Top Remote Security Engineer Jobs

Develop and formalize methods to validate reported vulnerabilities and generate/verify safe patches for internal NVIDIA targets. Define correctness, regression, and revalidation standards; produce repeatable, auditable processes and evidence. Apply AI-assisted workflows cautiously, perform bounded applied research on vulnerability classes, and document findings for independent security review.

Analyzes exposure risks across databases and data platforms, including permissions, access models, configurations, storage, encryption, and service-to-service access. Investigates attack paths, validates risks using queries and logs, prioritizes issues by exploitability and business impact, and partners with database, cloud, platform, engineering, and cybersecurity teams on remediation and preventative controls.

The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance.

Design, implement, and enhance anti-cheat and platform security technologies for Windows on ARM. Investigate cheat detection methods, strengthen protection frameworks, optimize and debug low-level C++ systems, and collaborate with engineering teams across studios to protect Call of Duty gameplay.

Hands-on senior security engineer responsible for building secure libraries, templates, guardrails, and developer tooling. Reviews architecture and code for authentication, authorization, and data exposure risks; conducts threat modeling; strengthens secrets, logging, and auditability; integrates security checks into CI/CD; supports vulnerability remediation, secure development practices, and incident reviews.

Own Hightouch’s application security posture as the first dedicated security hire. Secure multi-tenant systems, sub-tenant access controls, distributed architecture, internet-facing APIs, and multi-region, multi-cloud infrastructure. Lead threat modeling, compute isolation, rate limiting, abuse detection, authorization, privacy controls, and security program initiatives. The role is highly hands-on, emphasizing code-level fixes, architecture influence, roadmap ownership, and collaboration with engineering teams.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Own the application security program strategy, roadmap, architecture standards, tooling, threat modeling, security champions program, and developer training. Integrate security tools into CI/CD pipelines, manage findings and remediation, coordinate penetration testing, maintain audit evidence, and report risk and program metrics to leadership. Operate autonomously while influencing development, infrastructure security, IT leadership, and external vendors. Support secure AI adoption and risk-based security decisions across the organization.

Owns GitLab’s security policy and standards lifecycle, including drafting, approvals, exceptions, attestations, regulatory alignment, framework mapping, audits, and adherence measurement. Translates emerging regulations into actionable requirements, supports customer trust activities, and automates governance and evidence workflows using AI. Provides technical and program leadership across Security, Product, Legal, and Engineering while mentoring team members and shaping the security governance roadmap.

Designs, deploys, operates, and improves security infrastructure across AWS and on-premises environments. Responsibilities include AWS security controls, hybrid-cloud architecture, network segmentation, firewalls, Infrastructure as Code, automation, compliance support, monitoring, incident response, troubleshooting, and lifecycle management. The engineer will work with AWS security services, Palo Alto technologies, Terraform, scripting, DevSecOps practices, and frameworks including NIST, FedRAMP, and FISMA. The role is mostly remote with occasional onsite work near Rockville, Maryland.

Build and maintain hardened, minimal container images across Linux distributions and application runtimes. Remediate CVEs, troubleshoot package and dependency issues, reduce attack surfaces, and develop automation for image building, scanning, testing, versioning, SBOM generation, and publishing. Validate compatibility with Kubernetes and containerized environments, collaborate with infrastructure and security teams, establish hardening standards, and document curated-image usage.

Owns the external attack surface management platform, including asset discovery, exposure analysis, risk prioritization, remediation coordination, integrations, automation, reporting, onboarding, and operational standards. Partners with security, cloud, network, infrastructure, application, and business teams to validate findings, reduce risk, investigate externally exposed assets, and improve platform effectiveness.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, incident response, and compliance evidence. Partner with developers, vendors, cloud teams, and compliance stakeholders to close critical findings and embed secure delivery practices through automation and security AI tooling.

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, and security automation. Partner with development, cloud, compliance, and security teams to remediate critical findings, support audits, improve secure coding, and provide security guidance. The role also involves leveraging AI-enabled tools for vulnerability triage and remediation.

Serve as the primary technical security engineer for a DoD system, managing ACAS and SCAP vulnerability scans, STIG compliance, patching, POA&M remediation, incident response, system documentation, and NIST RMF compliance. Collaborate with the ISSO, maintain security and configuration records, investigate alerts, and use PowerShell, Python, or Bash to automate security and compliance activities.

Identify and remediate vulnerabilities across products and AWS infrastructure, respond to security incidents, close security tickets, integrate security controls into CI/CD, review code and infrastructure, support SOC 2 and CASA compliance, and strengthen access management, secrets handling, and cloud hardening.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Drive adoption of AI-driven security solutions through customer-facing technical engagements. Lead AI risk and governance workshops, support proof-of-value and proof-of-concept projects, demonstrate products, and advise on integrating AI security with existing architectures. Collaborate with Sales, Product Management, Marketing, and Customer Success while translating complex cybersecurity and AI concepts into business value.

Designs, integrates, administers, and optimizes enterprise physical security systems, including access control, video, visitor management, analytics, and cloud platforms. Leads system integrations, ETL workflows, automation, upgrades, troubleshooting, documentation, and technical initiatives across global sites. Partners with Security Operations, IT, Engineering, and business stakeholders to deliver scalable security technology solutions. Requires approximately 15% regional travel.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Owns the technical pre-sales lifecycle for physical security and network solutions. Partners with sales teams, consults with clients, designs CCTV, access control, FDAS, and wired/wireless network architectures, and develops BOMs, drawings, specifications, and pricing. Leads technical presentations, validates solutions, manages project handoffs, reviews designs and quotes, and mentors junior Solutions Engineers.

Senior pre-sales Solutions Engineer responsible for scoping, designing, quoting, and presenting physical security and network infrastructure solutions. The role covers CCTV, access control, fire alarm systems, wired and wireless networks, technical drawings, bills of materials, pricing, client consultation, project handoff, quality assurance, and mentoring junior engineers.

Identify, validate, prioritize, and remediate application and API vulnerabilities across web, cloud, and development environments. Manage SAST and DAST programs, perform manual testing and secure code reviews, conduct threat modeling, assess AWS security configurations, and provide developer-focused remediation guidance. Integrate security testing into CI/CD workflows, automate vulnerability management, track remediation metrics, and collaborate with engineering, cloud, and security teams to improve application security posture.

Administer, monitor, troubleshoot, and improve customer-facing security platforms. Handle Tier 3 escalations, investigate outages, support onboarding, execute upgrades and production changes, improve automation and reliability, maintain technical documentation, and collaborate with security, IT, vendors, and engineering teams. The role requires strong Windows, networking, identity, cloud, and security platform knowledge, along with independent judgment and careful change management.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.