Salary guide
| Measure | Annual pay (USD) |
|---|---|
| 25th percentile | $177,000 |
| Median | $205,000 |
| 75th percentile | $253,000 |
| Lowest listing | $100,000 |
| Highest listing | $537,000 |
| Listings counted | 382 |
| Level | Listings | Median pay |
|---|---|---|
| Senior | 127 | $201,000 |
| Lead | 12 | $197,000 |
| Country | Currency | Listings | Median pay | Middle half |
|---|---|---|---|---|
| United States | USD | 325 | $207,000 | $175,000 to $255,000 |
| Canada | USD | 7 | $190,000 | $181,000 to $198,000 |
This role is part of the Governance, Risk & Compliance (GRC) function within Mozilla's Security team. The Security team supports Product, Enterprise, and GRC functions across the organization, aligned with the mission to build a safe and secure internet.
Our partner is looking for a Senior Enterprise Security Architect based in the United States . The Senior Enterprise Security Architect will serve as a trusted technical advisor, helping enterprise customers strengthen their API, AI, and agent security strategies.
The Security team at Headway is responsible for the security and privacy of all of Headway's customers — therapists, patients, and payer partners (insurance companies and health systems).
You will engineer and run Corporate IT Security at Komodo Health, protecting the employee environment across identity, devices, endpoints, internal networks, workforce SaaS and AI tools, and workforce-related risk.
Design, build, and tune detections across our security stack (Google Security Operations) to improve our ability to identify and mitigate threats. Lead incident response for sophisticated and high-severity investigations, from initial triage through root cause and remediation.
We are seeking a Staff Application Security Engineer to build and advance a scalable, developer-centered application security program.
You will own GRC Engineering at Plaid — a foundational, high-ownership role defining an emerging discipline from the ground up.
We are looking for a Sr. Full Stack Application Security Engineer with deep expertise in mobile application security to join our Product Security team. This role is hands-on and impact driven.
Cybersecurity is at the heart of our culture. Our diligence and expertise are what makes us the undisputed leader in electronic payments. We’ve made it our priority to create a top-tier Security Architecture team, poised to defend us against any potential cyber threats.
Client is seeking an Information Systems Security Engineer to provide cybersecurity engineering and Assessment and Authorization support for the Sponsor's portfolio.
Our partner is looking for a Senior Infrastructure Security Engineer based in Canada. This is an exciting opportunity to join a fast-growing technology organization developing an AI-native platform that is transforming traditional insurance operations.
Our partner is looking for a Senior Security Engineer, Infrastructure Security based in the United States. We are seeking an experienced Infrastructure Security Engineer to strengthen and scale the security of a complex, cloud-native technology environment.
Infrastructure Security at ClickUp secures the cloud, compute, network and access layers underneath ClickUp: a multi-account AWS organization, a large Kubernetes fleet, infrastructure managed as code and the identity systems engineers use to reach production.
Application Security at ClickUp investigates threats, platform abuse and security incidents affecting our product and internal systems.
Security Automation & Integration Engineering (SecAIE) transforms cybersecurity operations by architecting intelligent automation that turns manual processes into scalable, decision-accelerating systems.
We are seeking an experienced Cyber Incident Response Security Engineer to join our global security team in Newark, CA .
Design & Integrate: Collaborate with the network architecture team to review and comment on network designs.
The Security Incident Response Team (SIRT) is looking for a Senior Security Engineer who is passionate about solving Twilio’s mission of security and reliability by working across the organization to lead the technical response to security events and incidents across Twilio’s…
AFS is seeking a Cloud DevOps Engineer to be onsite in Lorton, VA.
Lead the design and delivery of technology platforms and automated controls across cloud and on-prem environments. Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems.
CoreWeave is seeking an experienced Network Security Engineer for our network security initiatives to help protect our rapidly scaling cloud infrastructure hosting high-performance AI workloads.
Twitch is looking for a Security Incident Response Engineer to join our SIRT. Reporting to the SIRT Manager, you'll be at the heart of our mission to find, handle, and learn from security incidents across our global platform.
Architecture & strategy. Define security architecture for Flexport's products and services , and set the patterns and reference implementations that make secure-by-default the path of least resistance.
Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
Architecture & strategy. Define security architecture for Flexport's products and services , and set the patterns and reference implementations that make secure-by-default the path of least resistance.
Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
BAE Systems is seeking an ON-SITE Principal IT Systems Security Engineer. Join our IT Operations Team and become a member of a highly productive team, where each employee has the opportunity to grow their skills and work on rewarding system and network operations projects.
Our partner is looking for a Principal Offensive Security Engineer based in the United States. As a senior technical leader, you will drive offensive security initiatives designed to strengthen product security and protect enterprise environments.
Latacora is looking for a Security Architect to serve as the technical security lead for a portfolio of clients. You’ll assess security programs, guide architecture and engineering decisions, build practical roadmaps, and connect clients with Latacora’s subject matter experts.
Build and run our application security scanning program (SAST, DAST, dependency/SCA, container and IaC scanning), tuning tools to reduce noise and surface real risk.
Design, implement, and manage security solutions, including firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms to ensure the organization's networks and systems remain secure.
We are seeking a Cyber Security Engineer to join our small but mighty team. In this role, you will take ownership of the end-to-end security architecture of our autonomous aerial platform.
Build and own deeply technical security improvements across our Cloud Infrastructure(s) and associated territory (AWS/GCP, Kubernetes, CI/CD), including shipping production changes yourself when needed.
Design, pilot, and implement logging and alerting systems to detect malicious activity on Snap Inc.'s endpoints, infrastructure, networks, and cloud environments.
Design, architect, and implement security controls and frameworks for securing Snap's backend services and cloud infrastructure.
Support the Enterprise Security Sales team in driving adoption of Datadog’s security offering within target strategic accounts. Collaborate with the broader sales team to identify and understand security requirements across Datadog’s Enterprise customer base.
Rocket Lab · 9d ago
Secure the platform end to end: nodes, clusters, pods, roles, tokens, secrets, service-to-service communication, and the supply chain.
Execute security compliance implementation and audits (e.g. DoD Cloud Computing SRG IL5/IL6, FedRAMP Class D. (Rev. 5 / CR2026), NIST 800-53, NIST 800-171/CMMC, Risk Management Framework).
Support the sales organization as a cybersecurity/GRC presales partner: attend customer and prospect meetings, present our security and compliance posture, and answer technical and control-related questions with accuracy and judgment.
Own and evolve financial services and payments compliance posture across PCI DSS, NYDFS (including 23 NYCRR 500), FFIEC guidance, and related banking/fintech regulatory expectations supporting X Money across relevant jurisdictions.
Execute security compliance implementation and audits across core frameworks including SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and the EU AI Act, including control design, mapping, gap assessment, evidence collection, and remediation tracking.
Architect, engineer, and deploy enterprise-grade IAM frameworks by utilizing advanced data engineering and programmatic automation to build resilient, high-availability identity solutions.
Lead the design and delivery of technology platforms and automated controls across cloud and on-prem environments. Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems.
Lead the design and delivery of technology platforms and automated controls across cloud and on-prem environments. Architect and implement scalable solutions for IAM, endpoint, network, and data protection systems.
Build and tune high-confidence detections across platforms such as Splunk, Microsoft Sentinel / Defender, CrowdStrike, cloud-native logs, identity telemetry, endpoint data, SaaS platforms, and developer systems.
At Root, we are reimagining insurance by building a smarter, more equitable system from the ground up. As the Staff Security Engineer, you will be the technical visionary driving security strategy across our entire enterprise.
The median Security Engineer salary in our $100k+ listings is $205,000 a year, based on 382 live USD listings. The middle half of listings pays $177,000 to $253,000. These figures cover only listings that publish a salary of $100k+ or more, so they sit above pay for Security Engineer roles overall.
Individual $100k+ Security Engineer listings range from $100,000 to $537,000 a year. The 25th percentile of listing midpoints is $177,000 and the 75th percentile is $253,000.
Median pay by level in our $100k+ listings: senior $201,000 (127 listings), lead $197,000 (12 listings). Levels with fewer than 5 listings are left out.
The companies with the most open $100k+ Security Engineer listings are NVIDIA (18 listings, median $204,000), Anthropic (16 listings, median $363,000), Jobgether (14 listings, median $189,000), Samsara (12 listings, median $198,000) and Roblox (9 listings, median $298,000).
The figures come from the salary ranges employers publish in their own job listings, collected from company career pages and applicant-tracking systems. Each listing counts once, at the midpoint of its range. Only USD listings go into the headline figures, and listings that are closed or stale are removed. The data was last refreshed on November 12, 2026.
Yes. Each listing is tagged remote, hybrid or on-site, and remote roles carry a region (US only, EMEA, APAC or global), so you can filter the live job list to the arrangement you want.
United States
Canada
