Top Senior Security Engineer Jobs

Build and maintain scalable vulnerability management systems and tooling. Drive automation and integrations with scanners, SIEMs, and CI/CD pipelines. Partner cross-functionally to prioritize, track, and remediate vulnerabilities, design aggregation pipelines, and embed security automation across the development lifecycle.

Architects and builds automated application security layers across the SDLC for a large financial services program. Integrates and tunes SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develops AI-enabled secure code scanning and hardened baselines, automates secure coding patterns and security runbooks, and reviews Java and Python code to provide detailed remediation guidance. The role also supports threat modeling and AI-assisted vulnerability triage.

Architects and builds automated application security layers across the SDLC. Integrates and tunes SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develops AI-enabled secure code scanning and hardened baselines, creates automated security runbooks, and reviews Java and Python code to provide detailed remediation guidance. The role operates autonomously as a senior technical subject matter expert supporting secure software development.

Designs, operates, and secures on-premises and cloud network architectures across Cisco Meraki, Cloudflare, AWS, and GCP. Responsibilities include network segmentation, firewalls, VPNs, zero-trust access, security monitoring, incident response, and protection of CUI, EAR, and ITAR-controlled data. The role partners with IT, security, and engineering teams to meet compliance and business requirements.

Own and improve the security posture of Robinhood’s AWS cloud infrastructure. Build and operate foundational security controls, automation, safe defaults, and developer-friendly security capabilities. Secure enterprise applications using AWS services, Terraform, and Golang or Python while applying least-privilege principles, AWS Well-Architected practices, and CIS Benchmarks.

Architect and build automated application security layers across the SDLC, including AI-enabled secure code scanning, hardened baselines, secure coding patterns, and CI/CD security integrations. Deploy and tune SAST, DAST, and SCA tools, review complex Java and Python code, provide code-level remediation guidance, and independently develop automated security runbooks for a large financial services program.

Design and build automated security layers in the SDLC, deploy and tune SAST/DAST/SCA tools in CI/CD pipelines, develop AI-enabled secure code scanning, provide code-level remediation for Java/Python applications, and create automated security runbooks.

Architect and build automated application security layers across the SDLC for a large financial services program. Integrate and tune SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develop AI-enabled secure code scanning and hardened baselines, automate secure coding patterns and runbooks, and provide code-level remediation guidance by reviewing complex Java and Python applications. The role requires autonomous execution, strong AppSec and DevSecOps expertise, and advanced threat modeling or AI integration experience is preferred.

Own and modernize PKI and certificate lifecycle systems for automotive products and EV charging. Design authentication and authorization using X.509, mTLS, OAuth2, and OIDC; build shared infrastructure with Kubernetes, service mesh, and workload identity; support secure boot and key management; operate production services through GitOps and observability; document systems and mentor engineers.

Develop low-level firmware for secure enclaves in custom ASICs supporting secure boot, attestation, root of trust, provisioning, secure updates, recovery, telemetry, tamper monitoring, and debugging. Collaborate with ASIC, hardware, security, software, and systems teams on interfaces and requirements. Support pre-silicon validation, FPGA and simulation development, silicon bring-up, production deployment, testing, code reviews, and documentation.

Architect and build automated application security layers across the SDLC for a large financial services program. Integrate and tune SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develop AI-enabled secure code scanning and hardened baselines, automate secure coding patterns and runbooks, and provide code-level remediation guidance for Java and Python applications.

Design, implement, and validate secure cloud platform features across hardware, firmware, and software. Develop tools, automation, telemetry, and diagnostics. Drive features from requirements through deployment and resolve complex system-level security issues.

Build production-grade agentic AI systems for Cisco Security’s SOC, including agent execution, orchestration, governed tool use, memory, evaluation, telemetry, and trace analysis. Design secure capabilities for cloud, on-premises, sovereign cloud, and air-gapped environments. Own features end to end, improve AI quality and reliability through experimentation and production evidence, collaborate across Cisco and Splunk, contribute to architecture, and mentor engineers.

Build production-grade agentic AI systems for Cisco Security’s SOC platform across cloud, on-premises, sovereign cloud, and air-gapped environments. Responsibilities include developing agent runtimes, orchestration, governed tool use, evaluation frameworks, telemetry, trace analysis, authorization, tenant isolation, and secure APIs. Own features end to end, improve AI quality through evaluations and experiments, diagnose distributed-system failures, contribute to architecture, collaborate across Cisco and Splunk, and mentor engineers.

Lead infrastructure, network, cloud, identity, and security engineering efforts. Own Cisco Meraki networks and Microsoft security platforms (Entra ID, Defender, Intune, Azure), drive MSP-to-internal transitions, manage incidents and vulnerability remediation, provide Tier III support, and establish security policies and Zero Trust practices while mentoring IT staff.

Lead cloud security for Robinhood's AWS environment: design, build, and operate security controls and automation, provide foundational security capabilities to developers, and enforce least-privilege network and access controls.

Designs, implements, and manages enterprise IT security solutions. Partners with architects, developers, and leadership on security plans; assesses vulnerabilities; strengthens systems, networks, and applications; manages security tools and software; and reduces risks across complex projects. The role focuses on user access, network protection, and maintaining a resilient enterprise security environment.

Lead embedded systems security engineering for DoD sensor payloads and mission systems. Responsibilities include developing security architectures and requirements, ensuring JSIG and DAAPM compliance, supporting security testing and authorization activities, maintaining security plans and POA&Ms, assessing exportability, and applying reverse engineering, anti-tamper, cyber resiliency, and hardware/software assurance techniques. The role requires collaboration across program and business development teams, strategic cybersecurity planning, and full lifecycle systems engineering from architecture through verification and validation.

Design, develop, test, and maintain enterprise information security solutions for embedded devices and cloud services. Troubleshoot security services, manage code and configurations, monitor vulnerabilities and alerts, automate security validations, and integrate application security throughout the SDLC. Collaborate with engineering, DevOps, cloud, and incident response teams on secure architectures, threat modeling, vulnerability management, compliance, and continuous improvement.

Designs, implements, and maintains secure, reliable network infrastructure aligned with business objectives and SRE principles. Responsibilities include network architecture, performance optimization, SLO and KPI monitoring, maintenance planning, fault resolution, security automation, infrastructure-as-code practices, and technical guidance. The role collaborates with cross-functional teams to improve network resilience, scalability, compliance, and operational efficiency.

Leads complex information security engineering initiatives and serves as a technical authority across multiple security domains. Designs, implements, and optimizes solutions addressing enterprise risk, regulatory requirements, and business objectives. Secures web applications, APIs, internet-facing technologies, DNS, and TLS/SSL environments; applies threat mitigation, automation, and infrastructure-as-code practices. Requires expertise with Akamai security platforms and relevant cloud security services, plus an industry certification such as CISSP, CISM, GSEC, or OSCP.

Design, implement, and manage enterprise IT security solutions; assess vulnerabilities; lead user access and network security projects; partner with architects, developers, and leadership to reduce risk and maintain security tools and systems.

Designs, implements, and automates infrastructure security across cloud, network, and operating-system environments. Secures AWS and GCP platforms, evaluates cloud architectures, manages security controls, responds to alerts, investigates incidents, supports audits, and builds security applications and services. Partners with engineering, GRC, and business teams to improve security policies, standards, and mitigation strategies while advising leaders on infrastructure security decisions.

Design and embed security into connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, firmware updates, key management, HSMs). Integrate security into SDLC and CI/CD, define V&V activities (pen tests, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA guidance, IEC 81001-5-1, ISO 14971 and relevant NIST frameworks.

Design and embed product security for connected and embedded medical devices across the product lifecycle. Perform threat modeling, risk assessments, and secure architecture reviews (secure boot, updates, identity, key management, HSM). Integrate security into SDLC/CI-CD, lead V&V activities (pen testing, static/dynamic analysis, fuzzing), manage vulnerabilities, and ensure compliance with FDA, IEC 81001-5-1, ISO 14971, and NIST guidance.