Skip to main content
PProfileMatch

62 open Security Engineer jobs

Real, currently-open Security Engineer roles synced directly from company career pages. Upload your resume to see which of these match your skills, or browse all open roles. New to the role? Read our Security Engineer guide.

Hiring snapshot for Security Engineer

The most common locations right now are McLean, Virginia (4), Bellevue, WA, USA (4), Bengaluru (4). 10 of these 62 roles (16%) list a remote option. 36 were posted in the last two weeks. By team, the biggest groups are Engineering (57).

Computed from the 62 open listings shown below.

Guide: working as a Security Engineer

Security engineers protect systems, data and users from attack. Depending on the team, the job leans toward application security (code review, threat modelling, fixing vulnerabilities with developers), cloud and infrastructure hardening, or detection and incident response. Much of the work is helping other engineers ship securely rather than blocking them.

Core skills employers look for

  • Threat modelling
  • OWASP Top 10 and secure coding
  • Authentication and authorisation
  • Cloud IAM and network controls
  • Log analysis and detection rules
  • Incident response basics
  • Scripting in Python or Bash
  • Vulnerability triage and patching

How to stand out when you apply

  • Practise on legal, intentionally vulnerable labs and capture-the-flag challenges, then write up what you found and how you would fix it in real code.
  • Show you can fix, not only find: a pull request that patches an injection flaw or tightens JWT validation is stronger evidence than a list of scanner tools.
  • Responsible disclosure through a public bug bounty programme, done within its rules, is a credible resume line if you can describe the issue and its impact clearly.
  • Pair security knowledge with a development or infrastructure foundation; teams value people who understand how the systems they defend are built and deployed.

What the interviews usually cover

Expect questions on common web vulnerabilities and their mitigations, how authentication flows and tokens work, and network fundamentals such as TLS and DNS. Many loops include a threat-modelling exercise for a described system, a code review to spot security bugs, and an incident scenario where you explain how you would investigate and contain a breach.

Prepare for free on ProfileMatch

Browse jobs by role

Browse jobs by company