Top Remote Security Engineer Jobs

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

Lead threat modeling and risk management for DigitalOcean's virtualization stack. Build frameworks and rubrics to assess hypervisor risk, propose and implement defense-in-depth mitigations, collaborate with engineering teams on remediation, mentor teams on secure design, and help oversee vulnerability management and security guidance.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Lead technical strategy and architecture for software security across Block. Design and deliver security solutions, drive Secure SDLC adoption, threat model critical systems, mentor engineers, and execute high-priority security initiatives for scalable, resilient security services and mobile/platform security.

Own product and protocol security across Jito’s Solana-based products. Responsibilities include threat modeling, secure design and code reviews, deployment hardening, internal audits, onchain monitoring, bug bounty operations, remediation tracking, AI-assisted security testing, and key and asset risk management. The role requires production software engineering experience, strong application security expertise, security automation skills, and familiarity with Web3, crypto, or DeFi.

Provides pre-sales technical support for Vectra’s cybersecurity platform. Demonstrates products, advises customers and partners, resolves technical obstacles, supports deployments and technology reviews, and develops customer relationships alongside regional sales managers. The role requires expertise in security platforms, networking, cloud security, attacker progression, incident response, and security processes, along with strong communication skills and regional travel.

Provide pre-sales technical support for regional sales teams by demonstrating Vectra security solutions, addressing customer pain points, and solving technical roadblocks. Build technical relationships with customers and partners, support technology reviews and integrations, maintain expertise in security products and the threat landscape, and collaborate on deployments, designs, releases, and customer projects. Travel within the assigned region as needed.

Twelve-week summer internship supporting application, API, and AI security testing. Responsibilities include documenting findings, researching security technologies, improving metrics and dashboards, assisting with automation, preparing technical reports, and collaborating with security and technology teams. The role is open to students pursuing cybersecurity, information technology, computer science, or related degrees who graduate in December 2027 or later.

Designs, deploys, and manages enterprise cloud security solutions across AWS and Azure. Responsibilities include automating security controls, managing AWS WAF and CDK rules, improving policies, patching vulnerabilities, implementing DevSecOps practices, assessing cloud applications and APIs, monitoring security posture, analyzing logs, triaging issues, and supporting compliance and risk initiatives.

Designs, deploys, maintains, and improves enterprise endpoint security solutions. Responsibilities include managing endpoint protection platforms, threat analysis, security event triage, vulnerability remediation, system hardening, compliance reporting, policy development, technology evaluation, project leadership, documentation, and mentoring junior staff. The role collaborates with Security Operations, IT Service teams, leadership, and vendors to strengthen protection against cyber threats.

Designs, deploys, maintains, and improves enterprise endpoint security platforms and controls. Responsibilities include threat analysis, security event triage, endpoint infrastructure tuning, vulnerability management, policy enforcement, compliance reporting, technical documentation, and technology evaluations. The role supports security projects, mentors junior staff, collaborates with IT and leadership, and helps strengthen protection against emerging cyber threats across the enterprise.

Conduct red-team assessments of formally verified systems, evaluating proofs, specifications, threat models, and trusted computing bases. Build AI-driven vulnerability discovery, triage, and exploit-generation tooling; identify and demonstrate exploitable weaknesses in software and infrastructure. Produce rigorous security reports, publish methodologies, collaborate with domain experts and third parties, and deliver engagements on fixed schedules.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Designs, engineers, and maintains SIEM data collection and security monitoring infrastructure. Develops detection use cases, dashboards, alerts, reporting metrics, and log onboarding strategies. Integrates threat intelligence and SOAR technologies, supports incident response and threat hunting, troubleshoots security systems, and escalates complex investigations. Collaborates with SOC analysts, incident response teams, executives, and cross-functional stakeholders to improve detection, automation, and enterprise security operations.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Lead the design and implementation of cloud-based identity governance and administration capabilities. Shape enterprise identity engineering strategy across human and non-human identities, support governance, privileged access, and federation platforms, and reduce security risks through access analysis, segregation of duties, and least-privilege enforcement. Automate identity processes integrated with HRIS systems and guide recommendations for improving governance and access controls.

Lead and execute Grow Therapy's multi-year Security Engineering roadmap. Build secure-by-default infrastructure (auth, authZ, logging, egress), drive data security and systematic data tagging, develop org-wide security scorecards, enable automated least-privilege and vulnerability management, and influence AI-native security and security culture across product, platform, and compliance teams.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

Designs, deploys, operates, and maintains endpoint security solutions across workstations, servers, VDI, and mobile devices. Responsibilities include managing CrowdStrike Falcon, Symantec DLP, Skyhigh, and Zscaler technologies; monitoring telemetry and sensor health; troubleshooting endpoint issues; executing upgrades and migrations; supporting SIEM/SOAR integrations, malware coverage, automation, documentation, and security roadmap initiatives.

Designs and operates identity and access management systems across human, service, workload, and AI identities. Owns lifecycle automation, data-driven access models, time-bound entitlements, identity-as-code, cloud IAM, and AI-powered access reviews. Partners with Engineering, IT, and Compliance to reduce unnecessary access, support audits, and respond to identity-related incidents. Requires strong software engineering skills and hands-on experience with Okta, enterprise SaaS provisioning, AWS IAM, and AI or LLM tooling.

Serve as the senior security advisor embedded with product and engineering teams to design security into features, influence senior stakeholders, mentor junior staff, coordinate with security and privacy (DPO) teams, and produce customer trust materials and questionnaire knowledge bases while staying current on AI-related risks.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.

Designs and scales enterprise security across IAM, corporate SaaS, endpoints, and infrastructure. Responsibilities include automating joiner-mover-leaver workflows, access reviews, zero-trust controls, SaaS security posture management, endpoint protections, vendor risk assessments, and AI-powered security automation. The role partners with IT, Legal, HR, and Compliance on security frameworks, documentation, audits, and strategic roadmap initiatives.