Top Remote Security Engineer Jobs

Perform SAST/DAST and vulnerability assessments, create FISMA threat models, support incident response, document system security and contingency plans, harden Linux and cloud infrastructure, advise development teams on secure coding and cryptography, and ensure compliance with federal security controls.

Build and operate Flox's security program: deploy and manage SIEM/SOC, harden AWS and Cloudflare, implement IaC/CSPM/SAST/SCA scanning, manage endpoint protection, secure the software supply chain, run incident response, and own identity and access controls.

Lead design, implementation, and maintenance of enterprise PKI systems. Support certificate lifecycle management (CLM), configure CAs and templates, manage HSMs and RAs, automate processes with Ansible, Terraform, and PowerShell, enforce key-management policies, and troubleshoot certificate/TLS issues to maintain secure operations.

Design, document, and implement Illumio-based micro-segmentation and firewall solutions; develop operational procedures and security policies; analyze application dependencies and traffic flows; troubleshoot Illumio agents and network performance; automate policy deployment and compliance reporting.

Design, implement, monitor, and manage DLP and Microsoft Purview solutions and DSPM capabilities. Develop and enforce data protection policies, monitor endpoints/cloud/on-premises, manage SIEM/EDR/XDR and other security tooling, support incident response, and collaborate with SOC, architects, and IT teams to strengthen data governance and compliance.

Lead end-to-end onboarding and enterprise deployments of Clearly AI, integrating with Jira, ServiceNow, Confluence, and GitHub. Configure review workflows, run structured project management, optimize threat modeling/privacy/vendor-risk processes, translate deployment friction into product improvements, triage support, and create onboarding documentation to drive production adoption and measurable security outcomes.

Design and mature product security for a cloud-scale, ML-powered SaaS platform. Perform threat modeling and security design reviews, triage vulnerabilities, conduct manual code reviews, implement automated defenses, and train engineering teams on secure development practices.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Join the security team to run security operations, monitoring, incident response, application and infrastructure security reviews, bug bounty management, and compliance (SOC 2, ISO 27001, GDPR). Participate in on-call rotations, triage alerts, remediate vulnerabilities (libraries, images, containers), threat model systems, and integrate defensive tooling to protect SaaS and on-prem deployments.

Support DoD modernization engagements by implementing and validating secure configurations, supporting ATO/eMASS activities, producing operational runbooks, coordinating cutovers and testing, remediating vulnerabilities, and automating operations (scripting/AIOps) with emphasis on mainframe/legacy environments and DoD security frameworks.

Hands-on offensive and defensive security engineer for a Layer 1 blockchain: audit Move modules, Solidity and Rust code, build fuzzers/static analysis/formal-verification tooling, threat-model protocol layers, run bug bounty triage, lead incident response, and partner with engineers and external auditors to harden the network against sophisticated adversaries.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Design, harden, and operate cloud infrastructure for a medical AI platform. Own security posture, compliance, and resilience of production systems; improve security observability and implement defense-in-depth controls across services and data platforms handling sensitive medical information.

Support cybersecurity engineering for a VA healthcare modernization project: secure AWS and hybrid environments, support RMF/ATO and compliance, configure and monitor AWS security services, produce SSPs/POA&Ms/SOPs, perform vulnerability assessments and DISA STIG hardening, integrate security into DevSecOps and CI/CD, and collaborate with stakeholders on security controls and remediation.

Own and mature Odysseys application security posture: perform code reviews, run SAST/DAST/SCA assessments, remediate vulnerabilities, embed security into CI/CD, maintain SOC 2 Type II compliance, evaluate AI/data pipeline risks, and partner cross-functionally to translate findings into actionable remediation.

Own and strengthen Doctronic's security posture for a HIPAA-compliant, SOC 2 Type II environment. Maintain compliance, run audits, perform penetration testing and vulnerability assessments, handle incident response, vendor security reviews, build security automation and monitoring, and partner with engineering to embed security across the SDLC.

Engineer and automate DevSecOps security workflows for a continuous ATO pipeline on AWS GovCloud. Integrate and automate security tooling (scans, triage, evidence, continuous monitoring), implement IaC scanning, perform cloud inventory and drift detection, mentor engineers, and produce compliance and ATO artifacts mapped to NIST 800-53/800-171.

Lead and implement security guardrails for AI-enabled development and AWS cloud infrastructure. Design IAM and least-privilege controls, secure AI/ML pipelines, integrate security into CI/CD and developer tooling, run cloud/IAM audits, build AI-driven security monitoring and incident response, ensure HIPAA and other compliance, and mentor engineering teams.

Contribute to corporate information security by assessing designs, selecting controls, performing threat modeling and vulnerability management, supporting risk and vendor assessments, and advising engineering teams on secure solutions and governance.

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Lead global network security operations and projects, managing enterprise firewalls, segmentation, SD-WAN, SASE, ZTNA and NAC. Evaluate risks, ensure secure configurations, support incident response, modernize cloud/SaaS controls, collaborate with distributed IT teams, provide mentoring, and deliver security reporting and metrics.

Perform offensive security testing and exploit development across enterprise systems, apps, and networks. Identify vulnerabilities, run production-safe exploitation, create remediation reports, support vulnerability management, conduct breach/attack simulations, collaborate with SOC and stakeholders, and provide threat context and metrics to reduce risk.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.