Top Remote Security Engineer Jobs

Secures applications throughout the software development lifecycle by performing SAST with Fortify, code analysis with SonarQube, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD control validation. The role documents assessment findings, supports secure SDLC process design, and collaborates with developers, architects, and cybersecurity specialists. Requires an active Secret or TS clearance, application security experience, penetration testing knowledge, and CEH certification. Quarterly travel to Scott Air Force Base is required.

The role involves enhancing application security for Radar, managing security for over 1 billion API calls daily, and collaborating with customers.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Provides technical pre-sales support for video security and access control solutions. Designs and quotes integrated systems, supports RFP responses, delivers product demonstrations and training, leads architecture discussions, evaluates technical risks, and collaborates with sales teams, partners, and customers. The role also supports post-sales transitions, complex troubleshooting, technical integration, customer enablement, and demo equipment management. Travel exceeds 50% across the assigned territory.

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead design, implementation, automation, and operation of enterprise Okta identity services. Drive application onboarding, federation, lifecycle management, resiliency, monitoring, incident response, governance, and platform automation while mentoring engineers and improving security posture.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Designs and presents integrated video security and access control solutions for enterprise customers. Partners with sales teams and channel partners, conducts site surveys, proof-of-concept evaluations, technical demonstrations, training, and troubleshooting. Acts as a technical subject matter expert, aligns customer needs with product capabilities and roadmaps, and supports tradeshows and client engagements. The role requires travel exceeding 50% across local and international territories.

Leads DLP security operations across endpoint, network, SaaS, and cloud environments. Responsibilities include deploying and tuning DLP controls, investigating data exfiltration incidents, developing data classification policies, automating alert response playbooks, threat hunting for anomalous data movement, managing incident remediation, and tracking DLP effectiveness metrics. The role also supports incident response and vulnerability management and partners with stakeholders to balance security, usability, and regulatory requirements.

Designs, implements, and operates SASE and ZTNA architecture across GCCH and commercial environments. Owns identity-driven access controls, session management, telemetry, compliance mapping, dashboards, and audit evidence. Serves as the senior escalation point for incidents, performs root-cause analysis, integrates device posture and SOAR workflows, develops AI-enabled automations, collaborates with identity, network, compliance, and vendors, and mentors junior engineers.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Senior individual contributor responsible for designing and owning security engineering programs: security tooling, identity and access architecture, cloud security posture (GCP), detection engineering and SIEM operation, incident response and forensics, OAuth and third-party app governance, secrets and MFA strategy, endpoint and vulnerability management, and security automation/Infrastructure-as-Code. Mentors teammates and partners with platform engineering and IT leadership to implement controls and automation.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Customer-facing pre-sales cybersecurity engineer who performs technical discovery, assesses email security architectures, designs and presents email security solutions (SEG, API-based protections, DLP, ATP), runs demos and PoCs, collaborates with vendors, enables sales teams, and ensures smooth handoff to delivery.

Lead developer advocacy for AI and agentic security: advise security companies, accelerate NVIDIA stack adoption, guide partner integrations, map ecosystems, collaborate cross-functionally, run community events, and feed product teams with field insights.

Lead hands-on application security testing and secure code review across priority apps. Perform SAST/DAST/SCA/container scans and web/API testing, integrate automated checks into CI/CD, coach Security Champions, apply threat modeling and AI-assisted tooling, and produce clear vulnerability reports with remediation guidance to engineering and management.