Top Senior Security Engineer Jobs

Lead Uber’s Detection Engineering organization and set the global strategy, roadmap, and execution for threat detection. Own detection coverage, content, platforms, latency, signal fidelity, and AI/ML adoption across corporate, production, and cloud environments. Partner with security response, threat intelligence, infrastructure, and product teams; manage vendors and build-versus-buy decisions; and hire, develop, and retain senior security and software engineering leaders.

Secures and sustains federal application systems across their software lifecycle. Responsibilities include application administration, configuration, security impact assessments, ATO/ATT support, continuous monitoring, logging compliance, vulnerability remediation, change management, and SOP development. The role also integrates machine learning and artificial intelligence into security tools, evaluates software products, and supports incident alerting and reporting. A TS/SCI clearance is required.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Lead engineering-driven enterprise data protection and DLP capabilities across cloud, SaaS, endpoint, email, collaboration, and web environments. Build automated policy-as-code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, and operational health checks. Partner with technical, compliance, privacy, legal, and business teams to improve data protection effectiveness. Investigate events, reduce false positives, establish governance standards, and define metrics demonstrating risk reduction and operational maturity.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, prioritizing vulnerabilities, and integrating security controls into CI/CD pipelines. The role partners with engineering teams, develops security automation, establishes application security metrics, supports AWS and cloud security, and drives timely remediation while documenting key processes.

Lead cloud security strategy across AWS, GCP, Kubernetes, and self-managed systems. Define security standards, reference architectures, threat-modeling practices, IAM controls, detection engineering, incident response, vulnerability management, and secure infrastructure pipelines. Serve as a senior technical leader, mentor engineers, guide cross-functional initiatives, and develop scalable security controls and playbooks. The role requires production cloud security ownership, hands-on AWS, GCP, Kubernetes, Python, and Terraform experience.

Provides technical leadership for cloud security across AWS, GCP, Kubernetes, and self-managed infrastructure. Defines security standards, reference architectures, threat-modeling practices, IAM controls, detection strategies, incident-response playbooks, vulnerability management, and Kubernetes security standards. Leads cross-functional initiatives, mentors engineers, secures infrastructure-as-code and CI/CD pipelines, and investigates cloud security incidents. This is a senior individual contributor role requiring production cloud security ownership and hands-on coding in Python and Terraform.

Design, implement, and manage enterprise security solutions including endpoint, network, SaaS, and cloud protections. Investigate malware and advanced threats, expand SIEM detections, deploy DLP, perform forensics and vulnerability remediation, secure IAM/SSO/MDM, automate detections and reporting, participate in on-call incident response, and mentor junior security engineers.

Design, implement, and manage enterprise security solutions to protect users, infrastructure, and SaaS applications. Investigate malware and advanced threats, run forensics and incident response, tune SIEM detections, deploy DLP and automation, secure endpoints and IAM/SSO, perform vulnerability remediation and security reviews, and mentor junior staff. Participate in on-call rotations and collaborate cross-functionally to improve security architecture and enforce policies.

Lead design, implementation, and operational management of enterprise security controls: investigate malware and threats, expand SIEM detections, deploy DLP, secure SaaS and endpoints, harden configurations, run forensics and incident response, automate detections and reporting, and mentor junior engineers while participating in on-call rotations.

Protect employees, assets, and locations by designing and operating enterprise security infrastructure. Investigate malware and advanced threats, implement DLP, secure SaaS and endpoints, harden configurations, expand SIEM detections, perform forensics and vulnerability remediation, automate detections and reporting, guide security reviews, mentor junior staff, participate in on-call incident response, and recommend security architecture and tooling improvements.

Lead expansion and maintenance of a Zero Trust security program across hybrid on-premises and cloud environments. Manage identity and access controls, deploy and tune SIEM/EDR/XDR/IAM tooling, automate security operations, reduce alert fatigue, and collaborate with IT, DevOps, and business teams to strengthen enterprise security across endpoints, cloud, SaaS, identity, network, and data protection.

Conduct risk-based penetration tests, assumed-breach exercises, adversary simulations, and purple-team engagements across enterprise systems, applications, networks, identity platforms, and cloud environments. Evaluate preventive, detective, and response controls, validate detection and incident-response effectiveness, and translate technical findings into risk-based remediation recommendations for technical teams, executives, Internal Audit, and the Audit Committee. Build an independent, continuously improving offensive-security assurance program.

Build and operate identity and access management services protecting Slack infrastructure and AI agents. Responsibilities include developing AWS and Kubernetes services, extending agent authentication and authorization controls, automating access management, improving operational reliability through monitoring and SLOs, collaborating across Identity, Security, and Infrastructure teams, and participating in code and design reviews.

Designs, deploys, and operates network security monitoring for sovereign and government cloud environments. Responsibilities include managing firewalls, proxies, IDS/IPS, and traffic inspection platforms; building telemetry pipelines; developing detections and alerts; analyzing packet captures and security logs; automating detection and incident response workflows; integrating monitoring platforms; creating operational dashboards; and leading incidents and on-call operations.

Design and build reproducible enterprise security environments across Azure, AWS, GCP, on-premises, and third-party systems. Develop infrastructure automation, telemetry, identity integrations, AI agent interfaces, and isolated environments for reinforcement learning and security evaluation. Own platform capabilities from architecture through operations, troubleshoot cross-stack failures, collaborate with security researchers and AI engineers, and mentor other engineers.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, prioritizing vulnerability remediation, developing security automation, and establishing application security metrics and documentation across engineering teams.

Lead security data architecture and governance for global security observability. Design and manage data pipelines, lakes/warehouses, and analytics (AI/ML) across SIEM/EDR/DLP sources. Publish standards, onboard applications, produce KPIs/reports, and collaborate with architecture and engineering to deliver a multi-year roadmap and threat-hunting capabilities.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Design, build, and operate scalable security data platforms and ingestion pipelines. Develop identity management features, troubleshoot distributed production systems, improve reliability and performance, analyze telemetry, and implement automated validation, staged deployments, CI/CD, and AI-assisted engineering practices. Collaborate with engineers, product managers, customers, and cross-functional teams to deliver secure, efficient, cloud-native services.

The Senior Security Engineer will design and implement data protection solutions, manage security incidents, and ensure compliance in a fintech setting.

Designs and integrates secure information systems, cloud, and defense architectures; leads federal NIST RMF and ATO processes; implements security controls; performs vulnerability, threat, and risk assessments; advises engineering and program teams; and manages continuous monitoring, compliance, audit, and patch-management activities.

Lead product security for industrial automation, embedded, connectivity, software, and cloud products. Drive secure development lifecycle activities, security architecture, threat modeling, risk assessments, vulnerability management, testing, remediation, and regulatory compliance. Partner with engineering, product, quality, legal, and security teams while providing technical guidance and mentorship. Support standards including IEC 62443 and the EU Cyber Resilience Act across the product lifecycle.

Develop and support spacecraft electrical power subsystems for national security missions. Responsibilities include power budgeting, energy balance, voltage drop and bus stability analyses, hardware testing, production support, software updates, requirements verification, failure review participation, and design for manufacturability. The role supports Blue Ring spacecraft systems across development, integration, testing, and production, including work with solar arrays, batteries, PMAD, wire harnessing, and power distribution components.

Designs and implements scalable trust and identity infrastructure, including secrets management, PKI, authentication, and access control services. The role defines architecture, leads technically complex initiatives, improves engineering standards and reliability, and partners across Product, Security, Compliance, and Engineering. It requires strong systems engineering experience with Linux, networking, distributed systems, modern programming languages, and infrastructure tooling. Occasional on-call nights and weekends may be required.