Top Senior Security Engineer Jobs

Lead application security by performing risk analyses, vulnerability assessments, SAST/DAST and SCA testing, secure design and code review, threat simulations, cloud and WAF hardening, CI/CD security integration, and reporting to senior management while coordinating remediation with development and IT teams.

Lead RMF-based A&A efforts, conduct risk assessments and security testing, manage POA&Ms, drive application and container security, support cloud and deployment architecture, produce A&A artifacts, and coordinate cross-functional teams and client deliverables.

Lead cybersecurity engineering for US Naval warfare systems: author A&A artifacts, apply RMF and DISA STIGs, design/detect/correct defenses, plan and execute security testing, shepherd ATO/IATO processes, and serve as Information Assurance Officer and technical lead for risk assessments and vulnerability management.

Lead technical marketing for API, AI agent, and application security by deploying and testing Akamai products, building PoCs, demos, labs, and attack simulations, creating technical content and enablement, validating messaging, and presenting technical briefings while collaborating with product, engineering, and field teams.

Design and build security and infrastructure systems for an AI data platform: detect and respond to security events, automate security workflows, harden cloud and production environments, enforce access control, integrate security into development workflows, own incident handling, secure data and model interaction layers, and contribute to human-in-the-loop systems and core internal tooling.

Senior cyber security engineer responsible for RMF/A&A activities for SLBM and naval warfare systems: author A&A artifacts, document systems, apply DISA STIGs/NSA guidance, lead security test and vulnerability analysis, produce SSAOM, manage IAVM and obtain ATO/IATO, and perform risk assessments and technical security design.

Lead design and implementation of cloud security controls across AWS/GCP, Kubernetes, and serverless environments. Harden infrastructure, automate IAM and secrets management, integrate security scanning into CI/CD, operationalize vulnerability management and threat modeling, and partner with engineering to embed DevSecOps practices across AI-driven workflows.

Work directly with engineering to identify systemic application security gaps, build SAST/SCA tooling and custom static analysis, perform secure code and design reviews, threat model new features (including agentic AI/LLM systems), and present security posture to enterprise healthcare customers.

Define and own vehicle system security requirements and architectures. Collaborate with OEMs and systems engineers to implement network/module security. Create security requirements for software interfaces, develop and execute V&V plans, run tests, analyze results, resolve defects, and manage delivery timing of security features and software updates across vehicle prototypes.

Lead application, cloud, and data security efforts: perform static/dynamic testing, threat modeling, incident response, cloud forensics, and vendor risk assessments. Design and harden cloud and IaC security, manage DLP/encryption solutions, optimize vulnerability management, and maintain security policies, controls, and reporting across Azure, AWS, and Fabric environments.

Serve as the cybersecurity SME for the generation fleet: lead segmented architecture deployments and vulnerability remediation, develop fleet-wide standards, oversee compliance audits, lead incident root-cause analysis, build dashboards/metrics, and represent cybersecurity on capital projects and plant upgrades.

Lead maturation and day-to-day operations of IAM/CIAM services: provisioning/deprovisioning, access reviews, role-based access implementation, integrations, troubleshooting, audit support, documentation, and mentoring operations staff.

Design, implement, and operate network and infrastructure security controls (WAF, IPS, DDoS) in production; automate deployments and validations; partner with internal teams; secure cloud and containerized environments (AWS/GCP, Kubernetes); ensure compliance with FedRAMP/DoD IL4; support U.S. Federal contracts requiring U.S. citizenship and security-clearance eligibility.

Lead IIoT product security architecture and governance across the device lifecycle. Define secure hardware/firmware controls, enforce industrial security standards, perform threat modeling and risk management, coordinate vulnerability response and supply chain security, and advise cross-functional teams during incidents and product design.

Lead Datadog-first security observability and detection engineering: design, scale and tune Datadog Cloud SIEM, log pipelines, detection rules and telemetry. Correlate signals across EDR, cloud and identity, automate detection-as-code, reduce false positives, and build dashboards, monitors and workflows in partnership with Security Ops, SRE and Engineering.

Lead governance and security for enterprise Power Platform: design controls, build automation and remediation using PowerShell/APIs, improve security visibility, partner with stakeholders, and mature operational processes across large-scale environments.

Implement, validate, and maintain application security controls across database, middleware, web, API, and presentation layers. Identify and remediate application-layer risks, assess internet-facing exposures, enforce auth/credentials/encryption standards, coordinate with vendors and application owners, and drive remediation using vulnerability scanning and security testing. Improve application security posture and governance across a large portfolio of commercial third‑party applications.

Senior Level 3 SOC engineer owning high-severity incident investigations and escalations. Lead threat hunting, detection engineering, automation (SOAR/SIEM), cloud and forensic investigations, and mentor SOC staff. Participate in on-call rotation and drive cross-functional remediation, threat modeling, and AI-enabled security capabilities (Agentic SOC, AI DLP).

Lead cloud and SaaS security across AWS and core platforms. Configure and operate CSPM/CNAPP tooling, build detections in SIEM/EDR, drive remediation with platform teams, secure containers and workloads, lead cloud incident response, and implement policy-as-code guardrails for secure deployments and MLOps pipelines.

Lead end-to-end design, analysis, test, procurement, and operations of spacecraft RF and optical communications systems. Provide technical leadership and mentorship, perform link budgets and EM/antenna simulations, define architecture and requirements, execute RF test campaigns, manage suppliers, coordinate interfaces with ground/relay systems, and support integration, launch, and early operations.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Design and analyze ground support equipment, tooling, fixtures, and custom machines for space vehicle integration and test. Perform structural analysis (FEM and hand calculations), create CAD models and drawings (apply GD&T and ASME Y14.5), support vendor selection, fabrication, installation, testing, and project scheduling/budget inputs.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Perform application security analysis using automated and manual techniques (SAST, SCA, fuzzing, code reviews), integrate and tune security tooling in CI/CD pipelines, support developers with remediation, conduct threat modeling and secure design reviews, document findings, and embed security into the development lifecycle for mission-critical defense software.

Lead and execute product security testing (DAST, SCA, API, pen tests), analyze exploitability, verify fixes, produce security assessment reports, contribute to secure SDLC, threat modeling, tool evaluation, customer/partner security responses, and maintain lab deployments for testing.