Top Senior Security Engineer Jobs

Operates and improves enterprise cybersecurity across endpoints, identities, networks, cloud services, applications, email, and security platforms. Responsibilities include monitoring, incident response, vulnerability management, endpoint and identity administration, firewall and cloud security, application and email protection, compliance support, awareness training, reporting, documentation, and cross-functional remediation coordination.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

The Senior Cloud Security Engineer protects NYC agency systems by assessing cloud and on-premises security, identity and access management, network defenses, email filtering, and endpoint protection. The role ensures compliance with cybersecurity policies, guides security architecture and remediation, operates defensive technologies, coordinates technical projects, communicates with stakeholders, and documents deployment plans. Work occurs within a 24/7 operation and may require nights, evenings, or weekends.

Designs, operates, and secures on-premises and cloud network architectures across Cisco Meraki, Cloudflare, AWS, and GCP. Responsibilities include network segmentation, firewalls, VPNs, zero-trust access, security monitoring, incident response, and protection of CUI, EAR, and ITAR-controlled data. The role partners with IT, security, and engineering teams to meet compliance and business requirements.

Own and modernize PKI and certificate lifecycle systems for automotive products and EV charging. Design authentication and authorization using X.509, mTLS, OAuth2, and OIDC; build shared infrastructure with Kubernetes, service mesh, and workload identity; support secure boot and key management; operate production services through GitOps and observability; document systems and mentor engineers.

Develop low-level firmware for secure enclaves in custom ASICs supporting secure boot, attestation, root of trust, provisioning, secure updates, recovery, telemetry, tamper monitoring, and debugging. Collaborate with ASIC, hardware, security, software, and systems teams on interfaces and requirements. Support pre-silicon validation, FPGA and simulation development, silicon bring-up, production deployment, testing, code reviews, and documentation.

Architects, deploys, and configures data security solutions for federal, DoD, and IC clients. Designs Zero Trust architectures, develops custom policies for hybrid cloud data control, and interfaces with agency stakeholders and internal engineering teams. Documents technical architectures and applies DSPM, DLP, data labeling, and tagging technologies. Requires TS/SCI clearance and experience with data security tools.

Designs, implements, and maintains enterprise network security infrastructure, with emphasis on Palo Alto firewalls, GlobalProtect VPN, hybrid Azure/AWS connectivity, routing, switching, and 802.1X certificate-based access control. Secures wired, wireless, camera, and IoT devices using TLS/PKI authentication; troubleshoots firewall, VPN, wireless, and network issues; manages VLAN segmentation and Ruckus switching; and may support Prisma and CASB initiatives.

Designs and operates identity security controls across enterprise platforms, including conditional access, privileged access, workload identities, and phishing-resistant authentication. Analyzes security logs, supports FIDO2 rollouts, manages identity risk, and participates in attack path management. The role also researches AI-assisted security tooling, automates operational workflows, documents standards and runbooks, and collaborates with Security, Systems, DevOps, Network, and Development teams.

Develops and validates hardware and software security solutions for DoD sensor payloads and mission systems. Responsibilities include systems security architecture, requirements development, anti-tamper and cybersecurity implementation, reverse engineering, security testing, RMF compliance, technical release analysis, exportability assessments, cryptographic protection, A&A documentation, and POA&M maintenance. The role collaborates with government, program, business development, and international stakeholders and provides technology-release training. This is a full-time, on-site position in Rolling Meadows, Illinois.

Detects, investigates, responds to, and remediates cyber threats across Azure, AWS, GCP, Microsoft 365, and SaaS environments. Builds and tunes KQL and Sigma detections, leads incident response, hardens cloud environments, investigates anomalous activity, and develops automation using scripts, Logic Apps, and AI-assisted tools. Produces operational and after-action reporting while staying current on emerging cloud attack techniques.

Secure and scale cloud infrastructure by implementing CI/CD, hardening DigitalOcean and other cloud environments, managing certificates and DNS, integrating IAM/SSO and KYC providers, applying DevSecOps practices, automating infrastructure as code, participating in incident response, and collaborating with engineering teams to optimize deployments and reduce downtime.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Operate and improve cloud security controls across AWS, Azure, Kubernetes, and hybrid environments. Investigate vulnerabilities, misconfigurations, identity risks, and exposure paths using CSPM/CNAPP platforms; prioritize findings and drive remediation. Build Python- and API-based security tooling, dashboards, integrations, automation, and guardrails supported by infrastructure as code and CI/CD. Secure Kubernetes workloads, conduct architecture and pipeline reviews, investigate incidents, and collaborate with Cloud Operations, SRE, and engineering teams.

Designs, automates, and supports complex cybersecurity solutions across cloud and infrastructure environments. Responsibilities include security alert monitoring, incident and vulnerability management, security architecture, SIEM tuning, access reviews, compliance with frameworks such as SOC 2 and CMMC, risk assessments, third-party security reviews, scripting, and secure technology guidance. The role also mentors team members and partners with technical and business stakeholders to improve security posture.

Lead design and delivery of Agentic AI IAM and secrets management across hybrid environments. Build secure authentication/authorization, centralized secrets vaulting, automated rotation, governance, monitoring, and operational metrics. Partner with infrastructure, cloud, DevOps, application, and risk teams to implement Zero Trust, machine identity security, and AI agent safeguards while driving enterprise program execution and compliance.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead cloud security initiatives across AWS, Azure, and GCP by partnering with SRE, architecture, and app teams. Implement secure-by-design controls, monitor and improve cloud posture, support compliance, threat detection, incident response and forensics, mentor junior engineers, and integrate new security technologies into networking cloud environments.

Provides onsite cybersecurity engineering for classified defense intelligence systems. Responsibilities include supporting DIA authorization and accreditation under RMF, obtaining IATT, ATC, and ATO approvals, designing secure systems and physical controls, configuring and validating security tools, developing test plans, analyzing scan results, remediating vulnerabilities, and supporting incident response. The role requires advanced Windows and Linux administration, security tool expertise, IAT Level 2 compliance, and a TS/SCI clearance with polygraph.

Lead the engineering modernization of enterprise data protection and DLP capabilities across cloud, SaaS, endpoints, email, and collaboration platforms. Build automated Policy-as-Code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, guardrails, and operational metrics. Partner with technical, compliance, privacy, legal, and business teams to improve security effectiveness, reduce false positives, automate governance, investigate events, and demonstrate measurable risk reduction.

Leads the design and implementation of secure IT infrastructure, performs security monitoring and threat analysis, enforces security controls, evaluates security technologies, manages patching and vulnerability scanning, and maintains continuous system security. Provides guidance to stakeholders, manages security projects, mentors junior engineers, and participates in incident-response on-call rotations.

Owns the company-wide IT and cybersecurity program, including SOC 2 compliance, cloud security, penetration-test remediation, business continuity testing, endpoint management, access controls, onboarding and offboarding, AI security governance, vendor reviews, security training, incident response, and employee IT support. The role partners with engineering, HR, Finance, leadership, auditors, and healthcare customers while managing security across AWS, Heroku, Cloudflare, Google Workspace, GitHub, and related tools.

Design and implement onboard networking and security for spacecraft: define Ethernet switching/routing, packet and file encryption, FPGA-to-FPGA links and NoC, apply FEC, integrate PHY/MAC, validate link health, and author architectural documentation.

Lead cybersecurity engineering for systems, ensuring compliance with RMF/NIST and security standards (STIG, OWASP, CIS). Perform vulnerability assessments, A&A support, risk analyses, implementation guidance, and vulnerability remediation using tools like Nessus, Nexpose, ACAS, and SAST/DAST. Coordinate stakeholders, document security posture, and obtain required special access and clearances.

Lead embedded systems security for sensor and mission solutions: ensure compliance with government policies (JSIG, DAAPM), develop/validate cybersecurity requirements, support ST&E, perform reverse engineering/anti-tamper analysis, manage A&A documentation and POA&Ms, guide exportability and international requirements, and drive secure architecture, testing, and policy alignment across hardware and software lifecycles.