Top Senior Security Engineer Jobs

Lead product security for embedded transportation and HVAC control platforms. Responsibilities include risk management, threat modeling, security DFMEA, penetration testing, vulnerability management, regulatory type approval, secure OTA updates, cryptographic assurance, privacy compliance, and security-tool oversight. The role guides cross-functional engineering teams, maintains cybersecurity and software-update management evidence, and ensures compliance with automotive and industrial security standards.

Designs, deploys, maintains, and improves enterprise endpoint security solutions. Responsibilities include managing endpoint protection platforms, threat analysis, security event triage, vulnerability remediation, system hardening, compliance reporting, policy development, technology evaluation, project leadership, documentation, and mentoring junior staff. The role collaborates with Security Operations, IT Service teams, leadership, and vendors to strengthen protection against cyber threats.

Designs, deploys, maintains, and improves enterprise endpoint security platforms and controls. Responsibilities include threat analysis, security event triage, endpoint infrastructure tuning, vulnerability management, policy enforcement, compliance reporting, technical documentation, and technology evaluations. The role supports security projects, mentors junior staff, collaborates with IT and leadership, and helps strengthen protection against emerging cyber threats across the enterprise.

Provide systems security engineering and cybersecurity expertise for USAF weapon systems throughout acquisition. Assess cybersecurity posture, vulnerabilities, cyber resiliency, survivability, and mitigation strategies. Support systems engineering technical reviews, acquisition documentation, technical evaluations, and senior-leader briefings. Recommend security designs protecting software, hardware, firmware, weapon systems, and critical networks. Interface with government, engineering, acquisition, and cybersecurity personnel while providing technical guidance to junior staff.

Develops and implements cybersecurity controls for DoD satellite communications systems. Performs risk and vulnerability assessments, STIG validation, IAVM activities, RMF accreditation support, POA&M documentation, compliance self-assessments, vulnerability remediation, and security change reviews. Analyzes ACAS scans, deploys security tools, briefs technical security posture to leadership, and advises on threat mitigation for strategic and tactical communications systems.

Designs, implements, and manages enterprise IT security solutions. Partners with architects, developers, and leadership on security plans; identifies vulnerabilities; strengthens systems, networks, and applications; manages security tools and access controls; and reduces risks across complex projects.

Own and mature the application security program, including secure development practices, tooling, automation, vulnerability management, and detection pipelines. Partner with engineering on secure AI-driven workflows, data privacy, and AI-specific vulnerabilities. Lead incident response as primary incident commander, support cloud security, and guide security audits, certifications, and customer requirements in a regulated fintech environment.

Design and implement technical security controls across cloud, application, identity, and PKI environments. Assess architectures, perform threat modeling and risk assessments, produce control narratives/SSPs/POA&Ms, support audits (FedRAMP, SOC 2, ISO 27001), and work hands-on with DevOps, engineering, and operations to remediate, validate, and collect defensible evidence.

Provides senior technical leadership for secure multi-enclave network and system architectures supporting government customers. Designs and secures SDN-enabled environments, implements segmentation and access controls, performs risk analysis and compliance activities, troubleshoots network security issues, develops security documentation, and supports trusted interconnections across classification boundaries. Requires extensive DoD/IC experience, advanced network security expertise, CCNA certification, CCNP progress, and an active TS/SCI clearance with current polygraph.

Supports secure-by-design practices across medical device software platforms. Responsibilities include threat modeling, architecture reviews, vulnerability assessments, security testing, patch release processes, risk assessments, and integrating cybersecurity into CI/CD and DevSecOps workflows. The role partners with software engineering, quality, regulatory, and risk teams to maintain product security and compliance throughout the software development lifecycle.

Designs and operates security controls for AWS multi-account environments, including IAM, networking, encryption, secrets, infrastructure-as-code, CI/CD, policy-as-code, vulnerability management, telemetry, and incident response. Partners with engineering, DevOps, architecture, MLOps, IT, GRC, and audit teams to create secure platform patterns, golden paths, guardrails, documentation, and compliance evidence. Mentors engineers and improves cloud security without slowing delivery.

Designs and executes security validation for Clover Device OS and point-of-sale hardware. Responsibilities include PKI and HSM management, secure provisioning, vulnerability management, PCI compliance testing, CI/CD supply-chain security, secure bootloader troubleshooting, and cryptographic validation. The role requires scripting, security scanning, risk assessment, embedded or cloud infrastructure experience, and collaboration with engineering, product, and governance teams.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Design, build, deploy, and operate scalable backend security services using REST and/or gRPC APIs. Define service architecture, data models, integrations, and reliability practices while supporting observability, incident response, testing, and continuous improvement. Integrate identity providers, key-management services, HSMs, SIEMs, and access-control systems across customer environments. Collaborate with product, security, infrastructure, and customers, contribute to technical direction, and mentor engineers.

Designs, deploys, operates, and improves cloud and network security infrastructure across AWS and on-premises environments. Manages AWS security services and Palo Alto firewalls, develops hybrid-cloud security architectures, implements Infrastructure as Code and automation, troubleshoots complex incidents, and supports compliance with NIST, FedRAMP, and FISMA frameworks. The role also develops monitoring, alerting, runbooks, and security standards while participating in on-call escalation support.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

The Senior Security Engineer will build and maintain detection systems, automate responses, and lead incident investigations to enhance security observability.

Design and implement security controls for identity, access management, and endpoint security. Lead initiatives around zero trust and phishing-resistant MFA.

Design, implement, and scale enterprise security architecture across identity, endpoints, network, SaaS, and AI systems. Lead zero-trust transformation, automate security workflows, build AI-augmented detection and response tooling, perform risk assessments and threat modeling, and mentor junior engineers while partnering cross-functionally to improve telemetry, monitoring, and incident response.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Provides systems security engineering for Air Force armament programs, including anti-tamper, information assurance, supply chain risk management, and platform security. Identifies critical program information and mission-critical components, develops protection specifications, supports secure weapon-system integration, and ensures compliant connections to classified networks. The role also supports RMF assessments, authorization, continuous monitoring, ATO processes, PIT security, audits, and stakeholder coordination while protecting classified technologies from exploitation and supply-chain risks.

Serves as the technical authority for securing mission-critical systems across cloud and on-premises environments. Leads the RMF lifecycle, ATO management, NIST control implementation, vulnerability assessments, POA&M tracking, continuous monitoring, disaster recovery planning, and security-by-design reviews. Collaborates with developers, systems engineers, government stakeholders, SCAs, and DAOs while briefing senior leaders on technical risks. Maintains cybersecurity policies, evaluates system changes, and oversees AWS and Azure security.

Leads enterprise network security architecture across hybrid, multi-cloud, and OT environments. Designs and implements Zero Trust, SASE, ZTNA, segmentation, firewalls, NDR, secure connectivity, encryption, and cloud security controls. Develops automation and policy-as-code, supports incident response, establishes engineering standards and metrics, evaluates emerging technologies, and leads modernization initiatives. Collaborates across Security, Cloud, Infrastructure, Network, and IAM teams while mentoring engineers and influencing enterprise architecture decisions.

Build and mature enterprise IAM and CIAM capabilities, including identity lifecycle management, RBAC and ABAC, access reviews, authentication, authorization, PAM, and access governance. Integrate identity platforms with enterprise applications, investigate access issues, perform risk and compliance assessments, support audits, document controls, and remediate findings. Partner with cybersecurity, IT, auditors, application owners, and business stakeholders while mentoring operations staff and improving IAM processes aligned with NIST, NYDFS, Zero Trust, and least-privilege principles.

Supports an enterprise information security program through third-party and vendor risk assessments, policy governance, vulnerability remediation, security awareness and phishing campaigns, disaster recovery assessments, litigation holds, eDiscovery, metrics, and security process automation. The role evaluates architectures, manages policy exceptions, collaborates with Legal, Privacy, IT, and external partners, and presents security risks and recommendations to diverse stakeholders.