Top Security Engineer Jobs in Seattle, WA

Own the product strategy, roadmap, backlog, and delivery outcomes for a hardware security control plane. Translate cybersecurity and regulatory requirements into prioritized product increments, acceptance criteria, success metrics, and control evidence. Partner with infrastructure, architecture, engineering, risk, and control stakeholders while managing intake, vendor capabilities, adoption, and roadmap trade-offs. The role requires deep product ownership experience, cybersecurity expertise, regulated-environment knowledge, and strong executive communication.

The Product Security Engineer secures Superhuman’s products and AI systems across the software development lifecycle. Responsibilities include threat modeling, design reviews, secure code reviews, manual testing, vulnerability mitigation, security tooling and automation, bug bounty program improvements, and AI-based security tools. The role partners with engineering teams, communicates security risks and trade-offs, and helps establish secure-by-default platforms and identity models.

Lead enterprise security architecture across endpoint, identity, network, cloud, and data. Define controls, review major initiatives, automate control deployment (IaC/PaC), mentor engineers, and drive zero-trust and cloud security strategy at scale.

Security Engineering Intern responsible for completing a scoped security project, developing automation and investigation tools, researching vulnerabilities, analyzing findings, validating AI-assisted outputs, collaborating with engineers, and documenting and demonstrating solutions. The role requires programming, web and systems knowledge, foundational security understanding, AI familiarity, and current enrollment in a bachelor’s or master’s program.

Leads the technical strategy, architecture, development, and operation of SnapIAM, Snap’s centralized identity and access management platform. Designs cloud access controls, workload identities, access governance, and least-privilege systems; leads migrations and multi-team initiatives; establishes engineering standards; contributes production code; and mentors engineers. Partners with infrastructure, engineering, and security teams to improve reliability, adoption, developer productivity, and secure access management across cloud environments.

Lead application security for Snap’s Lens runtime and web clients. Own security architecture, threat modeling, sandboxing, isolation, web security, memory-safety improvements, vulnerability research, fuzzing, exploitability analysis, and bug bounty operations. Partner across native and web engineering teams, mentor engineers, establish secure design patterns, and drive complex security initiatives through resolution.

Build and operate security platform services, asset and identity ownership systems, automated security reviews, vulnerability triage workflows, and AI guardrails. Develop production automation with approval, testing, monitoring, and on-call support. Partner with engineering, infrastructure, IT, and product teams while contributing code reviews, design reviews, runbooks, and technical guidance.

Build and operate corporate security controls for identity, access, endpoints, and SaaS applications. Automate authentication and joiner-mover-leaver workflows, secure macOS and mobile devices, develop agents and security tooling, detect and remediate misconfigurations, respond to security events, and partner with IT and engineering teams on secure SaaS and AI integrations. Participate in on-call rotations, conduct code reviews, maintain runbooks, and influence security improvements across the organization.

Leads product security incident response for post-release vulnerabilities, coordinating investigations, remediation, release fixes, CVE scoring and coordinated disclosure. Partners with engineering, product, release, customer-facing, and external security teams during significant incidents. Conducts exploit analysis, validates mitigations, authors postmortems, and improves secure development practices and SDLC processes.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Build and govern Compa’s secure AI foundation across identity, access, data, endpoints, SaaS, cloud, and networks. Secure non-human identities, agent access, data flows, AI integrations, and third-party models. Design controls for prompt injection, data exfiltration, excessive agency, OAuth abuse, and unsafe tool use. Implement logging, detection, enforcement automation, and enterprise security architecture while partnering with technical, legal, privacy, and business teams.

Lead hardware and embedded security across device design, manufacturing, deployment, updates, and decommissioning. Develop security baselines, conduct architecture reviews and threat modeling, define requirements, validate controls, and drive remediation with hardware engineering teams. Focus areas include secure boot, firmware, FOTA, hardware root of trust, device identity, provisioning, cloud-connected devices, and secure-by-default engineering practices.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Designs, develops, and maintains secure software and cloud-native solutions across the SDLC. Builds infrastructure as code, CI/CD pipelines, vulnerability remediation, security testing, monitoring, and incident response capabilities. Supports AWS environments, conducts security troubleshooting, validates AI-assisted security recommendations, and contributes to resiliency training, continuity exercises, and audit-defensible security controls.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Build production security tooling and infrastructure using Terraform, Bash, Go, and Python. Partner with product engineers to design secure features, review Terraform and IAM configurations, automate security workflows, and advise teams on pragmatic vulnerability remediation. The role emphasizes developer enablement, scalable security libraries and tools, cloud security, containerization, and responsible AI use.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Owns enterprise vulnerability management and privileged access management programs. Responsibilities include administering scanning and PAM platforms, prioritizing vulnerabilities, tracking remediation against SLAs, validating fixes, managing risk exceptions, enforcing least privilege, reviewing privileged accounts, monitoring sessions, and producing security reporting for leadership, audits, and clients.

Leads enterprise email security strategy, architecture, engineering, modernization, and lifecycle management. Oversees phishing protection, threat detection, encryption, DLP, cloud security, incident response, risk remediation, governance, metrics, vendor relationships, and regulatory alignment. Partners with cross-functional stakeholders, presents to executives, leads engineering teams, and applies AI-enabled workflows to improve security analysis and operational effectiveness.

Execute red team operations against Azure and other Microsoft services by discovering and exploiting vulnerabilities across application, cloud, network, hardware, and operational security layers. Emulate real-world adversaries, analyze source code and threat data, collaborate with blue teams, improve detection and response readiness, communicate security risks, and apply AI-based approaches to vulnerability discovery and threat emulation.

Lead enterprise security engineering across DLP, zero-trust networks, endpoint protection, SaaS posture management, email security, and network defense. Design secure architectures, baseline configurations, automation, threat signaling, and risk mitigation strategies. Administer security tools, conduct incident response and threat detection, analyze logs, and support digital forensics. Partner with IT, infrastructure, risk, compliance, and engineering teams while mentoring staff and establishing cybersecurity best practices.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.