Top Remote Cyber Security Jobs in Cleveland, OH

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.

Own product and application security for a multi-tenant insurance platform. Responsibilities include secure SDLC, security-focused code review, application security, tenant isolation, cloud security posture, supply-chain controls, penetration testing, threat modeling, vulnerability management, incident response, and SOC 2 compliance readiness.

Owns application-layer security across the platform by building and tuning SAST, DAST, SCA, container, and IaC scanning programs. Triages vulnerabilities from scans, penetration tests, and bug bounties; partners with engineers on remediation; performs threat modeling; maintains secure coding standards; supports incident response; coordinates penetration testing; and reports security metrics. Requires strong application security expertise, cloud and CI/CD security experience, and effective cross-functional communication.

Lead the architecture, security, and operation of Maestro’s multi-tenant AI platform on private GKE. Responsibilities include Kubernetes runtime isolation, identity and credential security, service mesh trust, Terraform infrastructure, fleet scaling, CI/CD, observability, auditability, human approval workflows, and governed agent integrations. The role also sets technical direction, mentors engineers, and partners across Product, Security, and Leadership to deliver secure, reliable distributed systems at scale.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Provides vulnerability management and continuous monitoring support for regulated cloud environments. Responsibilities include investigating vulnerabilities, managing scans and false positives, creating POA&Ms, communicating alerts and remediation strategies, configuring scanning tools, automating repeatable tasks, documenting findings, coordinating escalations, and supporting compliance frameworks such as FedRAMP. The role also liaises with clients, SRE teams, auditors, and internal security operations personnel.

Build and operate enterprise AI infrastructure for security teams, including model gateways, agent workflows, retrieval systems, evaluation, observability, and security guardrails. Drive adoption across detection, incident response, threat intelligence, vulnerability management, GRC, and security engineering. Develop production AI applications, establish governance and standards, measure impact, teach teams, and lead technical change through influence as a senior individual contributor.

Design and implement security across infrastructure, applications, data, and AI systems. Own authentication, authorization, tenant isolation, secure log ingestion and querying, and AI security risk mitigation. Lead security incident response and postmortems, establish practical security practices, and partner with engineering to integrate security into development. The role requires application or infrastructure security experience, knowledge of OWASP vulnerabilities, and experience securing distributed systems and APIs.

Leads enterprise security reviews, threat modeling, architecture assessments, governance, and control development for AI, generative AI, machine learning, LLM, RAG, and AI-agent solutions. Defines security standards and guardrails, evaluates platforms and vendors, advises cross-functional stakeholders, and supports responsible AI adoption while managing cybersecurity, privacy, regulatory, and operational risks.

Own strategy and roadmap for KeeperPAM across privileged access, secrets management, secure remote access, endpoint privilege, discovery, and machine identity. Translate customer and technical needs into requirements, prioritize cross-product initiatives, partner with Engineering on integrations and architecture, conduct market analysis, define success metrics, and support go-to-market execution. The role requires strong PAM or related cybersecurity expertise, technical fluency in APIs and cloud-native DevOps environments, and effective collaboration with customers and cross-functional teams.

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Designs and reviews secure architectures for cloud, applications, data, APIs, identity systems, AI/ML implementations, and third-party integrations. Leads threat modeling, security standards, reference architectures, risk assessments, and compliance alignment across AWS, Azure, and GCP environments. Protects traveler and payment data, defines AI and identity security guardrails, supports vendor due diligence, and advises engineering, product, and executive stakeholders on practical risk mitigation.

Leads Insurity’s enterprise cybersecurity, information security, privacy, HIPAA, AI governance, risk, compliance, and incident response programs. The CISO sets security strategy, advises executives and the Board, oversees cloud, application, product, and infrastructure security, manages audits and regulatory obligations, directs crisis response, builds the security organization, and partners with customers, regulators, vendors, and cross-functional leadership to protect company and customer data.

Leads Finance of America's AI security and safeguards program, including strategy, governance, red teaming, model and application security testing, threat detection, monitoring, and control validation. Maintains the enterprise AI inventory, evaluates use cases, integrates security requirements into procurement and development processes, and partners with legal, compliance, risk, and security teams. Reports AI risk posture to executives and boards, supports audits and regulatory examinations, and builds a team while remaining hands-on.

Owns the security posture and architecture of Akamai’s globally distributed AI inference platform. Leads threat modeling, security standards, design reviews, cloud-native and application security, multi-tenant isolation, compliance readiness, incident response, and defenses against AI-specific threats such as prompt injection, model extraction, data poisoning, and adversarial attacks.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Conduct continuous manual penetration testing across network, web application, cloud, and social engineering attack surfaces. Pursue findings through post-exploitation, lateral movement, privilege escalation, and business-impact validation. Communicate results to technical and non-technical clients, lead debriefs, improve team tooling, direct AI and automation, mentor junior testers, and collaborate with R&D to operationalize repeatable techniques.

Leads enterprise AI security and MLSecOps programs, designing secure AI architectures, threat models, controls, and operating models. Advises executives on AI risk, compliance, and transformation roadmaps; leads complex client engagements and multiple security projects. Embeds security into MLOps, DevSecOps, and CI/CD workflows, drives adversarial testing and continuous assurance, develops consulting offerings and proposals, mentors teams, and establishes enterprise standards and guardrails for AI and generative AI systems.

Own cloud security across AWS and Azure, including identity, network, application, container, data, and AI security. Build policy and infrastructure controls as code, integrate security into CI/CD, protect regulated health data, and manage detection, incident response, vulnerability remediation, and compliance. The role also develops AI security guardrails and coaches engineering teams while operating production security controls and supporting on-call responsibilities.

Owns vulnerability management, bug bounty, CSPM, agentic red-team, and continuous penetration-testing operations. The role triages and validates findings, prioritizes risk, coordinates remediation, verifies fixes, manages cloud and network security controls, and reports program metrics. It also evaluates and deploys emerging AI-driven security tooling, automates security workflows, supports perimeter security, and partners with engineering, infrastructure, GRC, and incident response teams.

The Application Security Engineer establishes security standards, performs penetration testing and secure code reviews, conducts threat modeling, and partners with developers to remediate vulnerabilities. The role manages WAFs, CI/CD security, identity and access controls, software supply chain security, cloud architecture reviews, AI-assisted development risks, privacy, payment security, and incident response. It also governs the secure SDLC, vulnerability management, secrets protection, API security, and security tooling across development teams.

Lead information security operations, GRC, incident readiness, and ISO 27001/42001 management systems. Own risk, controls, audits, identity, vendor and data-protection governance, while providing technical assurance across applications, cloud infrastructure, IAM, CI/CD, and AI systems. Build detection and response capabilities, lead investigations, establish AI security controls, and report material risk and remediation progress to leadership.

Lead cybersecurity consulting and engineering engagements securing OT and IT environments for water, wastewater, and environmental infrastructure clients. Conduct ICS, SCADA, network, architecture, risk, and compliance assessments; design secure IT/OT architectures; develop governance, incident response, security plans, and improvement roadmaps; evaluate security technologies; and support proposals and client presentations. Mentor junior staff and advise on cloud, IoT, AI, and critical infrastructure security.

Own and scale application security across Redpanda’s C++ engine, Go control plane, Console, and Rust/Go SDKs. Responsibilities include threat modeling, secure design reviews, SAST/SCA/DAST, fuzzing, secure code review, PSIRT and vulnerability disclosure, software supply-chain security, security release gates, and security champions. The role partners closely with engineering to improve secure development practices, address vulnerabilities, and protect authentication, authorization, encryption, audit logging, and multi-tenant isolation.

Performs cloud security engineering across AWS and GCP, including system hardening, patching, vulnerability remediation, compliance scanning, security tool management, incident response, and cloud operations. Troubleshoots Linux, Windows, network, application, and identity issues; supports FedRAMP, FISMA, and NIST 800-53 requirements; documents procedures and incidents; contributes to automation; mentors junior engineers; and participates in a 24×7 on-call rotation.