Top Remote Security Engineer Jobs

Create challenging coding tasks for AI systems, implement deterministic solution verifiers, and contribute backend expertise across feature development, bug fixing, refactoring, performance optimization, testing, and security reviews. The role requires strong programming and software engineering skills, with cybersecurity experience in secure coding, application security, penetration testing, vulnerability assessment, or security-focused code reviews preferred.

Build and secure scalable backend services and APIs while debugging, optimizing performance, implementing features, refactoring codebases, and conducting security reviews and penetration testing. The role also involves automated testing, code review, vulnerability assessment, and contributing domain expertise to training next-generation AI systems.

Supports cybersecurity assessments, RMF, ATO, ASR, IV&V, vulnerability management, incident response, compliance, and security documentation for Navy Medicine systems. Evaluates networks, cloud environments, controls, encryption, and AI-enabled applications; recommends remediation and mitigation strategies; and collaborates with ISSM, ISSO, technical teams, and government stakeholders. Requires an active Top Secret clearance and supports up to 10% Continental U.S. travel.

Design, implement, administer, secure, and maintain enterprise Rocky Linux environments. Apply STIGs, configure identity and authentication services, automate deployment and patching, manage vulnerabilities, troubleshoot infrastructure, and support security monitoring. Develop technical documentation, participate in architecture reviews and incident response, collaborate across infrastructure and cybersecurity teams, and mentor junior engineers. The role requires an active TS/SCI clearance and hybrid work in Centreville, Virginia.

Monitor emerging vulnerabilities, assess exploitability and business risk, prioritize remediation, and develop vulnerability intelligence frameworks. Implement asset detection and monitoring across cloud and data-center environments, maintain vulnerability management KPIs, communicate security posture to technical and executive stakeholders, use CrowdStrike Falcon capabilities, and build security tooling. The role requires scripting, threat intelligence research, cloud and Linux experience, cross-functional collaboration, and AI-enabled workflow improvements.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Lead cryptographic security assessments of protocols, libraries, applications, and high-assurance systems. Analyze advanced cryptographic constructions, identify design and implementation weaknesses, validate exploitability, and recommend remediation. Build testing and analysis tools, manage client delivery, write precise technical reports, mentor engineers, contribute to methodologies and services, and support open-source research and technical publications.

Build and lead a scalable application security and secure SDLC program across engineering teams. Establish policies, standards, tooling, vulnerability management, threat modeling, developer enablement, security champions, software supply-chain controls, and executive reporting. Partner with development, platform, DevOps, product, and leadership teams to integrate security into CI/CD, source control, build, release, and deployment workflows while supporting audits, advisories, incident response, and regulatory requirements.

Partner with sales teams to win strategic data security opportunities. Present technical solutions, gather customer requirements, lead product evaluations, configure solutions, and design evaluation test plans. The role requires extensive pre-sales experience, security and networking expertise, data protection and web technology knowledge, and collaboration across matrixed go-to-market and partner teams.

Supports and sustains mission-critical private cloud and virtualized infrastructure for government systems. Responsibilities include production troubleshooting, monitoring, upgrades, patching, lifecycle management, ITIL incident and change processes, automation scripting, technical documentation, cross-functional collaboration, and 24x7 on-call support. The role requires Linux, VMware, enterprise storage, backup, cloud infrastructure, and automation experience, along with an active Secret clearance and U.S. citizenship.

Provides end-to-end cloud services engineering and customer support across hybrid cloud infrastructure. Responsibilities include incident and problem resolution, troubleshooting, capacity and performance management, cloud administration, virtualization, containers, automation, networking, ITSM, security compliance, and solution optimization. The role requires customer communication, collaboration with engineering teams, documentation, mentoring, on-call flexibility, and onsite work at least 25% of the time.

Own identity and endpoint security across the company, including SSO, MFA, access provisioning, access reviews, MDM, EDR, device security baselines, and IT workflows. Respond to identity and endpoint incidents, assess vendor and SaaS integration risks, support secure AI tool adoption, automate security processes, and help develop scalable security policies and controls.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Designs and maintains security controls for AI platforms, data environments, applications, and cloud infrastructure supporting DHS OIG. Responsibilities include RBAC, encryption, logging, SIEM integration, security monitoring, vulnerability assessments, penetration testing coordination, secure code review, ATO support, NIST and FedRAMP compliance, incident response, forensic analysis, and security documentation. The role requires Azure cloud security expertise, federal cybersecurity experience, and the ability to obtain DHS/EOD clearance.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Maintains security infrastructure, firewalls, PKI, access controls, vulnerability management, incident response, compliance documentation, and threat detection systems. Uses AI-powered SIEM, EDR, UEBA, and SOAR tools to automate security operations and identify emerging threats. Develops policies based on NIST, FISMA, PCI, PII, and CJIS requirements; performs risk assessments, system hardening, and security training. Collaborates with IT teams and evaluates AI/ML security, privacy, and supply chain risks.

Architect, deploy, configure, administer, and maintain Splunk instances for clients and internal teams. Develop security use cases, configure alerts, evaluate and prioritize security data sources, and guide log collection and forwarding to SIEM platforms. Collaborate with clients, SOC analysts, and project coordinators, participate in project meetings, and support a rotating on-call schedule.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Provides security engineering and architecture expertise for FedRAMP authorization and continuous monitoring. Reviews cloud service provider architectures, security controls, authorization packages, assessment reports, vulnerabilities, and compliance documentation against NIST, FedRAMP, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, advises government program leads and CISOs on risk posture, and supports secure, compliant, resilient system design.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.