Top Senior Security Engineer Jobs

Build and maintain scalable security platforms, automation, and tooling to protect data across SaaS, cloud, endpoints, collaboration tools, AI systems, and data warehouses. Develop data discovery, classification, governance, DLP, DSPM/SSPM, insider-risk, and access controls; leverage AI and automation to improve detection, prevention, and incident workflows while partnering with cross-functional teams.

Design, implement, and maintain secure configuration baselines across on-prem, cloud, and hybrid environments. Conduct continuous assessments and vulnerability scans (Tenable/Qualys/Rapid7), coordinate remediation, integrate CIS and regulatory controls, support audits, automate compliance reporting (ServiceNow), collaborate with cross-functional teams, and assist incident response related to misconfigurations and vulnerabilities.

Build and operate proactive security systems including SOAR/SIEM integrations, LLM-powered automation, and policy-as-code. Own vulnerability management, IaC security (Terraform/CDK), IAM, and MDM/EDR integrations. Partner with engineering and compliance to embed security across the development lifecycle.

Own and scale Mozillas web bug bounty program, triage and validate incoming vulnerability reports, drive remediation with engineering teams, perform targeted JavaScript and Python code reviews, collaborate with SIRT on incidents, and develop tooling to improve program efficiency and insights.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Lead the Privileged Access Management (PAM) team and CyberArk implementations across the enterprise. Integrate applications with CyberArk, configure EPV/PVWA/CPM/PSM, serve as CyberArk SME, guide PAM strategy and governance, research PAM tools, oversee awareness programs, and manage, coach, and evaluate direct reports (supervise three engineers).

Hands-on senior security engineer role building and operating cryptographic, key-management, and signing services for Citi's digital assets platform. Develop Java backend services, integrate and operate HSMs, implement MPC/TSS schemes, enforce crypto best practices, embed CI/CD security tooling, and lead threat modeling and incident escalation.

Act as the security lead for assigned product workstreams, embedding security requirements early with Product and Engineering, collaborating across InfoSec and DPO, contributing customer trust materials, and staying current on AI-related security risks to enable secure SaaS product delivery.

Lead cloud security engineering by designing and implementing automated, scalable controls and guardrails for cloud infrastructure. Partner with engineering to deploy security enhancements, investigate incidents, assess third-party integrations and emerging AI tools, and perform threat modeling and architectural security reviews.

Design and implement security architectures and deployment strategies, operate and tune security tools (firewalls, NIDS/HIDS, SIEM, endpoint protection), improve SOC workflows, gather requirements, recommend compliant solutions (PCI/HIPAA/SOX), support customers and C-level stakeholders, write SOWs/proposals, and provide technical leadership.

Design and build security architectures for a global phased-array ground station network. Implement controls across RF protocols to cloud (Kubernetes), deploy SIEM and log pipelines, lead incident response and threat hunting, liaison with government customers, and automate compliance (FedRAMP, NIST 800-171) to enable secure, scalable deployments.

Own and scale Mozilla's web bug bounty program, triage and validate incoming reports, drive vulnerability remediation with engineering teams, perform targeted code reviews (JS/Python), collaborate with SIRT on incidents, and develop tooling to improve triage and program insights.

Lead design, deployment, and operation of endpoint, network, cloud, and identity security. Run vulnerability management, SIEM detection engineering, incident response, and compliance (NIST 800-171/CMMC). Harden IAM, manage cloud security in AWS, perform security assessments, deliver awareness training, and maintain DLP and security policies.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Lead the security design, architecture, and implementation for an enterprise AI platform. Define secure deployment patterns, embed security into CI/CD and operations, secure GenAI workflows, and lead customer security reviews and compliance activities for Fortune 1000 deployments.

Lead design, implementation, and operation of DSPM and DLP solutions to discover, classify, and protect sensitive data across cloud, SaaS, and enterprise systems. Partner with security and infrastructure teams to reduce exposure, enforce access controls, support audits (FINRA/SEC), develop standards and runbooks, and advise leadership on data security risks and roadmap improvements.

Provide pre-sales technical support and technical account management for Vectra's AI-driven threat detection platform. Lead technical discovery, demos, proofs-of-concept, and solution design; build strong customer and partner relationships; collaborate cross-functionally on deployments, integrations, and product feedback; maintain deep knowledge of security landscape, competitors, and product capabilities. Travel within region as needed.

Lead cloud and infrastructure security and detection engineering: deploy SIEM, author MITRE-mapped detections, build cloud security posture and IaC gates, own incident response playbooks and SOC 2 Type II operational evidence, and drive vulnerability remediation and security reporting.

Own cloud and network security, identity and PKI systems, and compliance for cloud and hybrid environments. Design secure cloud networking, manage NGFW/IDS/IPS, implement IAM/PAM/MFA, operate PKI and cryptography, maintain SIEM/EDR, and implement controls for CMMC L2, FedRAMP, and NIST 800-171. Support audits, documentation, risk assessments, and automation for compliance evidence and hardening standards.

Lead design and implementation of security architecture and controls across Macroscope’s distributed systems. Protect customer data, harden production, embed secure-by-default practices, and partner with engineering to improve IAM, cloud security, secrets management, CI/CD, vulnerability management, and monitoring.

Lead design, deployment, operation and enhancement of data security capabilities (DLP, email encryption, key management). Develop rules from business requirements, run product evaluations/POCs, manage upgrades, incident response, audits, vendor coordination, and continuous improvement to reduce data leakage risk.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Designs and audits secure network and cloud architectures, evaluates firewall changes, manages SSE/CASB tooling, governs SaaS security, and assesses AI-related security risks. Partners with engineering, legal, and compliance to implement controls, investigate incidents, and develop reusable security standards and documentation across enterprise systems.

Lead design and implementation of end-to-end security for multi-cloud and hybrid environments. Architect Zero Trust and DevSecOps solutions, embed automated SAST/DAST in CI/CD, lead incident response and forensic investigations, manage risk-based vulnerability programs, implement AI security guardrails, and ensure compliance with GDPR, NIST 800-53, and cloud sovereignty requirements while mentoring junior staff.

Responsible for architecting and developing AI security infrastructure, optimizing performance and scalability of systems, and driving innovation in a collaborative environment.