Top Remote Security Engineer Jobs

Manage and optimize cloud security posture across GCP and AWS, triage and remediate alerts/vulnerabilities, harden Kubernetes environments, implement secure baselines and guardrails, support secure AI/LLM integrations, produce compliance evidence, and participate in cloud incident response.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Lead threat modeling, secure design reviews, penetration testing and deep code review for Unity products. Build and operate security automation and AI-assisted tooling, secure AI/LLM integrations and agentic systems, drive remediation with engineering teams, investigate AppSec incidents, and contribute to the secure development lifecycle and compliance.

Lead application security initiatives across the SDLC: perform threat modeling, secure design reviews, remediation guidance, third-party pen test management, develop security tooling, advise leadership on risks, mentor teammates, and improve application security maturity and training.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Design and build security features across product, cloud, and infrastructure. Anticipate vulnerabilities, implement secure defaults, enable developer-friendly security, and ship robust protections for code, agents, and tooling.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Manage and configure SAP security and GRC controls, monitor critical access, design SoD matrices and mitigating controls, support user provisioning, troubleshoot security issues, implement continuous monitoring and audit controls, and manage security changes across the SAP landscape.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Provide Level III administration, troubleshooting, and recovery for a large Global Active Directory environment. Configure and diagnose domain infrastructure (DNS, DHCP, ADLDS, ADFS, FIM Sync), Windows servers, RADIUS/NPS, Office365/Azure identity integration, and federation protocols. Support M&A AD activities, perform outage communications, rotate on-call shifts in a 24x7 operations center, and apply remediation procedures for hardware/software failures.

Perform application-security engineering: run SAST/DAST scans, triage and remediate vulnerabilities, integrate Fortify/JFrog Xray/OWASP ZAP into CI/CD, support software-supply-chain/SCA efforts, and collaborate with developers to document and resolve security findings.

Design and implement product-level authentication, authorization, multi-tenant isolation, and privacy-preserving data lifecycles. Ship security-sensitive changes end-to-end, own application and API security, threat modeling, telemetry for security events, and integrate conservative partner security controls.

Perform thorough WordPress malware cleanup, remove injected scripts, resolve Google Search Console penalties, implement firewall and malware scanning protections, optimize PHP and databases, and accelerate page load speeds while documenting remediation and communicating clear project updates.

Lead product security for the platform: prioritize threats, design and architect defenses, embed security early in designs, build platform-level safe defaults, find vulnerabilities in code, and raise team-wide security capability without becoming a bottleneck.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.