Top Senior Security Engineer Jobs

Design, implement, and improve security controls for operational technology (OT) networks in datacenter environments. Identify and remediate risks, create inventories and risk registers, coordinate penetration testing and vulnerability mitigation, embed security into OT systems, develop recovery and response playbooks, and present technical findings to stakeholders while partnering with engineering and third parties to reduce risk.

Design, build, and maintain security products and infrastructure: real-time detection engines (Flink/Kafka), high-performance APIs (Go/Node.js), streaming analytics, Kubernetes at hyperscale, and petabyte-scale data pipelines. Lead technical designs, collaborate with security teams, and mentor junior engineers.

Design and build real-time security detection engines and streaming analytics using Apache Flink and Kafka. Develop high-performance security APIs and microservices in Go and Node.js, architect Kubernetes-based security solutions, and build petabyte-scale data pipelines. Lead technical design, collaborate with security teams, and mentor junior engineers.

Design and implement defense-in-depth security architectures and countermeasures for hardware and software systems. Analyze adversary threats, define system requirements and architectures, integrate hardware and software, validate and verify solutions, work with advanced S-SOTA technologies, and lead a team or section. Position is full-time, on-site at a BAE Systems facility.

Lead design and implementation of defense-in-depth security architectures and countermeasures for hardware and software systems. Analyze adversary threats, implement and test protections guided by U.S. government requirements, integrate hardware/software, validate solutions, and lead an engineering team working with advanced S-SOTA technologies.

Design and implement defense-in-depth security architectures and embedded software on complex processors. Implement and test embedded software per U.S. Government guidance, analyze adversary threats, propose countermeasures, work with NIST cryptographic algorithms and S-SOTA technologies, and provide technical leadership to software development teams. Role is full-time, on-site at a BAE Systems facility.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Lead design, deployment, automation, operation, and improvement of global SASE/SSE services. Migrate legacy proxy/VPN to cloud-delivered SWG, ZTNA, CASB, DLP, and threat protection. Provide technical leadership across network, security, identity, cloud, endpoint, and application teams. Design, configure, troubleshoot, monitor, automate, and document network and security solutions to ensure reliable, scalable, and policy-driven access.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

As a Senior Security Software Engineer, you'll design and deliver secure integration services, mentor developers, and enhance cybersecurity through automated, AI-driven workflows.

Lead design, implementation, and operation of enterprise information security tools. Translate requirements into secure solutions, monitor and respond to incidents, evaluate vulnerabilities across applications and infrastructure, develop remediations, mentor junior engineers, and support security program and compliance activities.

Lead security enablement and automation for enterprise application onboarding. Design authentication/authorization patterns (SAML, OAuth2, OIDC), build automation, reusable tools/APIs, and self-service workflows. Partner with application and product teams to ensure secure integrations, perform risk assessments, enforce compliance, and mentor junior engineers.

Design and implement embedded product security for Bose audio devices: secure boot, firmware encryption/signing, anti-reverse-engineering, key and credential management, ARM TrustZone applets, security assessments, vulnerability response, and cross-functional security guidance throughout the development lifecycle.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead penetration testing and vulnerability remediation for web, mobile, and medical device applications, ensuring compliance with healthcare regulations.

Lead design, build, and operation of secure cloud platforms focused on authentication and authorization. Architect access control and policy-driven authorization, develop cloud-native microservices and APIs, implement CI/CD and IaC, ensure observability and logging, mentor engineers, and drive security reviews and remediation.

Build and maintain scalable vulnerability management systems and tooling. Drive automation and integrations with scanners, SIEMs, and CI/CD pipelines. Partner cross-functionally to prioritize, track, and remediate vulnerabilities, design aggregation pipelines, and embed security automation across the development lifecycle.

Architects and builds automated application security layers across the SDLC for a large financial services program. Integrates and tunes SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develops AI-enabled secure code scanning and hardened baselines, automates secure coding patterns and security runbooks, and reviews Java and Python code to provide detailed remediation guidance. The role also supports threat modeling and AI-assisted vulnerability triage.

Architects and builds automated application security layers across the SDLC. Integrates and tunes SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develops AI-enabled secure code scanning and hardened baselines, creates automated security runbooks, and reviews Java and Python code to provide detailed remediation guidance. The role operates autonomously as a senior technical subject matter expert supporting secure software development.

Designs, operates, and secures on-premises and cloud network architectures across Cisco Meraki, Cloudflare, AWS, and GCP. Responsibilities include network segmentation, firewalls, VPNs, zero-trust access, security monitoring, incident response, and protection of CUI, EAR, and ITAR-controlled data. The role partners with IT, security, and engineering teams to meet compliance and business requirements.

Own and improve the security posture of Robinhood’s AWS cloud infrastructure. Build and operate foundational security controls, automation, safe defaults, and developer-friendly security capabilities. Secure enterprise applications using AWS services, Terraform, and Golang or Python while applying least-privilege principles, AWS Well-Architected practices, and CIS Benchmarks.