Top Senior Security Engineer Jobs

Lead threat detection and incident response efforts: investigate security incidents, perform digital forensics, hunt for threats, build detection automation and models, collaborate with engineering and cross-functional teams, and mentor teammates to scale security capabilities across corporate and production environments.

Lead security operations and engineering activities including incident response, playbook development, tooling maintenance, telemetry configuration, root-cause analysis, posture reporting, and audits. Ensure security tooling efficacy, drive continuous improvement, support governance/compliance, and collaborate across IT teams to protect mission-critical applications.

Implement and maintain security controls across cloud, SaaS, and endpoints. Manage MDM and endpoint protection, enforce identity and access policies (MFA/conditional access), investigate and remediate incidents, document controls and evidence, and support System Security Plan development and compliance activities.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Lead Security Engineer responsible for designing and implementing security strategy across cloud (GCP), container (Docker), CI/CD, and application security. Perform threat modeling, penetration testing, vulnerability management, incident response, and ensure compliance (HIPAA, SOC-2, PCI-DSS). Initially hands-on, then lead and mentor a team of 2–8 engineers while collaborating with product teams and reporting to the CTO.

Lead design, implementation, and continuous improvement of IAM solutions (PAM, SSO, IGA, CIAM, MFA, AD). Configure and integrate IAM tools, automate user lifecycle, support governance/compliance, mentor engineers, lead projects, participate in on-call rotation, and drive security posture improvements.

Conduct penetration tests across web, mobile, and API applications to identify vulnerabilities. Partner with engineering teams to provide secure coding guidance, remediate findings, and embed security into product development. Communicate risks clearly and work autonomously to improve application security posture.

Lead platform security for Gallup's cloud and infrastructure: advise engineering teams on secure design, implement and tune security controls (Splunk SIEM, EDR), perform CSPM and vulnerability assessments, lead incident response, build automation and scripts, and embed shift-left security practices.

Lead AppSec across the SDLC: design and implement application security controls, perform hands-on testing of web apps/APIs/cloud services, integrate automated security tooling into CI/CD, reduce developer friction, review architecture and code, support vulnerability management and incident response, evaluate third-party risks, and ensure healthcare regulatory compliance (e.g., HIPAA, GDPR).

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Builds and owns defensive security capabilities: SIEM, EDR, DLP/insider risk, vulnerability management, detection engineering, automation, incident response, and security operations collaboration with R&D and product teams.

Design, build, and maintain Splunk ES detection content, validation dashboards, and ingestion quality controls. Ensure telemetry is normalized and CIM-compliant, tune correlation searches and alerts, reduce false positives, and collaborate with SOC, cloud, and platform teams to improve logging, detection coverage, and compliance alignment.

Hands-on senior security engineer responsible for designing and automating security controls across cloud and application stacks. Lead implementation of PAM/JIT, vulnerability management, SAST/DAST/SCA integration, security automation (Python/Go/Terraform/Tines), endpoint and DLP protections, cloud network hardening, key management, SIEM correlation, and developer-focused security tooling and reviews to protect PHI and advance security posture.

Design, develop, and deploy cloud threat detection for AWS and GCP; integrate and normalize cloud telemetry into the enterprise SIEM; create and tune detections, dashboards, and alerting; map detections to MITRE ATT&CK; run adversary emulation and purple team exercises; produce SOPs, runbooks, and investigator playbooks; train SOC analysts; provide escalation and on-call support for cloud security incidents.

Design, build, and maintain detection-as-code and AI-powered detection/response tooling across cloud, endpoints, and identity. Automate investigation and response workflows, lead incident response, improve observability, tune alerts, and partner with engineering to expand logging and embed detections.

Lead cybersecurity evaluations, define item boundaries and cybersecurity concepts, and perform ISO/SAE 21434-compliant threat analysis and risk assessments (TARA). Define and manage security requirements and risk treatments for self-driving platform features, collaborate with engineering and safety teams across the product lifecycle, and maintain standards compliance across multiple projects.

Own application and infrastructure security across an AWS environment: threat-model systems, review designs and code, manage IAM and least-privilege access (including AI agents), establish durable security controls, integrate security into CI/CD and developer tooling, and partner with Adyen's security organization.

Designs, implements, and operates enterprise security solutions; monitors and responds to security events; leads vulnerability assessments; creates security policies and procedures; ensures regulatory/HIPAA compliance; mentors IT security staff and coordinates with vendors and compliance teams to improve security posture.

Serve as a trusted security liaison embedding security-by-design into product and business lifecycles. Lead early security discussions, translate business objectives into risk-oriented priorities, maintain risk registers, track metrics, and coordinate cross-functional mitigation to enable innovation while managing risk.

Lead cloud security engineering efforts by designing and automating scalable security controls, building safe-by-default tooling, conducting assessments and threat modeling, responding to incidents, and partnering with engineering teams to improve cloud security posture across AWS and Azure.

Lead design and implementation of information security policies, tools, and controls. Mentor staff, consult with business and IT owners, investigate security events, manage disaster recovery planning, evaluate new security technologies, and deliver security training and documentation.

Lead cloud security engineering by designing and automating scalable controls, building safe-by-default tooling, conducting security assessments and threat modeling, responding to incidents, and partnering with engineering teams to remediate vulnerabilities and secure cloud infrastructure.

Lead design and implementation of scalable cloud security controls and automated guardrails. Build security-as-a-service tooling, perform assessments and threat modeling, support incident investigations, and partner with engineering teams to deploy security improvements and third-party/AI tool assessments.

Build and maintain scalable security platforms, automation, and tooling to protect data across SaaS, cloud, endpoints, collaboration tools, AI systems, and data warehouses. Develop data discovery, classification, governance, DLP, DSPM/SSPM, insider-risk, and access controls; leverage AI and automation to improve detection, prevention, and incident workflows while partnering with cross-functional teams.

Design, implement, and maintain secure configuration baselines across on-prem, cloud, and hybrid environments. Conduct continuous assessments and vulnerability scans (Tenable/Qualys/Rapid7), coordinate remediation, integrate CIS and regulatory controls, support audits, automate compliance reporting (ServiceNow), collaborate with cross-functional teams, and assist incident response related to misconfigurations and vulnerabilities.