Top Senior Security Engineer Jobs

Designs, implements, and manages policies and procedures for database and software security. Writes and audits Configuration Management (CM) plans and software change procedures; performs design reviews, configuration audits, and baseline status accounting. Implements CM processes in DevSecOps/Agile environments using tools like JIRA, Puppet, Confluence, and GitHub. Mentors team members. TS/SCI required.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.

Support development and implementation of AI governance, security policies, and controls. Integrate security tools across AI platforms, document AI use cases, and design privacy/compliance frameworks. Collaborate cross-functionally with data, engineering, and compliance teams to ensure responsible, secure AI adoption.

Lead development and maturation of the Application Security program. Maintain and integrate appsec testing platforms, review and triage scan results, produce metrics, mentor development teams, monitor CVEs, and coordinate with Audit, Governance, and Compliance to improve security posture.

Design, implement, and operate F5 LTM load-balancing and secure networking solutions (BGP, IPv6, HA). Troubleshoot using tmsh/bash/imish, manage upgrades/patching, support Azure virtual networking, partner with security teams, produce technical documentation, and secure email components to support DoD mission-critical infrastructure.

Design, implement, and assess cloud security architectures for intelligence community systems. Develop and evaluate security documentation, perform RMF assessments, recommend and deploy cloud security tools (on-prem, cloud, hybrid), and support accreditation. Collaborate with stakeholders, codify security procedures, and implement infrastructure-as-code solutions to meet mission requirements.

Design, architect, deploy, and configure data security solutions and policies across hybrid cloud environments for DoD, IC, and federal clients. Implement data-centric security and Zero Trust architectures, operate and administer data security tools (e.g., Virtru, PKWare, Thales) and DSPMs (Varonis, BigID), document technical architectures, and coordinate with stakeholders and engineering teams. Maintain systems, perform troubleshooting, and ensure positive control of sensitive data. Secret clearance required.

Design, implement, and govern cloud cybersecurity architecture across multiple domains. Automate Continuous Authorization to Operate (CATO), evaluate changes against RMF/STIG, support A&A and DevSecOps pipeline security, and mentor team members. Collaborate with cloud infrastructure teams using Agile practices to ensure continuous monitoring, verification, and compliance of cloud solutions.

Perform hands-on offensive security testing across commercial web, mobile, API, cloud, IoT, and embedded products. Scope and execute assessments, validate vulnerabilities, produce actionable reports, mentor engineers, improve testing methods and remediation processes, and partner with product, engineering, and security teams to raise product security maturity.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Design, configure, and tune DLP controls across email, print, web, removable media and data-at-rest. Analyze DLP events, implement preventative controls, create dashboards and reports, integrate continuous security event ingestion with Splunk, and perform insider risk data mapping and remediation across cloud and network storage.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Lead implementation and administration of application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security tests into CI/CD and cloud pipelines, triage and deduplicate findings, support developers in remediation, evangelize secure development practices, and coach junior engineers.

Lead implementation and administration of application security tooling (SAST/DAST/IAST/SCA/ASPM), integrate security into CI/CD and cloud workflows, triage findings, support developers on remediation, produce security reports, evangelize secure development practices, and coach junior engineers to scale DevSecOps across the organization.