Top Senior Security Engineer Jobs

Design and implement memory-safe secure middleware and OTA update systems for edge controllers (C/C++/Rust). Architect DTN-based asynchronous protocols, build cryptographic disruption handling, and apply formal verification, static analysis, and adversarial threat modeling to ensure long-lived, zero-trust resilience against nation-state adversaries.

Lead design, development, testing, and integration of secure firmware and platform security features. Architect secure boot, hardware root-of-trust, key management, and cryptographic solutions. Drive cross-functional initiatives, review designs and code, mentor engineers, and evaluate emerging security technologies for integration into products.

Lead product security initiatives by reviewing and writing customer-facing code, performing threat modeling, architecture reviews, and offensive security exercises. Secure CI/CD, cloud infrastructure, and distributed systems, mentor engineers, and deliver security tooling and monitoring to protect customer assets.

Design, build, and maintain SOAR playbooks and automated incident-response workflows; integrate security, IT, and cloud systems; deploy cloud security infrastructure via IaC; apply AI/LLM tools to security automation; collaborate with SOC, detection engineering, and IR teams; measure and report automation performance and ROI to leadership.

Design, implement, and operate security platforms (firewalls, IDS/IPS, SIEM, MDM). Perform vulnerability assessments, monitor and analyze security logs, drive remediation, enforce security policies, and evaluate new security technologies.

Lead security strategy, operations, and GRC across corporate and customer-facing transit systems. Drive security architecture, incident response (incident commander), threat intelligence, tabletop exercises, vendor risk management, and compliance across PCI DSS, SOC 2, and ISO 27001. Serve as primary auditor contact and communicate risk to leadership.

Lead application security across product, pipeline, and customer environments by partnering with engineering to integrate secure design, conduct threat modeling and risk assessments, manage code and supply-chain security (SAST/DAST), triage bug bounty findings, harden Kubernetes and multi-tenant architectures, and participate in on-call rotation.

Lead product security for UAS platforms across hardware, firmware, flight software, APIs, backend services, and cloud. Design secure architectures, perform security assessments and adversarial testing, integrate security into CI/CD, secure communications and OTA updates, build security tooling, and mentor engineers to embed security across the development lifecycle.

Lead security architecture design, implement and troubleshoot firewall and network security solutions, operate FireMon policy optimization, provide Level 2-3 support, handle work orders/change requests/incidents, and deliver on-site/remote consulting and 24x7 response for critical incidents.

Lead and scale application security across engineering: implement automated SAST/DAST/SCA testing in CI/CD, administer GHAS, perform pentests and vulnerability management, threat model designs, secure cloud-native workloads (AWS), and drive secure coding practices and training.

Design and mature product security for a cloud-scale, ML-powered SaaS platform. Perform threat modeling and security design reviews, triage vulnerabilities, conduct manual code reviews, implement automated defenses, and train engineering teams on secure development practices.

Design, architect, and implement cloud security solutions on AWS; set cloud security strategy and governance; act as SME for security tools; integrate and maintain security tooling, KPIs, and operational processes; collaborate with infrastructure teams to deploy and support security controls.

Provide cybersecurity engineering and architecture for mission and enterprise systems, translate NIST/CNSS controls into secure designs, troubleshoot Linux/Windows servers and endpoints, Cisco network devices, and enterprise storage, implement continuous monitoring (vulnerability scanning, SIEM), perform technical security assessments using Tenable and DISA STIGs, prioritize risk, and lead remediation efforts to maintain compliance and mission assurance.

Lead network security architecture and firewall projects, implement and operationalize FireMon policy optimization, provide L2-L3 support and 24x7 response for priority incidents, handle work orders, change requests, and customer-facing consulting engagements.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Design and consult on network security architecture, lead security implementations, provide L2-L3 operational support, handle work orders/change requests/incidents, perform on-site deployments, and respond 24x7 to P1/P2 incidents.

Lead incident response program design and execution, run tabletop exercises, own full IR lifecycle (detection to post-incident review), maintain IR plans/playbooks, coordinate with SOC/threat intel/engineering, support digital forensics, and apply cloud and AI security practices to improve detection and response.

Designs, deploys, and manages information security systems (firewalls, IPS/IDS, SIEM, WAF, IAM). Performs vulnerability scanning, incident response, audits, protocol analysis, and security consulting. Develops BCP/DR plans, researches new technologies, and collaborates with legal, HR, and law enforcement on investigations.

Automate, harden, and deploy security tooling across hybrid IT/OT environments. Build and maintain IaC, automate identity and access, embed security into CI/CD, implement Zero Trust segmentation, manage secure software supply chain, and collaborate with platform and security teams to remediate vulnerabilities and scale secure deployments.

Lead design, integration, testing, and delivery of space and ground cryptographic units. Perform trade studies, define interfaces, support hardware/firmware development, oversee verification/validation, and manage crypto lifecycle and key management. Mentor junior engineers, enforce cryptographic standards, support PKMA, and coordinate with government customers, contractors, and partners to ensure mission compliance and successful deployments.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Design and build backend services and secure data pipelines to protect customer data. Implement token issuance, authentication, anonymization, data retention/deletion (CCPA/GDPR), and monitoring/auditing. Collaborate with access management, infrastructure, and data teams to enforce least-privilege controls and enable secure AI-driven product capabilities.

Lead security architecture design and implementations, provide L2-L3 support and 24x7 incident response, manage work orders/change requests, perform on-site technical implementations and client consulting, and ensure delivery of enterprise security solutions.

Design, build, and maintain developer-focused security tooling and automation. Deploy and optimize Wiz and Fastly WAF across CI/CD and Kubernetes, integrate cloud security tooling, perform code reviews and threat modeling, and build AI-assisted workflows to scale product security.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.