Top Senior Security Engineer Jobs

Monitor and triage security events across SIEM, M365 Defender, AWS and enterprise tools; investigate incidents, perform threat hunting, correlate telemetry, produce incident reports, recommend containment and remediation, collaborate with engineering and risk teams, maintain SLAs, and participate in SOC on-call rotation.

Lead development and maintenance of enterprise cybersecurity strategy, tools, and processes. Install, monitor, and support security applications (firewalls, EDR, DLP, IDS/IPS, vulnerability scanning), conduct testing, monitor performance, coordinate remediation, provide technical guidance, and participate in 24/7 rotational support while producing metrics and reports to ensure compliance.

Support RMF/A&A efforts to achieve ATOs, act as liaison to ISSOs, administer security toolsets on Windows and RHEL, run SCAP/STIG scans, track patches and vulnerabilities, lead POA&M and PTI/PTT activities, support continuous monitoring, and assist incident response and IA training.

Lead FedRAMP, SOC 2, and ISO 27001 compliance efforts by hardening AWS and Kubernetes infrastructure, implementing security controls, automating evidence collection, improving CI/CD security, and collaborating with security, legal, and engineering teams to support regulated customers.

Lead detection, response, and remediation of security incidents; maintain and improve security architecture, policies, and controls across cloud and on‑prem environments; manage security technologies (SIEM, IDS/IPS, vulnerability scanning, endpoint, WAF); perform threat hunting, vulnerability management, audits/pen tests response, and security project management; provide technical risk guidance and lead teams.

Senior Tier-3 NOC engineer serving as final technical escalation for major network incidents. Leads RCA, incident recovery, and architecture guidance across multi-vendor environments. Expert in Palo Alto and Zscaler security platforms, packet analysis, automation/IaC, and enterprise routing/segmentation. Mentors junior staff, coordinates vendor escalations, and shapes operational standards to improve stability and observability.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Provide Tier 3 network security engineering for INSCOM: install, configure, and harden network and security infrastructure; troubleshoot switching, routing, VPNs, and Next-Gen firewalls; manage ACLs and firewall policies; configure F5 BIG-IP (LTM/ASM); perform packet analysis; apply STIGs/NIST hardening; collaborate across teams and support enterprise SDLC.

Lead design and implementation of embedded device security across firmware, OS, and cloud interfaces. Perform threat modeling, architect hardware-backed identity and secure key management, implement TrustZone/TEE/kernel solutions, integrate biometric sensor security, and apply secure SDLC and vulnerability management practices across multi-disciplinary teams.

Lead information security risk management activities including system security testing, vulnerability scanning, reverse engineering, log analysis, incident response, scripting to automate analysis, and ensuring SOX/PCI compliance while supporting audits and legal/investigator coordination.

Define and maintain Secure SDLC policies, manage hardened cloud container image repository, embed automated SAST/DAST/OSS scanning into CI/CD, drive container security and image hardening, manage vulnerability triage and remediation, support threat modeling and application security reviews, and enable development teams to remediate security issues before release.

Design, implement, and operate public-facing backend APIs and services in Go; author design and architecture docs; collaborate with frontend, product, and security teams; ensure stability, performance, and scalability; mentor engineers; use AI coding agents in daily work; participate in on-call rotation and support CI/CD-driven deployments.

Senior SAP Security Engineer responsible for gathering requirements, designing SAP roles, performing user administration, testing and documentation, supporting SAP GRC components and SOX compliance, and coordinating multiple projects. Strong communication and GRC experience required for upgrade and implementation projects.

Senior network/security engineer to support firewalls, proxies, VPN provisioning, DNS/DHCP and IP segmentation, F5 BIG-IP load balancing, Websense and other security appliances. Participate in architectural/solution design, handle break-fix of high-severity issues, maintain proactive/reactive solutions repository, and produce documentation. Must have strong communication skills.

Serve as the primary security contact for software, firmware, and product teams; guide secure development and firmware security architecture; define security requirements and support certifications; identify and prioritize vulnerability remediations; investigate threats and implement mitigations; participate across the solution lifecycle; perform penetration testing. Travel ~15%.

Lead design, implementation, and oversight of security policies, access controls, firewalls, SIEM, IDS/IPS, and compliance (SOX/PCI). Recommend security products, manage implementations and large projects, mentor engineers, perform audits, analyze access and vulnerabilities, and maintain incident response, encryption, and disaster recovery processes.

Design, implement, and operate enterprise data security controls across cloud and SaaS environments using CASB, DSPM, and Microsoft 365 security. Support data discovery/classification, create monitoring alerts and enforcement policies, investigate data security incidents, assist Microsoft 365 security administration, and collaborate with engineers and compliance teams to maintain data protection and compliance.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Design, implement, and maintain security toolsets; lead incident response and detection engineering; manage SIEM and log integrations; assess cloud and M365 security; identify and remediate security gaps; provide technical guidance, training, and documentation; track audit remediation and ensure compliance.

Senior technical responder for application security incidents: lead escalations, analyze attacks and logs, design/implement custom security policies, perform forensics, automate ASR workflows, mentor engineers, and collaborate with customers and cross-functional teams to remediate threats and improve products.

Designs, implements, and manages policies and procedures for database and software security. Writes and audits Configuration Management (CM) plans and software change procedures; performs design reviews, configuration audits, and baseline status accounting. Implements CM processes in DevSecOps/Agile environments using tools like JIRA, Puppet, Confluence, and GitHub. Mentors team members. TS/SCI required.

Support development and implementation of AI governance, security policies, and controls. Integrate security tools across AI platforms, document AI use cases, and design privacy/compliance frameworks. Collaborate cross-functionally with data, engineering, and compliance teams to ensure responsible, secure AI adoption.

Lead development and maturation of the Application Security program. Maintain and integrate appsec testing platforms, review and triage scan results, produce metrics, mentor development teams, monitor CVEs, and coordinate with Audit, Governance, and Compliance to improve security posture.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.

Design, implement, and operate F5 LTM load-balancing and secure networking solutions (BGP, IPv6, HA). Troubleshoot using tmsh/bash/imish, manage upgrades/patching, support Azure virtual networking, partner with security teams, produce technical documentation, and secure email components to support DoD mission-critical infrastructure.