Top Senior Security Engineer Jobs

Designs, deploys, hardens, and secures Microsoft Windows infrastructure supporting air traffic control systems. Responsibilities include Windows Server and workstation administration, Active Directory and Group Policy management, security architecture, vulnerability assessments, penetration testing, endpoint protection, RBAC, system hardening, remediation, documentation, and customer technical guidance. The role also leads security and deployment teams and ensures compliance with applicable security frameworks and regulations.

Lead design, development, testing, and integration of secure firmware and platform security features. Architect secure boot, hardware root-of-trust, key management, and cryptographic solutions. Drive cross-functional initiatives, review designs and code, mentor engineers, and evaluate emerging security technologies for integration into products.

Leads cybersecurity professionals implementing the Risk Management Framework for federal IT systems. Oversees system categorization, security control selection and assessment, authorization documentation, continuous monitoring, risk analysis, remediation, incident response, audit support, and stakeholder training. Advises leadership on cybersecurity risks and compliance while maintaining alignment with NIST guidance and DoD requirements.

Assesses and continuously monitors cybersecurity controls across federal systems, reviews authorization documentation, and guides RMF activities. Advises on system categorization, control selection, implementation, assessment, remediation, risk analysis, incident response, and audit support. Coordinates with system owners, ISSEs, and ISSOs; prepares authorization documentation; reports risks and metrics to leadership; and provides cybersecurity guidance and training. Requires an active TS/SCI clearance and the ability to obtain a polygraph.

Assesses and documents cybersecurity controls across the Risk Management Framework lifecycle. Reviews system evidence, guides categorization and control selection, oversees assessments and continuous monitoring, prepares authorization risk documentation, and advises stakeholders on remediation, incident response, audits, and compliance. Coordinates with system owners, ISSEs, and ISSOs while reporting security risks and improvement opportunities to leadership.

Develop and support Ambiq's Trusted Execution Environment and related security implementations for embedded systems, ensuring compliance with security standards and seamless integration with customer builds.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Develop backend systems for large-scale web applications and security products primarily in Go. Write robust, modular code, optimize performance, participate in code reviews and documentation, and collaborate across technical and product teams. The role requires strong HTTP and networking knowledge, Linux, automation, shell scripting, and backend operations experience. Engineers participate in core US business hours and an on-call rotation, with occasional travel as needed.

Lead database engineering for a federal species-data integration program in a hybrid AWS cloud environment. Responsibilities include harmonizing schemas, documenting source-to-target mappings and lineage, enforcing metadata and data-quality standards, implementing encryption and NIST-aligned security controls, building authoritative source registries, optimizing performance, and leading production migration, validation, monitoring, and operational documentation. The role requires Databricks or equivalent lakehouse expertise, ETL programming, federal governance knowledge, and database migration leadership.

Designs, deploys, and secures global manufacturing infrastructure, including high-performance networks, CPU/GPU compute, storage, HPC clusters, and cloud services. The role architects resilient connectivity for OT and IT environments, develops automation, enforces security and reliability standards, supports factory-floor infrastructure, and rapidly troubleshoots DNS, DHCP, networking, and infrastructure incidents affecting manufacturing operations.

Leads industrial cybersecurity operations as an L2 SOC escalation resource. Monitors SIEM and ICS infrastructure, evaluates incidents, develops SOAR playbooks, performs threat hunting and malware analysis, supports forensics, tunes detection rules, recommends remediation, and mentors SOC analysts. The role requires extensive SOC, incident response, SIEM/SOAR, and security automation experience, including Python, with hybrid work in Duluth, Georgia.

Leads industrial cybersecurity operations across global managed services customers. Responsibilities include SIEM monitoring, SOC escalation, SOAR process and playbook development, incident triage, malware analysis, threat hunting, forensic support, alert tuning, remediation orchestration, and mentoring SOC analysts. The role operates as an L2 SOC escalation layer and supports ICS environments including SCADA, HMI, PLC, and RTU systems.

Provides Level 2 SOC escalation and industrial cybersecurity services for OT environments. Monitors SIEM and ICS infrastructure, evaluates and enriches security incidents, develops SOAR playbooks and automation, performs malware analysis and threat hunting, supports forensic investigations, tunes detection rules, coordinates remediation, and mentors junior SOC analysts. The role also documents procedures, communicates security trends, and advises customers on defense-in-depth and control improvements.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Leads enterprise cybersecurity monitoring, threat detection, vulnerability management, SIEM analytics, threat hunting, incident response, and continuous monitoring for federal and DoD-aligned environments. Oversees ACAS/Nessus scanning, STIG validation, patch compliance, detection engineering, threat intelligence, reporting, and remediation coordination. Collaborates with cloud, DevSecOps, ISSO, and engineering teams while mentoring junior analysts and improving security automation.

Leads the design, implementation, and operation of information security controls across systems, networks, endpoints, and cloud environments. Responsibilities include SIEM/MDR, EDR/XDR, SOAR, vulnerability management, PAM, Zero Trust, incident response, data protection, DLP, and cloud security. The role collaborates with IT, Privacy, Compliance, and application teams, mentors engineers, supports security architecture and SDLC practices, and may provide periodic on-call incident response support.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS environments, investigates and triages incidents, develops SOAR automation and playbooks, performs threat hunting and malware analysis, supports forensics and root cause analysis, tunes detection rules, recommends remediation, and mentors junior SOC analysts. The role serves as an L2 escalation point and requires expertise in SOC operations, incident response, SIEM, SOAR, and Python-based security automation.

Leads industrial cybersecurity operations within a global managed services SOC. Monitors SIEM and ICS infrastructure alerts, investigates and triages incidents, develops SOAR playbooks and automation, performs threat hunting, malware analysis, threat modeling, and supports forensic investigations. Provides remediation guidance, tunes security monitoring controls, supports root cause analysis, mentors SOC analysts, documents procedures, and serves as an L2 escalation resource for industrial customers.

Leads industrial cybersecurity operations for global customers, monitoring SIEM and OT infrastructure, evaluating and escalating incidents, developing SOAR playbooks, conducting malware analysis and threat hunting, supporting forensic investigations, tuning detection rules, coordinating remediation, and mentoring SOC analysts. The role serves as an L2 SOC escalation point and develops security documentation, recommendations, and communications.

Design, build, and operate ingestion pipelines and normalized security data products for vulnerability risk management. Transform raw evidence into model-ready features, enable ownership routing and remediation workflows, and maintain data quality, lineage, and observability. Partner with security, engineering, and platform teams to support reporting, risk models, and shift-left scanning readiness.

Lead engineering and operations for the enterprise PKI infrastructure, supporting internal and external CAs, SSL and code signing. Design, test, implement PKI changes, run POCs, consult business units on encryption and certificates, interface with vendors, ensure high availability, and coordinate large integration and migration projects.

Design, implement, and operate application and cloud security controls across the SDLC. Integrate security tooling (SAST/DAST/SCA/IaC), secure CI/CD pipelines, run secure code reviews and threat modeling, deploy and manage cloud security posture and CNAPP tooling, and partner with engineering teams to remediate vulnerabilities and build secure, repeatable patterns.

Design, develop, and deploy autonomous AI agents and ML models to automate cybersecurity use cases (incident investigation, vulnerability prioritization). Integrate LLMs, build data pipelines with vector databases, implement MLOps and cloud AI deployments, enforce safety/compliance guardrails, and optimize workflows for automated remediation.

Lead the security architecture and implementation for an enterprise AI platform: secure cloud infrastructure, data protection, IAM, tenant isolation, and GenAI workflows. Embed security into CI/CD, IaC, containers, secrets management, and operations. Design secure customer deployment patterns, support enterprise security reviews, and partner on compliance (SOC 2, ISO 27001, SSPA) while personally implementing critical security capabilities and guiding cross-functional engineering teams.