Top Security Engineer Jobs in Seattle, WA

Owns Blueberry’s day-to-day security operations, including vulnerability management and remediation across GCP and Python/Django applications. Maintains detection, logging, monitoring, incident readiness, backups, endpoint security, network controls, access management, and IT administration. The role requires production Python experience, Linux administration, cloud experience, and hands-on familiarity with security tools and controls.

Supports cybersecurity control implementation, security baselines, compliance assessments, risk mitigation, audits, documentation, and vulnerability remediation. Develops and customizes CIS and STIG benchmarks, translates baseline requirements into FISMA and NIST controls, and collaborates with technical teams to protect client systems. The role requires five-plus years supporting IT operations and eligibility for a Public Trust determination. Preferred experience includes cloud, networking, automation, infrastructure-as-code, containers, serverless technologies, monitoring, and security-related certifications.

Designs and implements security controls for backend services and multi-cloud infrastructure. Conducts security reviews, remediates vulnerabilities and misconfigurations, secures CI/CD pipelines, and embeds secure design practices across engineering teams. The role also supports responsible AI and LLM adoption, mentors junior engineers, and champions security and privacy.

Provides technical leadership for enterprise security architecture, platforms, and controls across endpoints, infrastructure, applications, and cloud environments. Responsibilities include developing security strategy and roadmaps; implementing endpoint, EDR, zero-trust, application, and infrastructure protections; building scalable security services and automated workflows; and partnering across engineering teams to improve security posture, resilience, and operational excellence.

Leads enterprise AI security and GenAI data protection, owning the AI Gateway from evaluation through deployment and operations. Designs monitoring, coaching, redaction, quarantine, and blocking controls for prompts, uploads, browser traffic, copilots, agents, and integrations. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures control effectiveness, and supports audit and regulatory readiness while enabling responsible AI adoption.

Lead Buffer’s security strategy and execution as a hands-on security engineer. Responsibilities include application and API security, secure development practices, AI threat modeling, incident leadership, vulnerability disclosure, SOC 2 and customer compliance, security automation, and infrastructure risk assessment. The role partners closely with engineering and business teams, writes and reviews code, supports on-call operations, and establishes security standards in a distributed SaaS environment.

Provides technical leadership for cybersecurity engineering on AWACS aircraft and ground-system modernization programs. Responsibilities include secure network and communications architecture, RMF compliance, ATO/IATT and POA&M development, cyber risk assessments, avionics and mission-system integration, TEMPEST compliance, security requirements, and design reviews. The role supervises personnel and collaborates with systems, software, avionics, and test engineering teams. Active Secret clearance and significant military aviation cybersecurity experience are required, with 25–35% domestic and international travel.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.

Build and lead product and application security efforts, partnering with Product and Engineering on secure design, development, code reviews, vulnerability discovery, and security guardrails. Develop AI-native security tooling and support incident response, vulnerability management, penetration testing, and security operations. Help establish secure development practices and scalable security systems across Headway’s platform.

Own and improve CoreWeave’s vulnerability management program across applications, cloud infrastructure, and hardware. Build production security automation, triage and remediation workflows, prioritization models, metrics, and risk reporting. Investigate hardware-adjacent vulnerabilities, support zero-day response, conduct root-cause analysis, and collaborate with engineering and operational stakeholders. Contribute to architecture decisions, technical standards, code reviews, documentation, and teammate onboarding.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Own Compass’s AI product security strategy and roadmap. Threat model AI features, RAG pipelines, agentic workflows, and automated decisioning; build guardrails against prompt injection, jailbreaks, unsafe outputs, and data exfiltration; secure retrieval and AI supply chains; design autonomy controls; implement monitoring and detections; and automate secure development patterns through libraries, CI/CD checks, and evaluation harnesses. Advise engineering teams and executives on AI security risks and architecture.

Conduct security design reviews, threat modeling, penetration testing, and adversarial assessments of services, applications, APIs, infrastructure, mobile platforms, and AI agents. Build AI-powered automation to scale security assessments, identify complex attack paths, and improve security controls. Collaborate with engineering and security teams to address systemic weaknesses, evaluate cloud-native architectures, and communicate actionable findings across technical and non-technical stakeholders.

Own and improve network, firewall, cloud, endpoint, identity, email, and SaaS security controls. Responsibilities include firewall administration, VPNs, segmentation, secure architecture, traffic and log analysis, incident investigation, vulnerability remediation, security monitoring, technical project support, compliance evidence, and automation. The role collaborates with Infrastructure and DevOps teams, troubleshoots complex connectivity and security issues, and applies least-privilege, Zero Trust, and defense-in-depth principles.

Manages enterprise information assurance and cybersecurity support for DHS/TSA, including incident response, vulnerability management, risk and compliance services, RMF-based assessment and authorization, security audits, POA&M remediation, and security architecture. Coordinates cybersecurity teams, stakeholders, system owners, and government offices while monitoring performance, identifying risks, and recommending mitigation strategies.

Design and implement application security controls across cloud environments, assess cloud architectures for vulnerabilities and identity risks, conduct security reviews and penetration testing, monitor security events, support incident response, and develop cloud security requirements. Translate technical findings into remediation recommendations, interpret risk data, collaborate with clients, and mentor junior team members.

Manages application security assessments and client delivery across cloud environments. Designs security controls for IaaS, PaaS, and SaaS platforms; reviews architectures for vulnerabilities and control gaps; conducts risk assessments and vulnerability testing; guides remediation and security tool usage; monitors emerging threats; coaches security teams; and communicates findings to technical and business stakeholders.

Leads enterprise AI Security and GenAI data protection, owning the AI Gateway from evaluation through deployment and ongoing operations. Designs controls for prompts, uploads, browser traffic, copilots, agents, and integrations; implements monitoring, coaching, redaction, quarantine, and blocking. Integrates telemetry with security and identity platforms, establishes governance and exception processes, measures effectiveness, supports audit readiness, and partners with business and technology teams to enable responsible AI adoption.

Designs and develops IAM and security software, automation, APIs, and microservices. Integrates security into cloud and CI/CD environments, conducts code reviews and threat modeling, monitors security events, supports incident response, and advises teams on identity architecture and best practices. Requires extensive IAM administration, programming, cloud, containerization, and secure-coding experience.

Own application security for Generative AI and emerging products by integrating secure development practices, conducting design and code reviews, threat modeling systems, assessing vendors and AI tools, triaging vulnerabilities, and building security automation. The role partners with engineering and detection teams, contributes to cloud and infrastructure security, participates in incident response and on-call rotations, and documents post-incident remediation.

Secures and governs cloud-native platforms, Kubernetes environments, CI/CD pipelines, identities, APIs, secrets, and AI workloads. The role implements vulnerability scanning, secure software supply chain controls, access governance, monitoring, threat detection, and incident response support. It partners with engineering and operations teams to establish security standards, remediate vulnerabilities, harden infrastructure, and advance secure-by-design practices across cloud and application environments.

Design, secure, administer, and improve on-premises, cloud, and hybrid infrastructure. Manage servers, networks, operating systems, virtualization, firewalls, endpoints, and monitoring tools. Strengthen security controls, investigate incidents with a third-party SOC, manage vulnerabilities and risks, maintain documentation, and lead infrastructure and security projects including upgrades, migrations, automation, and tool deployments.

Design, develop, deploy, monitor, and maintain AI-enabled enterprise and cloud security solutions. Build machine learning workflows, data pipelines, and scalable security capabilities using Python, Java, TensorFlow, and related libraries. Analyze security risks and data quality, translate technical findings into client recommendations, support security controls across cloud and infrastructure environments, review deliverables, and mentor junior team members.

Own security outcomes for an engineering portfolio across application and cloud security. Lead threat modeling, architecture reviews, risk prioritization, remediation, secure coding, cloud and IaC security, and adoption of security scanning tools. Partner with engineering leaders, coach security champions, support incident response, provide hands-on remediation, and feed portfolio insights into security strategy and platform patterns. The role spans SaaS code, pipelines, identity, infrastructure, data, containers, Kubernetes, and AI-enabled systems.

Secure Runpod’s multitenant GPU cloud infrastructure across bare-metal and virtualized environments. Responsibilities include designing workload and network isolation, hardening Linux kernels and container platforms, testing hypervisor and hardware security, developing low-level controls in C, Go, or Rust, securing GPU and PCIe interactions, and responding to infrastructure security incidents with forensic capabilities for ephemeral containers.