Top Remote Security Engineer Jobs

Implements and operates application security controls, scanners, governance processes, and cloud infrastructure for global digital brands. Develops APIs, scripts, Kubernetes clusters, and infrastructure-as-code automation; conducts application security reviews, threat modeling, adversarial testing, and vulnerability assessments. Partners with development and operations teams to communicate findings, guide remediation, and promote secure software development practices across cloud-native environments.

Implements and operates application security controls, scanners, governance processes, and cloud infrastructure. Automates security reporting and controls through scripts and APIs, maintains Kubernetes environments, conducts threat modeling and adversarial testing, reviews applications and releases, and guides development teams in remediating vulnerabilities and following software security best practices.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Implements and maintains application security controls, tools, governance processes, and cloud infrastructure for global digital operations. The role assesses vulnerabilities, conducts security reviews, threat modeling, and adversarial testing, and supports remediation with development teams. It also develops APIs, scripts, automation, CI/CD integrations, and Kubernetes-based infrastructure using infrastructure as code. The engineer guides teams on software security best practices and operates security services supporting enterprise production workloads.

Leads end-to-end security architecture for distributed storage platforms and AI-driven workloads. Responsibilities include threat modeling, SSDLC, IAM integration, RBAC and ABAC authorization, encryption and key management, multi-tenant isolation, secure APIs and protocols, observability, anomaly detection, compliance, and cross-functional technical leadership. The role partners with storage, protocol, control-plane, and platform engineering teams while mentoring engineers and influencing secure system design.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Monitors and investigates security alerts across SIEM, endpoint, identity, cloud, email, and network environments. Conducts threat hunting, incident response, containment, remediation, vulnerability management, and post-incident reviews. Develops playbooks, automation, integrations, detections, and infrastructure-as-code deployments. Uses and tunes agentic SOC tooling while maintaining human oversight. Coordinates with technical and business teams, participates in a 24/7 on-call rotation, mentors junior engineers, and improves security operations through metrics and continuous improvement.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, improve vulnerability remediation times, build scalable automation, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support incident response. The role requires expertise in AWS, vulnerability tooling, SAST, DAST, SCA, security automation, and AI/LLM-assisted security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, build scalable automation, reduce remediation timelines, guide engineering teams, mentor security engineers, communicate risk, investigate critical vulnerabilities, and support on-call response. The role requires extensive cloud and security engineering experience, strong AWS skills, programming proficiency, vulnerability management expertise, and knowledge of SAST, DAST, SCA, and AI-enabled security workflows.

Lead Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Set technical direction, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, communicate risk to leadership, and provide on-call support. The role requires broad enterprise security experience, cloud expertise, secure development testing knowledge, and practical AI/LLM security workflow experience.

Lead the technical strategy and continuous improvement of Samsara’s application security and vulnerability management programs. Drive vulnerability remediation and reduce MTTR across cloud, firmware/IoT, and corporate systems. Build scalable automation, guide secure design and remediation, mentor engineers, assess risks during security incidents, communicate tradeoffs to leadership, and support critical vulnerability response on call.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Lead DigitalOcean’s AI security strategy, governance framework, threat modeling, and multi-year roadmap. Partner with security, engineering, and data science teams to secure AI products, deploy guardrails, conduct adversarial testing and red teaming, and monitor AI/ML systems. Provide architectural reviews, executive risk briefings, and guidance on emerging threats including prompt injection, model supply-chain risks, agentic AI, and data exfiltration.

Lead DigitalOcean’s AI security strategy, governance framework, roadmap, and organizational programs. Build and operationalize AI/ML security controls, tooling, guardrails, and automation; conduct threat modeling, adversarial testing, and AI red teaming. Review AI architectures, guide high-risk product decisions, monitor deployed models, and address risks involving RAG, agents, model supply chains, and prompt injection. Represent AI security to executives and external communities while translating emerging research and threats into engineering guidance and policy.

Lead DigitalOcean’s AI security strategy, governance framework, and multi-year roadmap. Secure AI/ML systems across data ingestion, training, model serving, RAG, agents, and monitoring. Conduct threat modeling, adversarial testing, AI red teaming, and security reviews; develop guardrails and automation with engineering teams. Advise executives and the board on AI risk, define organizational controls, and guide responses to emerging threats including prompt injection, model supply-chain risks, and AI-enabled social engineering.

Lead DigitalOcean’s AI security strategy, governance framework, and multi-year roadmap. Secure AI/ML systems across data ingestion, training, model serving, RAG, agents, and monitoring. Conduct AI red teaming, threat modeling, security reviews, and adversarial testing, while building defensive tooling and guardrails. Advise executives and the board on AI risk, guide engineering teams, and define organizational policies for responsible AI security.

Lead DigitalOcean’s AI/ML security strategy, architecture, governance, and multi-year roadmap. Build security controls, guardrails, tooling, and automations; oversee AI red teaming, adversarial testing, threat modeling, and model monitoring. Review AI product architectures, guide high-risk decisions, establish responsible AI policies, and brief executives and the board on AI security risks. Serve as the internal expert and external representative on emerging AI security topics, including agentic AI, model supply chains, prompt injection, and data integrity.

Partners with sales executives to provide technical pre-sales support, lead proof-of-concept processes, deliver customer presentations, architect cloud security solutions, and help close opportunities. Maintains product expertise, supports events and technical working sessions, updates CRM records, collaborates with sales and engineering, and contributes to revenue targets. Requires extensive sales engineering and cloud security experience, strong presentation skills, and familiarity with major cloud platforms and security solutions.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.