Top Remote Security Engineer Jobs

Design, build, and operate secure cloud CI/CD pipelines and automation (infrastructure as code) to support cloud deployments. Partner with InfoSec, architecture, and engineering to enforce identity and non-human identity governance, implement IAM integrations, secrets management, and automated guardrails. Troubleshoot production pipeline issues, develop tools to reduce errors, and research technologies to improve DevSecOps effectiveness.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform guided audits of smart contracts, blockchain protocols, and dApps to identify and remediate vulnerabilities. Contribute to security tooling and research, explore attack vectors, and support process and methodology improvements under senior guidance.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Design and build real-time security detection engines and streaming analytics using Apache Flink and Kafka. Develop high-performance security APIs and microservices in Go and Node.js, architect Kubernetes-based security solutions, and build petabyte-scale data pipelines. Lead technical design, collaborate with security teams, and mentor junior engineers.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Own the organization’s application security posture, partnering with engineering and IT on secure coding, vulnerability management, penetration testing, security architecture, and remediation. Support audits, risk assessments, SOC 2 compliance, incident and breach investigations, bug bounty programs, and employee security training. The role is fully remote but requires a final in-person interview with company-paid travel.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

The role involves enhancing application security for Radar, managing security for over 1 billion API calls daily, and collaborating with customers.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Designs and implements security controls across cloud platforms, operating systems, Kubernetes, networks, and CI/CD. Audits infrastructure for weaknesses, develops security and privacy improvements, performs threat modeling, and drives remediation. The role includes software development, infrastructure security, incident containment, and technical security analysis while collaborating with engineering teams in a distributed startup environment.

Customer-facing cloud security presales engineer who consults with executives and security teams, develops security services and lab-based use cases, educates sales, creates collateral, and stays current on security technologies and frameworks to support sales engagements.

Lead design and implementation of enterprise IAM capabilities (IGA, AM, PAM). Build SSO/MFA, RBAC/ABAC, lifecycle provisioning/deprovisioning, privileged account management, integrations with cloud and on‑prem, scripting automation, directory services management, and IAM monitoring and incident response.

Hands-on Senior Security Engineer to design, implement, and tune Microsoft 365 data protection across SharePoint, OneDrive, and Teams. Configure DLP, retention and classification labels, reduce oversharing risk, validate business use cases, and collaborate with end users to align security controls with business needs.

Pre-sales solution engineer for MuleSoft on Salesforce National Security team supporting US Intelligence customers. Perform technical discovery, demos, POCs, workshops, architecture recommendations, and respond to RFIs/RFPs. Translate technical solutions to business outcomes, partner with sales, and maintain product/certification knowledge. Role requires security clearance and US citizenship, with travel within the U.S.

Apply to join Galaxy Ventures' invite-only Talent Network for DevOps, SRE, QA, and Security professionals. Upon acceptance, your profile may be discreetly shared with portfolio companies for relevant roles, and you'll receive invitations to exclusive networking events. Participation is confidential and non-binding.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Lead Security Engineer responsible for designing and implementing security strategy across cloud (GCP), container (Docker), CI/CD, and application security. Perform threat modeling, penetration testing, vulnerability management, incident response, and ensure compliance (HIPAA, SOC-2, PCI-DSS). Initially hands-on, then lead and mentor a team of 2–8 engineers while collaborating with product teams and reporting to the CTO.

Design, build, and scale HSM-backed cryptographic and key-management services for large-scale cloud environments. Implement PKI, TLS, client-side encryption, TEEs, and Confidential VMs. Integrate identity (OAuth/SAML/Keycloak) and secure Google Workspace services. Ensure cryptographic lifecycle, compliance (FIPS), high availability, and support secure deployments across cloud APIs, OS, and hardware.

Manage and optimize the SIEM/SOAR platform: ingest/normalize logs, build integrations and automation, tune detections, support SOC investigations, create dashboards/reports, and improve platform performance and data fidelity.

Design, implement, and automate cloud security controls (primarily AWS, with GCP work) using code (Python, Go) and IaC (Terraform). Build authorization and JIT access systems, harden containers and CI/CD pipelines, integrate data classification with access controls, automate security operations and incident response, and partner with engineering to embed HIPAA-compliant, secure-by-design practices.