Top Remote Security Engineer Jobs

Embed security throughout the software development lifecycle by conducting code reviews, identifying vulnerabilities, implementing SAST, DAST, SCA, and CI/CD security controls, and improving application and cloud security. Partner with engineering teams to design secure systems, address authentication, authorization, and cryptographic risks, and reduce production risk. The role also involves security automation, offensive security collaboration, and communicating security guidance to technical and non-technical audiences.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Secure Windows products and devices through security design and code reviews, penetration testing, vulnerability research, fuzzing, and mitigation development. Build reusable security-review tools, identify vulnerabilities in operating-system features and native applications, investigate attack vectors, and collaborate with Windows engineering teams to implement scalable defenses. The role also involves engaging with external security researchers and communicating the business value of security investments.

Designs and operates controlled cyber-capability evaluations for frontier AI models and agentic systems. Builds vulnerable applications, cyber ranges, exploit-development targets, and evaluation harnesses; runs experiments; collects telemetry; analyzes model behavior and evaluation artifacts; and documents security findings. The role also develops sandboxing, containment, access, and secrets-management controls while collaborating with red-team operators, researchers, engineers, and Responsible AI stakeholders.

Designs and maintains security controls for AI platforms, data environments, applications, and cloud infrastructure supporting DHS OIG. Responsibilities include RBAC, encryption, logging, SIEM integration, security monitoring, vulnerability assessments, penetration testing coordination, secure code review, ATO support, NIST and FedRAMP compliance, incident response, forensic analysis, and security documentation. The role requires Azure cloud security expertise, federal cybersecurity experience, and the ability to obtain DHS/EOD clearance.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Supports cybersecurity operations, incident response, vulnerability management, remediation tracking, security project execution, governance, compliance, reporting, and dashboard development. The role coordinates with technical and business stakeholders to investigate alerts, validate remediation, support audits, maintain security documentation, and improve security processes. Requires at least three years of relevant technical or information security experience, with preferred experience in CrowdStrike, Zscaler, Microsoft O365, SIEM, GRC, and security certifications.

Maintains security infrastructure, firewalls, PKI, access controls, vulnerability management, incident response, compliance documentation, and threat detection systems. Uses AI-powered SIEM, EDR, UEBA, and SOAR tools to automate security operations and identify emerging threats. Develops policies based on NIST, FISMA, PCI, PII, and CJIS requirements; performs risk assessments, system hardening, and security training. Collaborates with IT teams and evaluates AI/ML security, privacy, and supply chain risks.

Architect, deploy, configure, administer, and maintain Splunk instances for clients and internal teams. Develop security use cases, configure alerts, evaluate and prioritize security data sources, and guide log collection and forwarding to SIEM platforms. Collaborate with clients, SOC analysts, and project coordinators, participate in project meetings, and support a rotating on-call schedule.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Leads cybersecurity and site reliability engineering for manufacturing, factory test, server validation, and rack-level environments. Designs secure network architecture, firewall policies, segmentation, access controls, and Zero Trust implementations. Administers Fortinet, Arista, VMware, server, SAN, backup, and disaster recovery infrastructure. Oversees vulnerability management, incident response, compliance, monitoring, troubleshooting, automation, documentation, production support, and technical mentorship.

Leads cybersecurity, network security, and site reliability engineering across manufacturing and engineering environments. Designs secure infrastructure, manages Fortinet firewalls, Arista networks, VMware platforms, servers, SAN storage, backups, and disaster recovery. Oversees vulnerability management, incident response, compliance, infrastructure hardening, monitoring, troubleshooting, documentation, automation, and production incident escalation. Provides technical leadership, mentoring, and security architecture guidance while supporting global manufacturing operations.

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develop offensive tooling, implants, and tradecraft; direct AI-driven autonomous agents; discover and exploit vulnerabilities; brief executive customers; provide defensive guidance; collaborate with threat intelligence and blue teams; establish operational standards; and mentor security operators.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Leads application and cloud security architecture, threat modeling, secure design reviews, security standards, and developer enablement. Owns SAST, DAST, SCA, WAF, CSPM, container, and Infrastructure as Code security controls. Builds security automation and custom tooling, supports AI security initiatives, and partners with engineering and infrastructure teams to improve application resilience, compliance, and risk remediation.

Monitors and investigates security alerts across SIEM, endpoint, identity, cloud, email, and network environments. Conducts threat hunting, incident response, containment, remediation, vulnerability management, and post-incident reviews. Develops playbooks, automation, integrations, detections, and infrastructure-as-code deployments. Uses and tunes agentic SOC tooling while maintaining human oversight. Coordinates with technical and business teams, participates in a 24/7 on-call rotation, mentors junior engineers, and improves security operations through metrics and continuous improvement.

Lead end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational security environments. Develop offensive tooling, implants, and AI-driven autonomous agents for reconnaissance, exploitation, and post-exploitation. Serve as a technical lead for customer engagements, brief security executives, collaborate with blue teams and threat intelligence organizations, establish operational standards, and mentor senior operators.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Designs, implements, maintains, and supports security infrastructure, including firewalls, networks, cloud workloads, authentication, monitoring, threat hunting, vulnerability assessments, incident response, and security controls. The role maintains federal compliance, supports system hardening and access control, automates administration, contributes to cloud migration, documents technical processes, and participates in project and on-call support activities.

Hands-on Information Security Engineer responsible for SOC 2 Type 2 compliance, vulnerability management, Azure and endpoint security, security tooling, governance, customer security questionnaires, vendor risk, secure SDLC practices, incident response, and security awareness. The role partners across Engineering, IT, Legal, and Product to improve the company’s SaaS security posture.

Lead the design, deployment, and operation of network security infrastructure across hybrid on-premise and multi-cloud environments. Manage firewalls, load balancers, IDS/IPS, IAM controls, monitoring, vulnerability remediation, compliance, and incident response. Partner with architecture, security, and operations teams to improve observability, threat detection, resilience, and operational readiness across hyperscale networks.

Deploys and operates enterprise network access control, perimeter security, firewalls, VPNs, endpoint posture assessment, and TrustSec segmentation for a federal agency. The role owns Cisco ISE, 802.1X enforcement, certificate-based authentication, Firepower operations, security policy, incident support, change control, compliance reporting, and 24x7 on-call response. It also requires stakeholder briefings, technical documentation, and knowledge of federal cybersecurity standards and processes.