Top Remote Security Engineer Jobs

Designs and improves security controls across software, applications, CI/CD workflows, and AWS infrastructure. Strengthens monitoring, detection, and incident response; supports SOC 2 and ISO audits; and advises Engineering, Sales, Legal, and enterprise customers on security architecture and compliance. The role requires hands-on cloud security expertise, application security knowledge, strong communication, and the ability to lead customer security reviews and technical discussions.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Lead infrastructure security for GitLab’s FedRAMP and federal cloud environments. Set technical direction, architecture, security automation, and compliance patterns; own security posture; lead threat modeling, security reviews, continuous monitoring, and authorization-impacting initiatives. Partner with SRE, engineering, compliance, and leadership to drive remediation and roadmap decisions. Apply AI to constrained security workflows, mentor engineers, and influence security practices across GitLab offerings.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Assess product and feature security risks through threat modeling, secure architecture reviews, and vulnerability remediation guidance. Partner with product managers, designers, and engineers across the technology stack; promote security culture through training, mentoring, and internal security activities; oversee security debt and explain vulnerability impacts. Build security tooling, automate security practices, develop secure coding patterns, and integrate security tools into engineering workflows.

Assess product and software architecture for security risks, develop threat models, guide vulnerability remediation, and promote secure design practices. Partner with product and engineering teams across the technology stack, provide security training and mentorship, oversee security debt, and build tooling and automation that integrate security into development workflows.

Own vulnerability management across endpoints, servers, and cloud infrastructure; harden AWS environments; improve identity management; support application security scanning, secure code reviews, and threat modeling. Triage security tickets and incidents within SLAs, track remediation, implement security controls, support audits, and lead cross-functional security initiatives with engineering, IT, and compliance.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Develops and strengthens threat detection, response, and remediation capabilities for CrowdStrike infrastructure. Responsibilities include researching attacker techniques, creating network and host-based detections, implementing security analytics and automation, investigating and remediating threats, supporting cloud security across major providers, tracking operational metrics, and collaborating on complex cross-functional programs. The role requires expertise in SIEM/SOAR technologies, cloud-native systems, programming, operating systems, networking, web security, and security engineering principles.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Leads application security, vulnerability management, threat detection, AI-driven security automation, and security engineering. Administers SAST, DAST, SCA, SIEM, EDR, IAM, and cloud security platforms; develops MITRE ATT&CK-mapped detections; investigates Tier 2/3 incidents; builds Python-based automation and AI agent integrations; supports architecture reviews, penetration testing, policy development, threat intelligence, compliance, and security reporting.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Design and build automated compliance engineering systems: continuous evidence collection and control monitoring, integrate cloud and identity tooling, apply LLMs/agents for validation, lead auditor engagements for certifications (ISO, SOC2, CSA STAR), drive remediation with stakeholders, and author compliance documentation and strategy.

Lead enterprise security architecture across endpoint, identity, network, cloud, and data. Define controls, review major initiatives, automate control deployment (IaC/PaC), mentor engineers, and drive zero-trust and cloud security strategy at scale.

Lead design, deployment, and optimization of Cortex XSIAM detections and analytics. Develop XQL detections and threat hunts, build automated response playbooks, integrate security telemetry (endpoint, network, cloud, identity), collaborate with SOC and incident responders, mentor staff, and improve detection fidelity and MTTR at enterprise scale.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Lead architecture and implementation of internal AI security across agentic tools, LLMs, and RAG pipelines. Threat model AI surfaces, define governance and enforceable controls, partner on AI threat research, modernize cyber defense with AI, and mentor engineers to deliver production-grade security solutions.

Lead design and implementation of secure global network infrastructure. Architect security standards, conduct threat modeling and network assessments, build security automation and tooling, integrate controls with SDN/BGP/MPLS platforms, support incident response, and mentor engineering teams to maintain resilient, observable network security posture.