Top Remote Cyber Security Jobs in Cleveland, OH

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

Supports application security across product and engineering teams by reviewing code, configurations, pull requests, logs, and system designs; identifying and prioritizing vulnerabilities; guiding remediation; and contributing scripts, tooling, detections, tests, and secure coding practices. The role also involves vulnerability management, risk-based analysis, security communication, and collaboration across engineering, infrastructure, compliance, and product teams.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Lead and scale an AI Security incubation team to drive technical GTM, recruit and mentor principal AI security specialists, build repeatable POVs and sales playbooks, advise C-level customers on secure AI deployments (RAG, agents, prompt workflows), and channel field insights into product and engineering roadmaps while supporting high-value deals.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead large-scale collection and analysis of deep and dark web data, build and maintain production-grade automated collection systems (LLM-integrated), operate Docker/cloud-based pipelines and APIs, respond to collection failures and incidents, perform threat actor research, and apply OPSEC tradecraft while collaborating globally.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Manage security operations and lead a security engineering team defending endpoints, SaaS, infrastructure, and corporate systems. Serve as senior Incident Commander, oversee detection and response using CrowdStrike, conduct cybersecurity risk assessments, and improve vulnerability, patch, access, and configuration management. Build detection coverage across endpoint, identity, SaaS, and cloud signals while partnering with AppSec and technical leaders. Lead the company’s AI security strategy and develop specialized security capabilities.

Own the security and identity architecture for CDW’s MyCDW ServiceNow platform. Lead consolidation of Entra, Okta, and ServiceNow authentication; architect SailPoint-to-Entra IGA migration; define RBAC, lifecycle, certification, governance, and compliance controls; and guide threat modeling, monitoring, risk reduction, and remediation. Partner across technology and compliance teams, lead IAM and security engineers, manage vendors, and develop strategic roadmaps for secure, cost-effective platform transformation.

Conduct third-party security assessments, evaluate vendor controls, document risk findings, and automate governance workflows using Python and coding tools. Configure integrations across ticketing, GRC, and vendor-management platforms; develop risk dashboards and reporting; and partner with Procurement, Legal, Engineering, IT, Compliance, and Privacy. The role also supports security governance process improvements and applies frameworks including NIST, ISO 27001, SOC 2, and PCI DSS.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Lead design and implementation of secure global network infrastructure. Architect security standards, conduct threat modeling and network assessments, build security automation and tooling, integrate controls with SDN/BGP/MPLS platforms, support incident response, and mentor engineering teams to maintain resilient, observable network security posture.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Lead multi-year product strategy for non-human identity and access across MongoDB Atlas, core database, and developer platforms. Drive workload identity federation, programmatic access, AI agent authorization, and developer-first access management. Partner with engineering, UX, and GTM to validate enterprise requirements, prioritize initiatives, and measure adoption. Represent MongoDB externally and mentor PMs to elevate product quality.

Lead applied research on agentic AI for cybersecurity: develop efficient post-trained models, agent designs, and rigorous evaluation/verification. Partner with security teams to translate research into products, run experiments, and publish novel techniques.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.