Senior Security Engineer Threat Response Jobs

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam. The mission of Plaid's Product Security Team is “Improve our customer’s trust by assuring secure development and delivery of products and services, minimizing risk to the ecosystem, and preventing security incidents." Plaid's Product Security team helps engineering teams build secure products and continuously identify and reduce security risks. Our work spans security architecture and design, application security, vulnerability management, supply chain security, and security automation. We work directly with product and engineering teams to identify risks early, influence secure architecture, and define security requirements. We build and leverage automated security capabilities to expand testing coverage, validate fixes, and reduce recurring vulnerabilities. As AI accelerates software development, our goal is to help Plaid maintain strong security without relying on manual reviews for every change. This role is perfect for you if: You enjoy understanding complex products and systems and finding security risks that are not immediately obvious. You have strong application security fundamentals and are comfortable working directly with code and architecture. You enjoy working closel

NVIDIA's Automotive Offensive Security team believes the best defense is a good offense. Securing a sophisticated automotive operating system means finding vulnerabilities then building the tooling needed to find them at scale. We're looking for a senior engineer who can break low-level systems and then automate the insights gained from doing so into reusable security capabilities. What you'll be doing: You'll discover and evaluate vulnerabilities on both source code and binaries, focusing on low-level technologies such as OS kernels, Hypervisor, boot ROMs, firmware, and hardware. More than just bug finding, you'll develop and build automation to scale your work. This includes security pipelines, fuzzing infrastructure, AI-assisted vulnerability discovery, tools for automated code inspection, and code conversion. You'll work closely with security researchers and engineers, owning tool development - from prototype to production - for use across the software organization What we need to see : 7+ years of hands on programming experience, particularly with C/C++. Python and memory safe language (e.g. Rust, Ada/SPARK) proficiency a plus. B.S. or equivalent experience in Computer Science or a related field. Strong low-level systems security background: OS internals, kernels, hypervisors, firmware, or hardware; applying an analytical approach dissecting the functionality of intricate software and identifying security flaws. Experience with embe

Why Sony Interactive Entertainment? Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity. We are looking for an inspirational and hardworking person to join the Platform Hosting Cloud Security Engineering team at SIE! You'll be joining a team of innovative engineers who are unified in their mission to make PlayStation the best and most secure gaming platform. This support is fulfilled by minimizing impact to the platform while ensuring security needs are met. This role is highly technical and requires a shown grasp of security principles and how they are applied to production environments. You will assist in the planning, design, development, testing, and management of security tools and processes that provide protection and visibility of our cloud environments. Key Responsibilities Design, architect, and implement security controls and frameworks for PlayStation Infrastructure Be responsible for the detection of security gaps, and lead efforts to mature security tooling and operational processes Work with product and platform teams to define system requirements, engineer, and implement cloud based security applications and controls Write code to automate security processes which seamlessly integrate into code builds and deployments, applying DevSecOps processes and tools Architect, develop, and deploy automation solutions that help audit, secure, and

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native s

Bloomreach is building the world’s premier agentic platform for personalization .We’re revolutionizing how businesses connect with their customers, building and deploying AI agents to personalize the entire customer journey. We're taking autonomous search mainstream, making product discovery more intuitive and conversational for customers, and more profitable for businesses. We’re making conversational shopping a reality, connecting every shopper with tailored guidance and product expertise — available on demand, at every touchpoint in their journey. We're designing the future of autonomous marketing , taking the work out of workflows, and reclaiming the creative, strategic, and customer-first work marketers were always meant to do. And we're building all of that on the intelligence of a single AI engine — Loomi — so that personalization isn't only autonomous…it's also consistent.From retail to financial services, hospitality to gaming, businesses use Bloomreach to drive higher growth and lasting loyalty. We power personalization for more than 1,400 global brands, including American Eagle, Sonepar, and Pandora. About the Role You will serve as a trusted security partner to Engineering, DevOps, and IT, designing and hardening secure AWS environments, securing our containerized and Linux-based workloads, and protecting our corporate infrastructure and identity/access tooling — while partnering closely with our dedicated SOC team on detection and response. You will act as a key member of the Cloud Security team, owning cloud and corporate infrastructure security architecture, vulnerability remediation, and Splunk administration and data integration, in close partnership with the SOC team, which owns detection content, alerting, playbooks, and incident triage/response. Your Job Will Be (but not limited to) Design, implement, and monitor security controls across our AWS cloud infrastructure, applying platform-native s

Location: Remote (U.S.) Clearance: U.S. Citizen or Permanent Resident Required with the ability to obtain a Public Trust Salary Range: 110K – 125K LTS is seeking a Senior Security RMF Engineer to join a cybersecurity transformation surge team supporting the VA.gov Platform. This role will serve as the bridge between VA security/RMF requirements and the engineers responsible for implementing those requirements across VA.gov. The Senior Security / RMF Engineer must understand how security controls are implemented in modern cloud infrastructure and software delivery environments and be able to translate control deficiencies, authorization requirements, and security risks into actionable engineering work.This is not intended to be a documentation-only compliance role. This individual will work closely with DevSecOps engineers and the existing VA.gov Platform ATO/security team to assess the current security posture, address gaps in VA.gov's Critical Controls, support ATO/cATO readiness, improve authorization artifacts, and automate evidence and control assessment wherever possible. The PWS specifically describes the desired model as one in which ATO/RMF documentation confirms security rather than defines it, with success measured through risk reduction and security outcomes rather than paperwork completeness. What You’ll Do: Assess VA.gov Platform compliance with the 18 Critical Controls identified by VA and help establish a baseline of current implementation and remaining gaps. Perform security reviews, gap analyses, and risk assessments across VA.gov Platform infrastructure, pipelines, applications, and component systems. Support ongoing ATO and cATO readiness for the VA.gov Platform authorization boundary. Develop, update, and maintain RMF and authorization artifacts, including System Security Plans (SSPs), control narratives, POA&Ms, Business Impact Analyses (BIAs), Privacy Threshold Analyses (PTAs), and supporting evidence. Evaluate identified

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for thoughtful problem-solvers and builders who want to make a meaningful contribution. Robinhood is a place where people take ownership of their work and help improve financial access for all. We operate with high standards, clear accountability, and a strong focus on security and ethics in everything we build! The Red Team’s mission is to identify and reduce real-world security risks across Robinhood by simulating adversary behavior and testing defenses. As a Staff Offensive Security Engineer, you will plan and execute security assessments across applications, infrastructure, and physical environments, and partner closely with engineering and security teams to strengthen detection and response capabilities. You will help prioritize risk, contribute to remediation efforts, and develop tools and techniques that improve how we test and secure our systems. Your work will directly support the safety and reliability of products used by millions of customers. This role is based in our Bellevue, WA, New York, NY, Denver, CO or Menlo Park, CA office(s), with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams. What you’ll do Evangelize the Offensive Security Team’s Findings and Projects with stakeholders throughout the company and collaborate with other teams to create solu

The Role As a Senior Application Security Engineer, you will provide hands-on technical delivery for the migration of Web Application Firewall (WAF) capabilities to Cloudflare and/or Akamai. You will work closely with architecture, security, network, and application teams to execute migration waves, onboard applications, implement security policies, and support successful cutovers. You will play a key role in validating functionality, security, and performance, resolving technical issues, and supporting post-migration stabilization across complex enterprise environments. What You’ll Do Deliver end-to-end WAF migrations to Cloudflare and/or Akamai, including configuration, application onboarding, and deployment. Implement and tune WAF security policies, rules, and controls in line with application and security requirements. Execute DNS and traffic-routing changes and support integrations required for successful application migration. Perform testing, troubleshooting, and validation to confirm functionality, security, and performance throughout migration waves. Partner with architecture, security, network, and application teams to support cutover activities, resolve technical issues, and stabilize services following migration. What We’re Looking For 10+ years of relevant experience in network security, application security, infrastructure engineering, or related technical roles, with substantial hands-on WAF experience. Strong hands-on experience configuring, migrating, and supporting enterprise WAF technologies, ideally Cloudflare and/or Akamai. Practical knowledge of DNS, HTTP/HTTPS, TLS, traffic routing, application delivery, and web security concepts. Experience implementing and tuning WAF policies and security rules, troubleshooting application traffic, and resolving migration or production issues. Demonstrated experience working collaboratively with architecture, security, network, and application teams to deliver complex technical changes. Bonus Points For Expe

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world's biggest financial problems. We're looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn't a place for complacency, it's where ambitious people do the best work of their careers. We're a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. Robinhood's Security Engineering org is a builder-first security engineering team — engineers organized across Cloud Security, Infrastructure Security, Security Platform, and Detection & Response. Unlike traditional security teams that identify risk and hand it off, this org builds the systems that solve it. We own the critical authentication and identity infrastructure that protects every Robinhood user, the cryptographic libraries and access provisioning systems that keep internal operations secure, and the telemetry and detection platforms that give our security operations team the signal they need to move fast. If it secures how Robinhood runs — we built it. AI is reshaping what this team does and how it operates across two dimensions. First, we are embedding security directly into Robinhood's growing AI and agentic infrastructure — building the runtime authentication, credential management, and validation systems that make it possible to run AI safely in production at scale. Second, we are using AI to fundamentally multiply the capability of the security program itself — building intelligent internal platforms that surface vulnerabilities, accelerate detection

About Mach Industries Founded in 2023, Mach Industries is a rapidly growing defense technology company focused on developing next-generation autonomous defense platforms. At the core of our mission is the commitment to delivering scalable, decentralized defense systems that enhance the strategic capabilities of the United States and its allies. With a workforce of approximately 350 employees, we operate with startup agility and ambition. Our vision is to redefine the future of warfare through cutting-edge manufacturing, innovation at speed, and unwavering focus on national security. We are dedicated to solving the next generation of warfare with lethal systems that deter kinetic conflict and protect global security. The Role We are seeking a Senior Platform Security Engineer to lead security efforts across our growing Unmanned Aircraft Systems (UAS) portfolio. This role focuses on securing both hardware and increasingly software-driven systems, including autonomy platforms, command-and-control (C2) applications, APIs, cloud infrastructure, and embedded devices. As our products scale and become more connected, the attack surface expands across edge, air, and cloud environments. This role ensures security is built into the full system lifecycle—from hardware and firmware to applications and distributed services. Key Responsibilities Lead end-to-end product security across UAS platforms, including embedded systems, flight software, APIs, backend services, and cloud infrastructure. Design and implement secure architectures covering device identity, authentication, authorization, and data protection. Perform security assessments across software, firmware, and hardware, including application testing, code review, and adversarial analysis. Build and integrate security into CI/CD pipelines, including automated testing, scanning, and policy enforcement. Partner with software, hardware, and firmware teams to embed security into the development lifecycle. Secure communications

Senior Cloud Security Engineer At Anyscale , we're on a mission to democratize distributed computing and make it accessible to software developers of all skill levels. We’re commercializing Ray , a popular open-source project that's creating an ecosystem of libraries for scalable machine learning. Companies like OpenAI , Uber , Spotify , Instacart , Cruise , and many more, have Ray in their tech stacks to accelerate the progress of AI applications out into the real world. With Anyscale, we’re building the best place to run Ray, so that any developer or data scientist can scale an ML application from their laptop to the cluster without needing to be a distributed systems expert. Proud to be backed by Andreessen Horowitz, NEA, and Addition with $250+ million raised to date. About the Role Anyscale's security needs are growing as we operate more production and cloud infrastructure for larger and more demanding customers. We're looking for a Senior Cloud Security Engineer to own the security of that infrastructure. This is a hands-on, high-ownership role: you will own how our production and cloud environments are hardened, isolated, and monitored. You will set and drive the direction for infrastructure and production security, reporting to the Head of Security and partnering closely with the wider engineering organization. This role is based in the San Francisco, Bay Area. In your first year, success looks like hardened and well-segmented production environments, strong runtime security coverage across our container footprint, and a clear, defensible story for how we secure the infrastructure our customers rely on. What You'll Do Own the security posture of Anyscale's production and cloud infrastructure across AWS and Azure, including hardening, network segmentation, and tenant isolation. Own runtime security coverage across our Kubernetes environments, from deployment through detection of anomalous activity. Partner with engineering on secure infrastructure architectur

Why Harvey At Harvey, we’re transforming how legal and professional services operate. By combining frontier agentic AI, an enterprise-grade platform, and deep domain expertise, we’re reshaping how critical knowledge work gets done for decades to come. This is a rare chance to help build a generational company at a true inflection point. We have strong product-market fit and world-class investor support. We’re scaling fast and defining a new category in real time. The work is ambitious, the bar is high, and the opportunity for growth — personal, professional, and financial — is unmatched. Our team moves fast, takes ownership, and is deeply committed to the mission — operating with intensity, staying close to our customers, and pushing each other for excellence. We live by three values: Decisiveness, Simplicity, and Job's Not Finished. We act quickly on clear judgment over perfect information, we believe simplicity is what scales, and we're never satisfied with where we are. If you want to do the best work of your career alongside people who share that drive, we'd love to build with you. At Harvey, the future of professional services is being written today — and we’re just getting started. Role Overview As a Senior Software Engineer on the Product Security team at Harvey, you will have the opportunity to build security directly into the product. Harvey stores and processes our customers’ most sensitive data and our entire business model depends on a foundation At Harvey, you will find that security is paramount at every stage of our product lifecycle. In this role you will drive high-leverage security initiatives that raise the bar for the entire company — balancing hands-on technical work with cross-functional leadership and mentorship. This is a rare opportunity to design and build a world-class product security program at one of the fastest growing AI-native companies. The Harvey Security organization has an engineering-first mindset and team members bring a variet

Join us in building the future of finance. Our mission is to democratize finance for all. An estimated $124 trillion of assets will be inherited by younger generations in the next two decades. The largest transfer of wealth in human history. If you’re ready to be at the epicenter of this historic cultural and financial shift, keep reading. About the team + role We are building an elite team, applying frontier technologies to the world’s biggest financial problems. We’re looking for bold thinkers. Sharp problem-solvers. Builders who are wired to make an impact. Robinhood isn’t a place for complacency, it’s where ambitious people do the best work of their careers. We’re a high-performing, fast-moving team with ethics at the center of everything we do. Expectations are high, and so are the rewards. Robinhood's Enterprise Security team is at the forefront of AI security, designing safety guardrails for cutting-edge AI and driving modern enterprise-wide security tooling standards. As a Senior Corporate Security Engineer on our Corporate Systems team, you will operate at the center of our enterprise security infrastructure, maintaining the control plane for user-facing security tooling and building innovative solutions that keep our employees and platform secure! In this role, you will combine security engineering, systems administration, and hands-on AI agent development to drive key automation and safety initiatives. Joining a lean, high-impact team, you will have high visibility and direct empowerment to take strategic initiative, solve complex technical challenges, and shape Robinhood's AI security posture. This role is based in our Menlo Park or Bellevue office(s), with in-person attendance expected at least 3 days per week. At Robinhood, we believe in the power of in-person work to accelerate progress, spark innovation, and strengthen community. Our office experience is intentional, energizing, and designed to fully support high-performing teams.

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We're looking for a Senior Network Engineer (VPN/VDI) who will take charge of designing, deploying, and managing our multi-cloud network and VDI infrastructure. In this role, you'll collaborate with engineering, security, and operations teams to drive automation and implement Zero Trust security, ensuring our systems remain reliable and scalable as we grow. If you enjoy building robust networks and making a real impact within an organization, this position offers a chance to do just that. What You Will Be Doing Design a robust multi-cloud network architecture that supports our growing infrastructure needs. Create detailed network diagrams and documentation to guide implementation. Evaluate and select the best networking technologies, while implementing and optimizing routing protocols for efficiency. Develop plans for network scalability and maintain our Meraki networks to ensure reliable performance. Assist in deploying VPN and VDI solutions within our multi-cloud environment. Support integration efforts among network components and facilitate training for junior engineers and support staff. Collaborate with cross-functional teams to ensure smooth implementation of network services and provide on-call support to resolve any issues that arise. Monitor network performance metrics to identify areas for improvement. Analyze traffic

As a Platform Security Engineer you will partner with different stakeholders across the organization to secure our infrastructure and application components of the Datadog platform. As part of the Platform Security organization we secure the building blocks of Datadog’s applications and infrastructure. We do this by building solutions solving systemic risks making the secure path easier and the insecure path harder. At Datadog, we place value in our office culture - the relationships that it builds, the creativity it brings to the table, and the collaboration of being together. We operate as a hybrid workplace to ensure our employees can create a work-life harmony that best fits them. What You’ll Do: Solve our most challenging cloud infrastructure security & application security problems starting with our core building blocks and golden paths. Enable our engineers to build and ship secure solutions quickly. Build and extend Datadog’s Platform Security solutions. Leverage and influence the direction of Datadog’s products to secure our infrastructure, and provide internal feedback that enables our teams to improve the products for ourselves and our customers. Who You Are: You have a BS/MS/PhD in a Computer Science, Engineering or related scientific field or equivalent professional experience. You don't want to just provide security recommendations, you want to help implement solutions to solve systemic issues. Passionate about advocating for and implementing solutions to complex security problems, at-scale, in a large multi-cloud self-managed Kubernetes environment. Proven experience in securing enterprise SaaS applications including securing the underlying authentication flows, authorization patterns, and input validation at API boundaries. You have hands-on experience with Linux kernel internals (namespaces, cgroups, capabilities, seccomp) and hardening techniques such as KASLR, module allowlisting, or kernel self-protection (KSPP) controls. E