignment with NIST guidance, DoD requirements, and industry best practices.

Owns security and compliance across IT, software development, GCP infrastructure, and subprocessors. Responsibilities include managing SecOps tools, improving software security posture, conducting security and AI audits, maintaining compliance artifacts, developing data and AI governance, vetting technologies, and managing contractual security obligations. The role partners with engineering teams and requires experience with Vanta, cloud DevOps, infrastructure as code, identity platforms, security reviews, and regulated industries.

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

Designs and maintains secure AWS and Azure cloud environments, including landing zones, security guardrails, IAM policies, compliance controls, monitoring, and incident response. Integrates security testing and vulnerability scanning into CI/CD and SSDLC workflows using Terraform and DevSecOps practices. Partners with engineering and security teams to implement secure infrastructure, improve observability, manage vulnerabilities, and support governance frameworks including NIST, CIS, SOC 2, and ISO 27001.

The Cloud Security Engineer will secure cloud infrastructure, implement solutions for systemic risks, and support internal projects using Kubernetes and service mesh technologies.

Designs, deploys, hardens, and secures Microsoft Windows infrastructure supporting air traffic control systems. Responsibilities include Windows Server and workstation administration, Active Directory and Group Policy management, security architecture, vulnerability assessments, penetration testing, endpoint protection, RBAC, system hardening, remediation, documentation, and customer technical guidance. The role also leads security and deployment teams and ensures compliance with applicable security frameworks and regulations.

Lead design, development, testing, and integration of secure firmware and platform security features. Architect secure boot, hardware root-of-trust, key management, and cryptographic solutions. Drive cross-functional initiatives, review designs and code, mentor engineers, and evaluate emerging security technologies for integration into products.

Leads cybersecurity professionals implementing the Risk Management Framework for federal IT systems. Oversees system categorization, security control selection and assessment, authorization documentation, continuous monitoring, risk analysis, remediation, incident response, audit support, and stakeholder training. Advises leadership on cybersecurity risks and compliance while maintaining alignment with NIST guidance and DoD requirements.

Assesses and continuously monitors cybersecurity controls across federal systems, reviews authorization documentation, and guides RMF activities. Advises on system categorization, control selection, implementation, assessment, remediation, risk analysis, incident response, and audit support. Coordinates with system owners, ISSEs, and ISSOs; prepares authorization documentation; reports risks and metrics to leadership; and provides cybersecurity guidance and training. Requires an active TS/SCI clearance and the ability to obtain a polygraph.

Assesses and documents cybersecurity controls across the Risk Management Framework lifecycle. Reviews system evidence, guides categorization and control selection, oversees assessments and continuous monitoring, prepares authorization risk documentation, and advises stakeholders on remediation, incident response, audits, and compliance. Coordinates with system owners, ISSEs, and ISSOs while reporting security risks and improvement opportunities to leadership.

Develop and support Ambiq's Trusted Execution Environment and related security implementations for embedded systems, ensuring compliance with security standards and seamless integration with customer builds.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.