Top Senior Security Engineer Jobs

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Lead and execute red team operations against Azure and Microsoft services to discover and exploit vulnerabilities, prototype offensive tools, analyze data for breach points, collaborate with blue teams to improve defenses, and advocate for security improvements across the company.

Conduct proactive security reviews of features, architectures, integrations, and AI/ML systems. Lead threat modeling, design reviews, secure SDLC practices, vulnerability remediation, AI security governance, incident response exercises, and security automation. Support SOC 2 and ISO 27001 programs, collaborate with consultants on penetration testing and vendor assessments, and influence engineering teams on security without owning their roadmaps.

Lead triage and investigation of product security reports across vehicle, mobile, API, and backend software. Assess exploitability, impact, and risk; recommend severity and remediation. Coordinate with engineering, product, SOC, bug bounty, legal, and PSOC to validate fixes, improve PSIRT playbooks, and enhance tooling and reporting.

The Cloud Security Engineer will secure cloud infrastructure, implement solutions for systemic risks, and support internal projects using Kubernetes and service mesh technologies.

Develop and support Ambiq's Trusted Execution Environment and related security implementations for embedded systems, ensuring compliance with security standards and seamless integration with customer builds.

Own and build Grow Therapy's data security infrastructure: automated data classification, field-level masking/tokenization, encryption and key management, secure data connectors to AI tooling, and access controls. Define a multi-year vision, implement pipelines and services, and partner across Data, Engineering, and Detection & Response to make secure-by-default the company standard.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Lead design and implementation of secure-by-default infrastructure: build IaC modules, CI/CD templates, policy-as-code guardrails, and platform security tooling. Embed pipeline and supply-chain security, enforce least-privilege identity, operate defenses as self-service products, review high-risk designs, and set technical direction while mentoring engineers.

Partner with sales teams to design and deliver technical demonstrations and evaluations for data security solutions. Gather requirements, configure custom product setups, lead hands-on evaluations, and guide customers to successful outcomes in strategic enterprise opportunities.

Design, build, and evolve product security validation platforms, pipelines, and test frameworks. Develop automated test capabilities, scripts, and services to scale security validation. Implement AI-driven robustness and fuzz testing, create reusable security test cases, and integrate tests with CI/CD and product workflows to improve coverage, reliability, and efficiency.

Partner with sales to design and deliver technical product presentations, gather customer requirements, lead hands-on evaluations and custom configurations, and design evaluation test plans to guide enterprise prospects to successful data security outcomes.

Senior individual contributor responsible for designing and owning security engineering programs: security tooling, identity and access architecture, cloud security posture (GCP), detection engineering and SIEM operation, incident response and forensics, OAuth and third-party app governance, secrets and MFA strategy, endpoint and vulnerability management, and security automation/Infrastructure-as-Code. Mentors teammates and partners with platform engineering and IT leadership to implement controls and automation.

Lead security engineering for RTOS, hypervisor, and embedded virtualization: design and review defenses, collaborate on CPU/SoC security, perform threat modeling and automotive TARA, review low-level C/C++ code, build fuzzing and test infrastructure, assess vulnerabilities, and drive security fixes and verification toward automotive safety and security standards.

Lead engineering and operations for the enterprise PKI infrastructure, supporting internal and external CAs, SSL and code signing. Design, test, implement PKI changes, run POCs, consult business units on encryption and certificates, interface with vendors, ensure high availability, and coordinate large integration and migration projects.

Own, design, and maintain SOC platforms (EDR/XDR, sandboxing, analyst workstations, email security, vulnerability scanning). Lead EDR health and hygiene, enable detection engineering, support malware analysis, assess emerging threats, and automate SOC operations to improve reliability, telemetry quality, and investigation efficiency.

Design, develop, and deploy autonomous AI agents and ML models to automate cybersecurity use cases (incident investigation, vulnerability prioritization). Integrate LLMs, build data pipelines with vector databases, implement MLOps and cloud AI deployments, enforce safety/compliance guardrails, and optimize workflows for automated remediation.

Lead the security architecture and implementation for an enterprise AI platform: secure cloud infrastructure, data protection, IAM, tenant isolation, and GenAI workflows. Embed security into CI/CD, IaC, containers, secrets management, and operations. Design secure customer deployment patterns, support enterprise security reviews, and partner on compliance (SOC 2, ISO 27001, SSPA) while personally implementing critical security capabilities and guiding cross-functional engineering teams.

Designs and governs enterprise Zero-Trust security architecture across on-premises, clinic, and cloud environments. Leads IAM, endpoint protection, EDR, patching, network segmentation, security policy development, risk and vulnerability assessments, incident response, SOC coordination, and compliance with NIST and HIPAA. Mentors team members and liaises with external vendors and auditors.

Hands-on Senior Security Engineer to design, implement, and tune Microsoft 365 data protection across SharePoint, OneDrive, and Teams. Configure DLP, retention and classification labels, reduce oversharing risk, validate business use cases, and collaborate with end users to align security controls with business needs.

Lead and execute Red Team and Purple Team offensive security exercises across hybrid environments, build/automate C2 infrastructure, research and develop attack tradecraft, assist incident investigations, produce technical reports with risk ratings, and collaborate with stakeholders to remediate vulnerabilities and improve detections.

Lead application and offensive security efforts: perform penetration tests across apps, systems, cloud, and APIs; operate and support AppSec testing platforms (SAST/DAST/SCA); conduct threat research; recommend remediation; partner with development and SecOps to mature Secure SDLC and incident response capabilities.