Top Senior Security Engineer Jobs

Designs, implements, and strengthens cybersecurity controls across enterprise infrastructure, networks, endpoints, data centers, and sensitive systems. Administers security platforms, firewalls, endpoint protection, email security, identity controls, vulnerability management, logging, and threat detection. Leads incident response, investigations, remediation, hardening, risk assessments, and compliance activities. Develops security automation, documentation, and technical standards while collaborating with infrastructure and application teams. Provides senior-level escalation support and guidance on cybersecurity best practices.

Lead application security strategy and engineering across the SDLC. Implement and operate DAST/SAST/SCA/IAST/RASP tooling, secure containers/serverless/APIs, drive automation and CI/CD integration, respond to incidents, track metrics, create standards (NIST/OWASP/MITRE), and mentor development teams to improve security posture and developer experience.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools; conducting threat modeling; prioritizing vulnerability remediation; integrating security controls into CI/CD pipelines; developing automation; and establishing security metrics. The role requires collaboration with engineering teams and stakeholders to improve secure coding, cloud application security, and overall security posture without slowing product delivery.

Lead the technical presales process for Proofpoint’s data security and insider risk solutions. Partner with sales teams, conduct technical discovery, design security architectures, and manage proof-of-concept and production evaluations. Present solutions to customers, support deployments and training, collaborate with Professional Services, Engineering, Product Management, and Support, and provide customer insights to improve products. The role also develops internal documentation, training, and repeatable sales engineering processes.

The Senior Product Security Engineer integrates cybersecurity throughout connected medical device lifecycles. Responsibilities include threat modeling, risk assessments, secure architecture design, vulnerability and penetration testing, regulatory compliance, supplier security reviews, incident response, and security documentation. The role partners with engineering, quality, regulatory, and product teams; contributes to security strategy; mentors junior engineers; and supports postmarket investigations and mitigation activities.

Develop and integrate cybersecurity features into autonomous vehicle platform software, spanning sensor abstraction, data processing, middleware, embedded systems, and cloud infrastructure. Conduct threat modeling and security architecture analysis, manage product security requirements, guide security governance, and collaborate across hardware, software, safety, performance, algorithms, and cloud teams. Build scalable, performant system software using C++, C, and Python across Linux, QNX, ROS, and real-time environments.

Strengthen application security and DevSecOps practices across engineering teams by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, interpreting vulnerabilities, and integrating security controls into CI/CD pipelines. The role also develops security automation, supports AWS and cloud application security, establishes security metrics, documents key processes, and collaborates with technical and nontechnical stakeholders to drive timely remediation.

Designs, deploys, and secures Microsoft Windows infrastructure for customer environments. Responsibilities include Active Directory and Group Policy management, Windows hardening, RBAC and least-privilege implementation, endpoint protection deployment, security assessments, remediation, patch processes, documentation, and customer knowledge transfer. The role requires extensive Windows security experience and may involve up to 30% travel.

Leads teams designing and deploying AI-driven enterprise and cloud security solutions. Responsibilities include developing machine learning systems, integrating data infrastructure and pipelines, performing advanced modeling and analysis, and building AI applications with Python, Java, and C++. The role involves client engagement, strategic problem-solving, stakeholder validation, coaching, process innovation, and operational excellence while addressing complex cybersecurity and privacy challenges.

Lead incident response and threat hunting efforts at CoreWeave, owning cybersecurity incidents end-to-end and developing AI-powered tools to enhance defense against threats.

Lead cloud security as a senior individual contributor: define standards and reference architectures, drive cross-team initiatives, own threat modeling and IAM strategy, design detections and lead incident response/cloud forensics, manage vulnerability workflows, and secure self-managed Kubernetes, IaC, and CI/CD pipelines while mentoring engineers and producing durable, scalable controls.

Lead cloud security direction and standards across AWS, GCP, and self-managed Kubernetes. Own threat modeling, secure architecture, detection engineering, incident response, and vulnerability management. Harden IaC and CI/CD (Terraform), secure Kubernetes control plane and runtimes, and mentor other engineers while driving cross-functional security initiatives and tooling adoption.

Lead cloud security strategy and standards across AWS, GCP, and self-managed Kubernetes. Drive secure architecture, threat modeling, detection engineering, incident response, and platform/IaC security. Mentor engineers, own cross-functional initiatives, harden tooling (CrowdStrike, Tenable, SIEM), and codify playbooks and controls for large-scale distributed systems.

Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, prioritizing vulnerability remediation, and integrating security controls into CI/CD pipelines. The role partners with engineering stakeholders, develops security automation, establishes application security metrics, and supports AWS/cloud security, secure coding, infrastructure as code, and developer workflows.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools; conducting threat modeling; integrating security controls into CI/CD pipelines; prioritizing vulnerability remediation; developing security automation; and communicating risks and metrics to engineering and business stakeholders.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, prioritizing vulnerability remediation, and integrating security controls into CI/CD pipelines. The role partners with engineering teams, develops automation, establishes security metrics, documents processes, and communicates risks to technical and nontechnical stakeholders. AWS/cloud security, software development, infrastructure-as-code, and modern web application security experience are required.

Secure Hi Marley’s internal AI environment by threat-modeling LLM integrations, agents, MCP connectors, and data pipelines; enforcing isolation, least privilege, and data boundaries; conducting AI red-team testing; managing AI tool governance; maintaining incident response runbooks; and producing SOC 2 and ISO 42001 compliance evidence. Partner with AI Operations and IT on access controls, cloud workload isolation, DLP, monitoring, and safe AI usage guidance.

Deploys and tunes application security testing tools, interprets vulnerabilities, performs threat modeling, and integrates security controls into CI/CD pipelines. The role partners with engineering teams to improve secure coding, automate security processes, establish security metrics, and drive remediation. Requires application security expertise, software development knowledge, cloud and infrastructure-as-code experience, and strong communication skills.

Designs and assesses security architectures for software, embedded, cloud, hardware, and sensor platforms. Leads threat modeling, risk assessments, secure SDLC initiatives, vulnerability remediation, compliance, RMF and ATO activities, security testing, and authorization documentation. Partners with engineering, infrastructure, DevOps, program, government, and customer teams to establish secure development standards and protect mission-critical technologies.

Design, implement, and automate scalable cloud security solutions and baselines across AWS/Azure/GCP. Build guardrails, IAM, detection/monitoring, configuration management, and data protection using IaC (Terraform) and everything-as-code. Collaborate with Product Engineering and security teams, produce technical documentation, and operationalize security tooling.

As a Senior Security Engineer at Klaviyo, you'll build secure detection systems, automate response operations, and enhance security observability, driving incident response and threat detection efforts.

Leads enterprise physical security technology architecture, governance, lifecycle management, modernization, integrations, testing, vendor coordination, disaster recovery, backups, and operational support. Oversees access control, video surveillance, intrusion detection, alarm monitoring, and security operations center platforms across multiple utilities. Provides technical direction, manages roadmaps and standards, coordinates cross-functional initiatives, resolves escalated issues, and communicates system status and outages to IT and business leadership.

The Senior Application Security Engineer strengthens secure coding and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, interpreting scan results, conducting threat modeling, and integrating security controls into CI/CD pipelines. The role establishes application security metrics, automates security improvements, documents key processes, and partners with engineering teams to prioritize and remediate meaningful vulnerabilities. Responsibilities include securing AWS cloud applications, APIs, authentication, authorization, secrets, and infrastructure-as-code environments.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, prioritizing vulnerability remediation, developing security automation, and establishing application security metrics and documentation. The role partners closely with engineering teams and stakeholders to improve security without slowing product delivery.