Top Remote Security Engineer Jobs

Design, build, and automate database and infrastructure security solutions across cloud and on-prem environments. Partner with product and engineering teams to implement monitoring, vulnerability management, privileged access reporting, compliance (SOX/CIS), and integrations (ServiceNow, Splunk). Apply IaC, scripting, DevSecOps practices, and perform patching, DR, and security lifecycle activities while mentoring team members.

Lead global network security operations and projects, managing enterprise firewalls, segmentation, SD-WAN, SASE, ZTNA and NAC. Evaluate risks, ensure secure configurations, support incident response, modernize cloud/SaaS controls, collaborate with distributed IT teams, provide mentoring, and deliver security reporting and metrics.

Perform offensive security testing and exploit development across enterprise systems, apps, and networks. Identify vulnerabilities, run production-safe exploitation, create remediation reports, support vulnerability management, conduct breach/attack simulations, collaborate with SOC and stakeholders, and provide threat context and metrics to reduce risk.

Plan and execute offensive tests across web apps, APIs, networks, and cloud; retest fixes; scope and oversee engagements; produce actionable reports and metrics; collaborate with engineering, security, and GRC; evolve playbooks and tooling; mentor team members and incorporate adversary-focused threat modeling and detection feedback.

Design, implement, and validate scalable endpoint security controls across Mac, Windows, and Linux. Lead patch and vulnerability management, host hardening, exploit validation, and threat-prioritization. Evaluate build vs. buy options, collaborate cross-functionally, translate technical risk to business impact, and provide business-hours operational support with infrequent incident response.

Embed application security across the SDLC: identify and remediate web/API vulnerabilities, perform threat modeling and risk assessments, automate monitoring and remediation, analyze logs for anomalies, support compliance and federal security authorization activities.

Designs and implements secure, fully automated CI/CD pipelines and identity controls for cloud deployments. Builds infrastructure-as-code (Ansible, Terraform, Packer), integrates identity and auth (AWS IAM, Azure/Entra ID, SailPoint, OAuth/OIDC/SAML/SCIM), and automates guardrails for non-human identities and agent workloads. Partners with architecture, InfoSec, and engineering to ensure compliance, observability, and scalable, secure deployments.

Design, build, and operate secure cloud CI/CD pipelines and automation (infrastructure as code) to support cloud deployments. Partner with InfoSec, architecture, and engineering to enforce identity and non-human identity governance, implement IAM integrations, secrets management, and automated guardrails. Troubleshoot production pipeline issues, develop tools to reduce errors, and research technologies to improve DevSecOps effectiveness.

Design, build, and operate secure cloud CI/CD pipelines and automation (Ansible, Terraform, Packer). Lead identity governance for AI/non-human identities in SailPoint, automate access reviews/certifications, collaborate with InfoSec and platform teams to enforce controls, troubleshoot production issues, and drive centralized agent identity governance across cloud environments.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform guided audits of smart contracts, blockchain protocols, and dApps to identify and remediate vulnerabilities. Contribute to security tooling and research, explore attack vectors, and support process and methodology improvements under senior guidance.

As a Cloud Security Engineer, you'll secure cloud infrastructure, manage AWS and Kubernetes security solutions, conduct assessments, and mentor engineers.

Senior Cloud Security Engineer responsible for hands-on remediation of cloud and infrastructure vulnerabilities, operating vulnerability and CSPM tooling, enforcing secure configurations across Azure environments, embedding security in CI/CD and IaC, supporting compliance/audits and reporting, mentoring engineers, and partnering with cross-functional teams to maintain cloud security posture and policy.

Partner with engineering, compliance, and security teams to embed application security into the SDLC: triage static/SCA alerts, advise on OWASP Top 10 remediation, maintain developer playbooks and training, track security metrics and evidence for audits, and help shape AI governance and GenAI-safe workflows.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Own account-level security strategies for defense, aerospace, intelligence, and critical infrastructure customers. Lead security architecture, solution design, demonstrations, workshops, pilots, technical validations, and customer decision processes. Guide secure AI adoption and deployment of Microsoft security solutions, including Sentinel, Defender, Entra, Purview, Security Copilot, Microsoft 365, and Azure security services. Coordinate Microsoft and customer stakeholders, drive adoption, reduce risk, and deliver measurable security outcomes.

Designs and evolves enterprise information security architecture, standards, and roadmaps while engineering and operating security platforms such as SIEM, SOAR, EDR, vulnerability management, Entra ID, and DLP. Advises enterprise and solution architects on secure cloud, application, data, and infrastructure designs; integrates security tools; supports automation, detection, incident response, governance, audits, and continuous improvement.

Serves as the senior technical authority for enterprise cybersecurity architecture and engineering supporting a federal VA program. Leads security architecture reviews, threat modeling, risk and gap analyses, modernization, governance, requirements traceability, and secure implementation across cloud, health IT, network, data, identity, and emerging technologies. Advises government and technical leadership, guides multidisciplinary teams, develops architectural standards and recommendations, supports A&A and ATO activities, presents executive briefings, reviews deliverables, and mentors cybersecurity personnel.

Supports Cisco security consulting projects under mentorship. Responsibilities include attending design and configuration sessions, gathering customer requirements, defining integration goals, analyzing security policies and configurations, and recommending improvements. The intern will learn to design policies for identity services, firewalls, visibility, and cloud solutions, while developing customer automation capabilities using Java, Python, C++, Ansible, Chef, Terraform, and Cisco APIs.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.

Secure and optimize enterprise network infrastructure through firewall lifecycle management, GlobalProtect VPN support, vulnerability remediation, incident response, monitoring, troubleshooting, and automation. Develop Ansible and Python workflows for threat defense, data collection, investigation, threat hunting, and user access management. The role also designs, configures, maintains, and monitors cybersecurity capabilities and supports onsite testing and deployments.

Own security for cloud and ML infrastructure, including tenant isolation, GPU cluster security, model protection, vulnerability management, network segmentation, monitoring, access governance, and credential management. Lead infrastructure security projects and establish technical standards and guardrails in partnership with Security, DevOps, Engineering, IT, and ML teams. The role also supports incident response, CSPM, sandboxing, container isolation, and SOC 2 readiness.

Operate and improve an AI-powered vulnerability operations platform. Monitor scanning fleets and worker queues, investigate failures, build Python/FastAPI and React/TypeScript features, manage PostgreSQL data, reconcile findings with SQL, and operate Kubernetes/OpenShift GitOps deployments. Improve asset inventory, ownership attribution, scan coverage, data quality, and vulnerability lifecycle logic. Collaborate with senior engineers on LLM-based security scanning and verification tools while supporting security engineers and repository owners.

Own the organization’s application security posture, partnering with engineering and IT on secure coding, vulnerability management, penetration testing, security architecture, and remediation. Support audits, risk assessments, SOC 2 compliance, incident and breach investigations, bug bounty programs, and employee security training. The role is fully remote but requires a final in-person interview with company-paid travel.