Top Remote Security Engineer Jobs

The Product Security Engineer secures Superhuman’s products and AI systems across the software development lifecycle. Responsibilities include threat modeling, design reviews, secure code reviews, manual testing, vulnerability mitigation, security tooling and automation, bug bounty program improvements, and AI-based security tools. The role partners with engineering teams, communicates security risks and trade-offs, and helps establish secure-by-default platforms and identity models.

Lead enterprise security architecture across endpoint, identity, network, cloud, and data. Define controls, review major initiatives, automate control deployment (IaC/PaC), mentor engineers, and drive zero-trust and cloud security strategy at scale.

Build and refine security detections, logging, telemetry, SIEM pipelines, and incident response capabilities across cloud, corporate, and SaaS environments. Conduct threat hunting, threat modeling, alert triage, and response engineering. Develop automation and AI-assisted security tooling, maintain runbooks and documentation, participate in on-call rotations, and collaborate with engineering and business teams on security initiatives.

Designs and supports secure identity and access management solutions within the Domain Services and Privileged Access Management team. Partners with IT and security stakeholders, mentors teams on agile engineering, testing, source control, CI/CD, and DevSecOps practices, and improves IAM system availability and resiliency. The role requires expertise in system administration, Active Directory, PAM, authentication integration, cloud concepts, security frameworks, and infrastructure architecture.

Manage HPE’s enterprise vulnerability management program by scanning infrastructure, cloud, applications, endpoints, containers, and networks; validating and prioritizing findings; coordinating remediation; monitoring emerging threats; and reporting risk metrics to leadership. The role administers vulnerability platforms, supports audits and compliance, integrates findings into application security workflows, and develops automation and AI-driven capabilities to improve vulnerability analysis and remediation efficiency.

Own internal offensive security assessments across applications, APIs, cloud infrastructure, and corporate systems. Plan and execute penetration tests, validate vulnerabilities safely, review source code, and partner with engineering teams through remediation and retesting. Build automated security testing tools and workflows, lead adoption of AI-assisted offensive security capabilities, support third-party testing, improve detection and incident response, and participate in on-call responsibilities.

Lead product security incident response for post-release vulnerabilities, including deep investigations, exploit analysis, CVE assignment, CVSS scoring, coordinated disclosure, remediation tracking, and postmortems. Coordinate engineering, product, release, security, and external research teams during significant security events. Improve secure development practices and vulnerability response processes across the SaaS platform while participating in on-call coverage.

Lead product security incident response for post-release vulnerabilities, including deep-dive investigations, exploit analysis, remediation coordination, CVE assignment and disclosure, advisory review, and incident leadership. Partner with engineering, product, release, customer-facing, and external security teams to reduce exposure windows, verify fixes, conduct postmortems, and improve secure development processes and PSIRT capabilities.

Leads product security incident response for post-release vulnerabilities, coordinating investigations, remediation, release fixes, CVE scoring and coordinated disclosure. Partners with engineering, product, release, customer-facing, and external security teams during significant incidents. Conducts exploit analysis, validates mitigations, authors postmortems, and improves secure development practices and SDLC processes.

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Build production security tooling and infrastructure using Terraform, Bash, Go, and Python. Partner with product engineers to design secure features, review Terraform and IAM configurations, automate security workflows, and advise teams on pragmatic vulnerability remediation. The role emphasizes developer enablement, scalable security libraries and tools, cloud security, containerization, and responsible AI use.

Leads the design and delivery of cloud and on-premises security platforms, automated controls, IAM, endpoint, network, and data protection solutions. Develops automation for vulnerability management, detection, and compliance monitoring; advises on incident response and forensics; embeds security into enterprise platforms; evaluates security technologies; establishes engineering standards; and supports security tools through investigation and troubleshooting.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS.

Serve as a hands-on technical security leader addressing complex product, infrastructure, architecture, and risk challenges. Evaluate security across compute, network, and storage; influence cross-functional decisions; lead M&A diligence and partner risk assessments; mentor senior individual contributors; and build a technical security community across product, enterprise, and security operations.

Own Cleo’s application and product security program across SaaS and customer-hosted products. Lead SSDLC practices, threat modeling, security tooling, vulnerability management, penetration testing, coordinated disclosure, CVE publication, and NIST CSF controls. Define product security standards, roadmap, secure defaults, access controls, and customer-facing advisories. Partner with engineering, product, architecture, and customers while guiding security engineers and consultants. Also establish protections for LLM applications, AI agents, and AI-assisted development workflows.

Build, test, automate, and deploy security controls for AWS and Azure cloud workloads. Assess cloud security posture using CSPM tools, integrate controls into CI/CD and infrastructure pipelines, validate compliance, and support production readiness. Collaborate with cloud architects, SOC, product, infrastructure, and DevOps teams; document solutions, analyze vulnerabilities, guide junior engineers, and contribute to security roadmap planning.

Build and scale Fieldguide’s security function across secure software design, identity and secrets management, cloud and Kubernetes security, and agentic AI security. Partner with engineering and product teams to identify risks, develop secure frameworks, harden cloud controls, enforce AI-agent permissions and tenant isolation, and promote secure development through design reviews and coaching.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Build and operate central security systems, automation, tooling, and controls across cloud infrastructure, identity, access, products, partners, and vendors. Develop AI-assisted security workflows, lead external assessments through verified remediation, identify and validate vulnerabilities, guide engineering teams, and participate in incident response. The role requires production security engineering experience, strong programming skills, cloud security expertise, and fintech, payments, or crypto experience.

Conduct application security assessments, threat modeling, code reviews, and manual penetration testing across web applications, APIs, cloud services, appliances, and AI-enabled features. Coordinate external penetration tests, validate vulnerabilities, track remediation, and verify fixes. Improve SAST, SCA, secrets detection, container scanning, SBOM, supply-chain, and CI/CD security workflows while advising Engineering on secure design and risk prioritization.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Owns enterprise AI security assessment, architecture, and control programs. The role evaluates AI systems, vendors, platforms, and shadow AI; designs secure architectures, guardrails, identity models, sandboxes, gateways, and runtime controls; and develops detection and response capabilities for prompt injection, jailbreaks, data leakage, and tool misuse. The engineer partners with governance, identity, platform, engineering, and security operations teams, advises senior leaders, drives remediation, and mentors security professionals.

Own and scale Jellyfish’s security engineering program, including strategy, architecture, secure SDLC governance, AI security, threat modeling, vulnerability remediation, incident response, penetration testing, and bug bounty programs. The role combines hands-on software development with executive advising, cross-functional leadership, mentorship, and security risk management across SaaS infrastructure and customer-facing AI products.