Top Remote Security Engineer Jobs

Build, deploy, and maintain AppSec tooling; integrate security into SDLC; triage SAST/DAST findings; automate penetration testing; lead secure coding and threat modeling; support vulnerability detection, remediation, and incident response.

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Design and manage cloud and product security for AWS, perform security assessments and pen-test remediation, integrate security into DevOps/IaC, mentor engineers, and advise on compliance and threat mitigation across mobile core, applications, and cloud environments.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Support threat intelligence, incident analysis/response, penetration test coordination, vulnerability scanning and remediation tracking, security tool administration, dashboard maintenance, and adherence to security policies while learning and developing cybersecurity skills.

Design, integrate, and maintain secure multi-enclave network architectures meeting NSA CSfC and DoD/Army requirements. Configure and troubleshoot firewalls, VPNs, routing, VRF, IDS/IPS, virtualization, Windows and RHEL systems, and SIEMs. Develop automation scripts, produce architecture and test documentation, perform vulnerability assessments, and support lab, integration, and field activities with up to 25% travel.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead and execute hands-on red team operations simulating real-world adversaries across applications, cloud, and enterprise environments. Identify and chain high-impact vulnerabilities, perform manual exploitation and control bypasses, validate detections and response, produce actionable remediation guidance, improve tooling/automation, and mentor junior red team engineers.

Designs, implements, tests, and maintains enterprise IAM/SSO solutions. Troubleshoots authentication/authorization issues, integrates federation protocols (SAML/OAuth/SCIM), applies patches, trains stakeholders, and advises on IAM best practices and compliance.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Design, implement, and manage RACF-based logical security across z/OS environments. Administer user/group and resource profiles, enforce least-privilege for datasets and subsystems, perform access reviews and compliance audits, analyze SMF/RACF logs and SIEM alerts, investigate incidents, integrate mainframe security with enterprise IAM/SSO/MFA, and support encryption and key management.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues.

Conduct offensive cyber operations, red team and penetration tests, network exploitation, malware analysis, and tool development. Analyze network/system weaknesses, brief clients and management, and train junior operators to improve operational tradecraft and efficiency.

Build and own Corporate IT and security for a research org: design endpoint/device management, implement Zero-Trust IAM, secure communications and email, enable secure collaboration with external AI labs, and turn compliance into research enabler while remaining a hands-on operator.

Design and operate secure research infrastructure for multi-cloud, high-compute AI workstreams. Harden CI/CD and IaC, implement supply-chain protections (SBOM, signing), sandbox automated agents with least privilege, enforce zero-trust segmentation and data protection, and enable compliance to support partnerships with frontier model providers.

Protect Lambda's AI cloud by building and tuning SIEM/EDR detections, responding to incidents, hardening production systems, reviewing architectures and code, and shipping security tooling (Python/Go). Partner across engineering teams to mature detection, incident response, and automation for AI-specific threats.

Lead security for the full stack: design secure architectures, build CI/CD and IaC tooling, run threat modeling, red-team/pen tests, incident response, and operate the bug bounty program to prevent and remediate vulnerabilities.

Lead design, deployment, and scaling of enterprise DLP across cloud, endpoint, SaaS, and network with a focus on AI-driven automation. Build automated classification, remediation, and workflows, integrate DLP with SIEM/SOAR/identity/cloud, develop policies for regulatory compliance, mentor engineers, and present program insights to leadership.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Own and harden corporate security for endpoints, identity, and SaaS. Implement Zero Trust and device-trust patterns, build automation and tooling, run detection/response for enterprise systems, and serve as the internal security SME for corporate workflows.

Operate as a strategic adversary to compromise critical assets, design and execute high-impact offensive campaigns, develop custom exploits and tooling, prioritize business risk, partner with engineering to remediate root causes, and teach teams to harden systems across the company.