Top Security Engineer Jobs in Seattle, WA

Design, implement, and scale security controls across infrastructure, applications, identity, and cloud. Perform security assessments, threat modeling, code reviews, incident response, and root cause analysis. Build automation and tooling for compliance, observability, and governance. Partner with product and engineering teams and help define security standards and documentation.

As an Information Security Engineer, you'll protect Palantir's infrastructure by detecting and combating security threats, developing defensive strategies, and investigating security events.

Lead design and implement confidential computing and enterprise security solutions across cloud platforms. Develop and review secure production code, perform threat modeling, vulnerability and penetration testing, and advise stakeholders on security controls and mitigation.

Lead development and maintenance of a multi-runtime TLS abstraction layer across Java, Python, and Node.js. Design APIs, ensure TLS 1.2/1.3 conformance, build comprehensive tests, maintain CI/CD pipelines, triage complex TLS issues, monitor standards and crypto libraries, and produce integration and migration documentation for enterprise adoption.

Lead security engineer responsible for designing, building, and reviewing secure, high-performance API-first services and integrations. Provide technical guidance, implement secure production code, influence product and architecture decisions, and embed AI-assisted security practices within the SDLC. Ensure scalable, cloud-native distributed systems, validate AI outputs, and uphold traceability, resiliency, and auditability across security workflows.

Lead a global security engineering organization to design, deliver, and operate AI-driven security platforms, endpoint/server antivirus, and container security at enterprise scale. Set technical direction, embed security by design across product and infrastructure teams, drive adoption, and own staffing, budget, and roadmap delivery.

Senior hands-on security engineer responsible for designing, building, and implementing enterprise security solutions across cloud, hybrid, and on-prem environments. Integrates security into SDLC, automates controls, performs threat modeling and risk assessments, leverages AI-assisted tools, mentors junior engineers, and leads incident response and post-incident improvements.

Lead design and build secure, resilient cloud-native distributed systems; write Java/Python production code (Spring); perform threat modeling, vulnerability remediation, incident response, and ensure audit-defensible security controls and SDLC practices. Mentor engineers and validate AI-assisted security outputs.

Design and deliver enterprise-scale security engineering solutions for .NET applications; write and maintain secure production code; apply vulnerability scanning, threat modeling, and AI-assisted tools (e.g., Copilot) to identify and remediate risks; produce architecture/design artifacts; define guardrails and audit controls for agentic AI; and lead security training and resiliency activities across SDLC.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Supports cybersecurity operations, incident response, vulnerability management, remediation tracking, security project execution, governance, compliance, reporting, and dashboard development. The role coordinates with technical and business stakeholders to investigate alerts, validate remediation, support audits, maintain security documentation, and improve security processes. Requires at least three years of relevant technical or information security experience, with preferred experience in CrowdStrike, Zscaler, Microsoft O365, SIEM, GRC, and security certifications.

Maintains security infrastructure, firewalls, PKI, access controls, vulnerability management, incident response, compliance documentation, and threat detection systems. Uses AI-powered SIEM, EDR, UEBA, and SOAR tools to automate security operations and identify emerging threats. Develops policies based on NIST, FISMA, PCI, PII, and CJIS requirements; performs risk assessments, system hardening, and security training. Collaborates with IT teams and evaluates AI/ML security, privacy, and supply chain risks.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develop offensive tooling, implants, and tradecraft; direct AI-driven autonomous agents; discover and exploit vulnerabilities; brief executive customers; provide defensive guidance; collaborate with threat intelligence and blue teams; establish operational standards; and mentor security operators.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational security environments. Develop offensive tooling, implants, and AI-driven autonomous agents for reconnaissance, exploitation, and post-exploitation. Serve as a technical lead for customer engagements, brief security executives, collaborate with blue teams and threat intelligence organizations, establish operational standards, and mentor senior operators.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Designs, implements, maintains, and supports security infrastructure, including firewalls, networks, cloud workloads, authentication, monitoring, threat hunting, vulnerability assessments, incident response, and security controls. The role maintains federal compliance, supports system hardening and access control, automates administration, contributes to cloud migration, documents technical processes, and participates in project and on-call support activities.

Hands-on Information Security Engineer responsible for SOC 2 Type 2 compliance, vulnerability management, Azure and endpoint security, security tooling, governance, customer security questionnaires, vendor risk, secure SDLC practices, incident response, and security awareness. The role partners across Engineering, IT, Legal, and Product to improve the company’s SaaS security posture.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Lead a team building automated systems and tools to discover, explain, and remediate vulnerabilities in native Windows code. Develop scalable detection methods, enable automated security testing for developers, collaborate with product teams, and drive team clarity and execution.

Conduct penetration testing across web, mobile, API, and network environments; simulate threat actors through Red Team campaigns; identify vulnerabilities; and provide remediation guidance. Requires offensive security experience, proficiency with penetration testing tools, Linux, networking, command-line utilities, and programming. Cloud, threat modeling frameworks, offensive security certifications, and Korean-English fluency are preferred.