Top Remote Security Engineer Jobs

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Design and build security features across product, cloud, and infrastructure. Anticipate vulnerabilities, implement secure defaults, enable developer-friendly security, and ship robust protections for code, agents, and tooling.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Build and maintain data pipelines, metrics, and dashboards to quantify consumer product security risk. Perform hands-on analytics into device and authentication signals, shape risk measurement strategy, partner with product and security teams, and influence leadership reporting. Drive a unified, scalable data foundation that enables cross-team alignment and proactive risk detection.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Manage and configure SAP security and GRC controls, monitor critical access, design SoD matrices and mitigating controls, support user provisioning, troubleshoot security issues, implement continuous monitoring and audit controls, and manage security changes across the SAP landscape.

Operate and enhance application security tooling, author automation (Python), run and tune authenticated/unauthenticated DAST scans for web apps/APIs, validate and triage vulnerabilities using OWASP standards, track and verify remediation, ensure compliance with HIPAA/SOC II/NIST/FedRAMP, and build reporting solutions for leadership.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Provide Level III administration, troubleshooting, and recovery for a large Global Active Directory environment. Configure and diagnose domain infrastructure (DNS, DHCP, ADLDS, ADFS, FIM Sync), Windows servers, RADIUS/NPS, Office365/Azure identity integration, and federation protocols. Support M&A AD activities, perform outage communications, rotate on-call shifts in a 24x7 operations center, and apply remediation procedures for hardware/software failures.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Perform thorough WordPress malware cleanup, remove injected scripts, resolve Google Search Console penalties, implement firewall and malware scanning protections, optimize PHP and databases, and accelerate page load speeds while documenting remediation and communicating clear project updates.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Senior technical responder for application security incidents: lead escalations, analyze attacks and logs, design/implement custom security policies, perform forensics, automate ASR workflows, mentor engineers, and collaborate with customers and cross-functional teams to remediate threats and improve products.

Build reliable, scalable data pipelines and data products to surface security, fraud, and infrastructure risks. Use big-data technologies (Spark, Presto, Flink, Kafka) and advanced SQL to ETL, model, maintain datasets, and enable analytics for security teams. Partner cross-functionally and lead complex system design and implementation.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Architect and implement system-level security for Open Connect edge and gaming appliances across hardware (FPGA, BMC, BIOS/UEFI), kernels and dual OS (FreeBSD/Linux). Improve platform integrity (measured/secure boot, BMC controls), triage system-level vulnerabilities, build low-level tooling and automation, and partner cross-functionally and with vendors to harden binary ingestion and execution.

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.

Own protocol and cryptographic foundations for Netflix Open Connect edge appliances. Design and implement security primitives, optimize crypto/transport for performance, build DoS mitigations, conduct vulnerability research, and partner cross-functionally to deploy end-to-end security controls across delivery infrastructure.

Lead product security for the platform: prioritize threats, design and architect defenses, embed security early in designs, build platform-level safe defaults, find vulnerabilities in code, and raise team-wide security capability without becoming a bottleneck.

Design and deliver integrated access control, video surveillance, and visitor management systems for commercial and data center projects. Create layouts, schematics, and documentation using CAD/Revit, manage multiple projects, collaborate with clients and vendors, support business development, and stay current with industry technologies.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.