Top Senior Security Engineer Jobs

Provides senior technical leadership for secure multi-enclave network and system architectures supporting government customers. Designs and secures SDN-enabled environments, implements segmentation and access controls, performs risk analysis and compliance activities, troubleshoots network security issues, develops security documentation, and supports trusted interconnections across classification boundaries. Requires extensive DoD/IC experience, advanced network security expertise, CCNA certification, CCNP progress, and an active TS/SCI clearance with current polygraph.

Supports secure-by-design practices across medical device software platforms. Responsibilities include threat modeling, architecture reviews, vulnerability assessments, security testing, patch release processes, risk assessments, and integrating cybersecurity into CI/CD and DevSecOps workflows. The role partners with software engineering, quality, regulatory, and risk teams to maintain product security and compliance throughout the software development lifecycle.

Designs and operates security controls for AWS multi-account environments, including IAM, networking, encryption, secrets, infrastructure-as-code, CI/CD, policy-as-code, vulnerability management, telemetry, and incident response. Partners with engineering, DevOps, architecture, MLOps, IT, GRC, and audit teams to create secure platform patterns, golden paths, guardrails, documentation, and compliance evidence. Mentors engineers and improves cloud security without slowing delivery.

Designs and executes security validation for Clover Device OS and point-of-sale hardware. Responsibilities include PKI and HSM management, secure provisioning, vulnerability management, PCI compliance testing, CI/CD supply-chain security, secure bootloader troubleshooting, and cryptographic validation. The role requires scripting, security scanning, risk assessment, embedded or cloud infrastructure experience, and collaboration with engineering, product, and governance teams.

Own end-to-end development of hardware security IP from architecture through silicon validation. Collaborate with SoC, firmware, verification, and physical design teams to deliver RTL designs, drive PPA optimization, perform signoff (CDC, RDC, LINT, synthesis, STA), implement cryptographic accelerators, secure boot and key management, lead pre/post-silicon debug and root-cause analysis, and mentor engineers to improve design quality and automation.

Design, build, deploy, and operate scalable backend security services using REST and/or gRPC APIs. Define service architecture, data models, integrations, and reliability practices while supporting observability, incident response, testing, and continuous improvement. Integrate identity providers, key-management services, HSMs, SIEMs, and access-control systems across customer environments. Collaborate with product, security, infrastructure, and customers, contribute to technical direction, and mentor engineers.

Designs, deploys, operates, and improves cloud and network security infrastructure across AWS and on-premises environments. Manages AWS security services and Palo Alto firewalls, develops hybrid-cloud security architectures, implements Infrastructure as Code and automation, troubleshoots complex incidents, and supports compliance with NIST, FedRAMP, and FISMA frameworks. The role also develops monitoring, alerting, runbooks, and security standards while participating in on-call escalation support.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

The Senior Security Engineer will build and maintain detection systems, automate responses, and lead incident investigations to enhance security observability.

Design and implement security controls for identity, access management, and endpoint security. Lead initiatives around zero trust and phishing-resistant MFA.

Design, implement, and scale enterprise security architecture across identity, endpoints, network, SaaS, and AI systems. Lead zero-trust transformation, automate security workflows, build AI-augmented detection and response tooling, perform risk assessments and threat modeling, and mentor junior engineers while partnering cross-functionally to improve telemetry, monitoring, and incident response.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Provides systems security engineering for Air Force armament programs, including anti-tamper, information assurance, supply chain risk management, and platform security. Identifies critical program information and mission-critical components, develops protection specifications, supports secure weapon-system integration, and ensures compliant connections to classified networks. The role also supports RMF assessments, authorization, continuous monitoring, ATO processes, PIT security, audits, and stakeholder coordination while protecting classified technologies from exploitation and supply-chain risks.

Serves as the technical authority for securing mission-critical systems across cloud and on-premises environments. Leads the RMF lifecycle, ATO management, NIST control implementation, vulnerability assessments, POA&M tracking, continuous monitoring, disaster recovery planning, and security-by-design reviews. Collaborates with developers, systems engineers, government stakeholders, SCAs, and DAOs while briefing senior leaders on technical risks. Maintains cybersecurity policies, evaluates system changes, and oversees AWS and Azure security.

Leads enterprise network security architecture across hybrid, multi-cloud, and OT environments. Designs and implements Zero Trust, SASE, ZTNA, segmentation, firewalls, NDR, secure connectivity, encryption, and cloud security controls. Develops automation and policy-as-code, supports incident response, establishes engineering standards and metrics, evaluates emerging technologies, and leads modernization initiatives. Collaborates across Security, Cloud, Infrastructure, Network, and IAM teams while mentoring engineers and influencing enterprise architecture decisions.

Build and mature enterprise IAM and CIAM capabilities, including identity lifecycle management, RBAC and ABAC, access reviews, authentication, authorization, PAM, and access governance. Integrate identity platforms with enterprise applications, investigate access issues, perform risk and compliance assessments, support audits, document controls, and remediate findings. Partner with cybersecurity, IT, auditors, application owners, and business stakeholders while mentoring operations staff and improving IAM processes aligned with NIST, NYDFS, Zero Trust, and least-privilege principles.

Supports an enterprise information security program through third-party and vendor risk assessments, policy governance, vulnerability remediation, security awareness and phishing campaigns, disaster recovery assessments, litigation holds, eDiscovery, metrics, and security process automation. The role evaluates architectures, manages policy exceptions, collaborates with Legal, Privacy, IT, and external partners, and presents security risks and recommendations to diverse stakeholders.

Provides security architecture and advisory guidance for large-scale cloud infrastructure and foundational services. Conducts threat modeling, security design reviews, risk assessments, and vulnerability mitigation throughout the software development lifecycle. Partners with engineering and product teams to implement secure designs, prioritize risk-based initiatives, and improve security roadmaps. Applies expertise in cloud security, identity and access management, network security, secure development practices, and infrastructure protection while influencing stakeholders without direct authority.

Leads threat hunting, detection engineering, incident response, vulnerability management, and security platform ownership across endpoint, identity, network, cloud, application, and SaaS environments. Designs and operates security controls, automates workflows using scripts and APIs, manages incident response and assessments, improves network security, establishes metrics, and supports compliance with NIST, ISO 27001, SOC 2, and financial-services requirements. Mentors junior staff and advises cross-functional teams.

Designs, implements, and supports endpoint security solutions for mission-critical networks supporting the NGA. Responsibilities include managing Linux-based security tools, integrating enterprise security platforms, troubleshooting, incident response, security event analysis, mitigation leadership, and compliance with DoD cybersecurity frameworks.

Lead the design and implementation of cloud-based identity governance and administration capabilities. Shape enterprise identity engineering strategy across human and non-human identities, support governance, privileged access, and federation platforms, and reduce security risks through access analysis, segregation of duties, and least-privilege enforcement. Automate identity processes integrated with HRIS systems and guide recommendations for improving governance and access controls.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Continuously identify exposed digital assets, shadow IT, vulnerabilities, and attack paths across cloud, on-premises, IoT, and endpoint environments. Implement and operate attack surface management solutions, develop scanners and detection scripts, prioritize remediation, collaborate with infrastructure and development teams, and automate integrations using AWS and Python. Support proactive defense across large-scale global infrastructure.

Own the organization’s infrastructure and application security posture across Azure, AKS, on-premises systems, and client applications. Lead vulnerability management, penetration testing, IAM hardening, container and CI/CD security, incident response, compliance readiness for SOC 2 and GDPR, client security requirements, and audit coordination. Develop runbooks, detection logic, remediation plans, and leadership metrics while partnering with engineering, DevOps, offshore teams, auditors, vendors, and clients.

Build and maintain backend integrations and policy platform features using Golang, MongoDB, Snowflake, and AWS. Work with customer engineering stakeholders to deliver scoped changes, follow established coding, testing, review, and deployment standards, and communicate progress and blockers. The role requires rapid onboarding, independent execution, and reliable delivery in a fully remote contractor engagement.