Top Senior Security Engineer Jobs

Lead COMSEC implementation and lifecycle management: enforce COMSEC policy, deploy and sustain cryptographic hardware, protect keying material, perform rekeying, maintain asset accountability and audit readiness, provide custodian training and SME cryptographic integration support for CONUS deployments.

Design and implement enterprise security architectures, lead AI/ML security (LLMs, GenAI, MLOps), develop security policies, conduct risk assessments, support incident response, mentor junior staff, and enhance cloud, network, IAM, data, and endpoint security.

Lead administration and engineering of large enterprise Splunk deployments: manage data collection, maintain Splunk ES content and performance, deploy upgrades and add-ons, configure forwarders, support API integrations, develop documentation, enforce RBAC and compliance, and collaborate with analysts to improve detection and response.

Senior engineer responsible for hands-on design, development, and deployment of ServiceNow IRM and SecOps solutions. Build event-driven automation, engineer integrations with security tools (Splunk, Tenable, Qualys), implement CAM/RMF workflows, develop server- and client-side GlideScripting, enforce platform ACLs/data filtration, and validate work using Automated Test Framework across environments.

Lead hands-on engineering and deployment of ServiceNow IRM and SecOps solutions. Build event-driven automation, integrate external security tools (Splunk, Tenable, Qualys), implement RMF/CAM workflows, develop GlideScript/JavaScript logic, enforce platform ACLs, and validate work with ATF across environments.

Lead Splunk-based data collection, ingestion, and monitoring efforts. Troubleshoot and remediate system and data issues, deploy/manage Splunk add-ons and forwarders, implement role-based access, produce deployment and accreditation documentation, and ensure compliance with DoD C&A and security guidance.

Design, review, and build security systems for multi-tenant cloud and corporate environments. Develop internal security tooling (WAF, vulnerability management), harden production components, improve monitoring/patching, contribute to authentication/identity (SSO/SCIM), translate compliance controls, and participate in the security on-call rotation.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Lead design, deployment, and sustainment of Comply-to-Connect (C2C) solutions. Manage appliances, servers, and infrastructure; produce network architecture diagrams; evaluate upgrades; monitor and troubleshoot performance; support A&A and system accreditation; collaborate with cross-functional teams and customers to integrate and communicate technical requirements.

Design, build, and scale HSM-backed cryptographic and key-management services for large-scale cloud environments. Implement PKI, TLS, client-side encryption, TEEs, and Confidential VMs. Integrate identity (OAuth/SAML/Keycloak) and secure Google Workspace services. Ensure cryptographic lifecycle, compliance (FIPS), high availability, and support secure deployments across cloud APIs, OS, and hardware.

Lead architecture, integration, deployment, and optimization of enterprise EDR (MDE, Trellix HX) across hybrid environments. Develop engineering and deployment plans, optimize agent configurations, monitor endpoint health, convert threat intelligence into IOCs using KQL and YARA, advise stakeholders, support SOC forensics, and mentor junior engineers.

Design and assess secure architectures for software, embedded, hardware, and cloud systems. Lead threat modeling, risk assessments, compliance/ATO support (RMF, NIST, CMMC), security testing, and remediation. Establish secure engineering standards, mentor teams, and collaborate across engineering and program stakeholders to integrate security throughout the product lifecycle.

Design and assess secure software and hardware architectures for mission-critical sensor platforms. Lead threat modeling, risk assessments, compliance/authorization (RMF/ATO), security testing, and secure development practices. Collaborate with cross-functional engineering teams to integrate security across the product lifecycle and mentor on security-by-design.

Design and assess secure architectures for software, embedded, hardware, and cloud systems. Lead threat modeling, risk assessments, security testing, and remediation. Support RMF/ATO compliance, security documentation, and audits. Integrate security into the SDLC, mentor engineering teams, and collaborate cross-functionally to operationalize product security and secure development practices.

Define and decompose product security requirements, develop and run manual and automated security validation tests (functional and abuse tests) at vehicle, system, sub-system and ECU levels using SIL/HIL. Build test cases in multiple languages, document results for compliance (UN R155, ISO 21434), triage findings, collaborate with development teams to recommend and validate fixes, and align documentation with CSMS and GRC processes.

Design, deploy, and automate network security controls across enterprise, cloud, and retail edge environments. Implement ZTNA, NGFWs, microsegmentation, and firewall policy-as-code. Integrate identity and authentication frameworks, triage security events, produce documentation and RCAs, mentor engineers, and participate in on-call rotation to maintain resilient security posture.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Lead and perform advanced penetration tests across the banks global technology environment. Hunt for high-risk vulnerabilities, exploit chains, document findings, articulate risk to stakeholders, mentor junior engineers, and collaborate with security and business partners to improve detection and response.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Produce client briefings, mentor junior operators, and improve operational tooling and efficiency.

Lead and execute offensive cyber operations including red team engagements, network exploitation, malware analysis, and tool development. Provide written and oral client briefings, mentor junior operators, and create scripts to improve operational efficiency.

Conduct offensive cyber operations, red team and penetration tests, network exploitation, malware analysis, and tool development. Analyze network/system weaknesses, brief clients and management, and train junior operators to improve operational tradecraft and efficiency.

Conduct offensive security assessments and red team operations to identify network and system vulnerabilities; perform malware and packet analysis; develop scripts and tools; deliver written and oral briefings to clients and management; and train and mentor junior operators.

Senior network/security engineer responsible for Palo Alto firewall and Panorama administration, proxy engineering, DLP and SCM integration, packet-level troubleshooting (tcpdump/Wireshark), SIEM log correlation (Splunk/ELK), Zero Trust network design, and ensuring IRS/NIST boundary protection compliance. Leads firewall normalization, Panorama 12.x integration with Strata Cloud Manager, and DLP plugin upgrades.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Lead cloud security for GCP and Azure by operationalizing CNAPP tooling, embedding security-as-code with Terraform/CI-CD, driving vulnerability management, improving detection and response with Chronicle, hardening data and endpoint security, and mentoring engineers while serving as senior escalation during incidents.