Top Senior Security Engineer Jobs

Design, build, and maintain security products and infrastructure: real-time detection engines (Flink/Kafka), high-performance APIs (Go/Node.js), streaming analytics, Kubernetes at hyperscale, and petabyte-scale data pipelines. Lead technical designs, collaborate with security teams, and mentor junior engineers.

Design and build real-time security detection engines and streaming analytics using Apache Flink and Kafka. Develop high-performance security APIs and microservices in Go and Node.js, architect Kubernetes-based security solutions, and build petabyte-scale data pipelines. Lead technical design, collaborate with security teams, and mentor junior engineers.

Design and implement defense-in-depth security architectures and countermeasures for hardware and software systems. Analyze adversary threats, define system requirements and architectures, integrate hardware and software, validate and verify solutions, work with advanced S-SOTA technologies, and lead a team or section. Position is full-time, on-site at a BAE Systems facility.

Lead design and implementation of defense-in-depth security architectures and countermeasures for hardware and software systems. Analyze adversary threats, implement and test protections guided by U.S. government requirements, integrate hardware/software, validate solutions, and lead an engineering team working with advanced S-SOTA technologies.

Design and implement defense-in-depth security architectures and embedded software on complex processors. Implement and test embedded software per U.S. Government guidance, analyze adversary threats, propose countermeasures, work with NIST cryptographic algorithms and S-SOTA technologies, and provide technical leadership to software development teams. Role is full-time, on-site at a BAE Systems facility.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

As a Senior Security Software Engineer, you'll design and deliver secure integration services, mentor developers, and enhance cybersecurity through automated, AI-driven workflows.

Lead design, implementation, and operation of enterprise information security tools. Translate requirements into secure solutions, monitor and respond to incidents, evaluate vulnerabilities across applications and infrastructure, develop remediations, mentor junior engineers, and support security program and compliance activities.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.

Design and implement embedded product security for Bose audio devices: secure boot, firmware encryption/signing, anti-reverse-engineering, key and credential management, ARM TrustZone applets, security assessments, vulnerability response, and cross-functional security guidance throughout the development lifecycle.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Architect and build automated application security layers across the SDLC for a large financial services program. Integrate and tune SAST, DAST, and SCA tools within CI/CD pipelines, develop AI-enabled secure code scanning and hardened baselines, automate secure coding patterns and security runbooks, and provide code-level remediation guidance by reviewing Java and Python applications.

Operates and improves enterprise cybersecurity across endpoints, identities, networks, cloud services, applications, email, and security platforms. Responsibilities include monitoring, incident response, vulnerability management, endpoint and identity administration, firewall and cloud security, application and email protection, compliance support, awareness training, reporting, documentation, and cross-functional remediation coordination.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Engineer enterprise endpoint security controls across EDR, DLP, VPN, secure web access, and endpoint visibility platforms. Provide Tier 3 support, troubleshoot and tune policies, establish security baselines, and manage vendor escalations. Develop AI-enabled triage, risk scoring, alert correlation, reporting, policy-as-code, and approval workflows. Automate deployments and incident response through APIs and scripting while partnering with Security Operations, IT, Endpoint, and business teams.

The Senior Cloud Security Engineer protects NYC agency systems by assessing cloud and on-premises security, identity and access management, network defenses, email filtering, and endpoint protection. The role ensures compliance with cybersecurity policies, guides security architecture and remediation, operates defensive technologies, coordinates technical projects, communicates with stakeholders, and documents deployment plans. Work occurs within a 24/7 operation and may require nights, evenings, or weekends.

Lead application security assessments across New York City agencies by operating SAST, DAST, and SCA platforms, validating vulnerabilities through manual testing and exploit reproduction, providing remediation and secure coding guidance, identifying systemic weaknesses, mentoring assessment staff, and producing technical and executive security reports.

Provides senior-level information security engineering and advisory support across IT and business teams. Administers and monitors security controls, endpoint, identity, cloud, email, SIEM, and vulnerability management systems. Investigates security violations and attempted compromises, develops remediation recommendations, maintains security policies and procedures, supports IT projects, educates stakeholders, and advises management on security risks and business impacts. Participates in complex security projects and provides technical guidance and mentoring.