Top Remote Security Engineer Jobs

Lead technical response to security incidents across Twilio's global cloud infrastructure. Triage, contain, remediate, document incidents, drive post-incident improvements, automate workflows (SOAR), extend SIEM capabilities, participate in on-call rotation, mentor teammates, and collaborate with R&D to improve detection and threat mitigation.

Secure Agora’s applications, APIs, cloud infrastructure, Kubernetes workloads, deployment pipelines, and blockchain-related systems. Responsibilities include threat modeling, architecture and code reviews, security tooling administration, detection engineering, monitoring, incident response, vulnerability management, penetration-test coordination, security automation, and cross-functional remediation. The role partners closely with Engineering, Product, Infrastructure, Compliance, Operations, and the SOC to improve controls, telemetry, response readiness, and security risk visibility.

Designs and secures enterprise AI platform foundations for mission-critical environments. Responsibilities include threat modeling, tenant isolation, identity and authorization architecture, secure CI/CD, compliance-by-design, and protection of systems executing untrusted code, tools, or agent actions. The role partners with client engineering, product, security, and business stakeholders to deliver secure, reliable, and compliant platform capabilities.

Secure applications throughout the software development lifecycle by performing SAST, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD security control validation. The role uses Fortify and SonarQube, produces assessment reports, supports secure SDLC process design, and partners with developers, architects, and cybersecurity specialists.

Build autonomous AI-driven security testing systems and agentic workflows for analyzing mobile, desktop, IoT, and API applications. Develop reusable security automation frameworks, integrate static and dynamic analysis, reverse engineering, network analysis, vulnerability intelligence, and custom tools. Create evaluation systems and human-in-the-loop workflows, research emerging AI and offensive security techniques, and collaborate with security researchers to scale testing. The role requires production-quality coding, security expertise, autonomy, and U.S. citizenship.

Secures applications throughout the software development lifecycle by performing SAST with Fortify, code analysis with SonarQube, DAST, penetration testing, secure code reviews, vulnerability remediation tracking, and DoD control validation. The role documents assessment findings, supports secure SDLC process design, and collaborates with developers, architects, and cybersecurity specialists. Requires an active Secret or TS clearance, application security experience, penetration testing knowledge, and CEH certification. Quarterly travel to Scott Air Force Base is required.

Embeds application security into the SDLC through DevSecOps processes, security assessments, repository scanning, vulnerability triage, remediation validation, and secure code review. Uses tools such as Burp Suite, CodeQL, SAST, SCA, and secret scanning across applications, APIs, cloud workloads, and infrastructure. Develops security metrics and executive dashboards, coaches development teams, participates in Agile ceremonies, and promotes secure coding and responsible AI-assisted security practices.

Lead technical presales engagements for Microsoft security solutions, including Entra, Purview, Defender, and Sentinel. Deliver discovery sessions, demonstrations, whiteboarding, solution designs, and proof-of-concept efforts. Build competitive strategies, resolve technical blockers, guide customer decisions, collaborate with partners and deployment teams, and help existing customers optimize security product usage. Embed governance, security, and compliance into customer engagements while quantifying business value and supporting sales targets.

The role involves enhancing application security for Radar, managing security for over 1 billion API calls daily, and collaborating with customers.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Design and implement AI-powered security agents and tooling across CI/CD, perform threat modeling and manual assessments, find and drive remediation of vulnerabilities, embed security into development workflows, connect telemetry to detection systems, and shape product security strategy and incident response.

Build and own automated security control monitoring, continuous control monitoring, AWS evidence collection, control-failure workflows, and AI-native GRC processes. Integrate APIs and data systems, maintain cross-framework control libraries, support audits, validate remediation, administer GRC technology, and establish engineering standards for automation. Partner with Platform Engineering, DevOps, and IT to implement preventive guardrails, dashboards, self-service evidence, and measurable improvements in audit readiness and risk reduction.

Designs and executes application security practices across product and platform engineering teams. Responsibilities include integrating SAST, DAST, SCA, secret, IaC, API, mobile, container, and cloud-native security into CI/CD; conducting secure design reviews, threat modeling, code reviews, and testing; building automation, guardrails, policy-as-code, release risk gates, secure coding standards, SBOM processes, and vulnerability disclosure workflows.

Develop low-level firmware for secure enclaves in custom ASICs supporting secure boot, attestation, root of trust, provisioning, secure updates, recovery, telemetry, tamper monitoring, and debugging. Collaborate with ASIC, hardware, security, software, and systems teams on interfaces and requirements. Support pre-silicon validation, FPGA and simulation development, silicon bring-up, production deployment, testing, code reviews, and documentation.

Develop ROM code, bootloaders, and runtime firmware for secure enclaves in custom ASICs supporting secure boot, attestation, OTA updates, provisioning, telemetry, recovery, and tamper monitoring. Collaborate with hardware and communications engineers on interfaces, pre-silicon development, integration, and validation. Support post-silicon ASIC bring-up, debugging, and embedded firmware validation.

Provides technical pre-sales support for video security and access control solutions. Designs and quotes integrated systems, supports RFP responses, delivers product demonstrations and training, leads architecture discussions, evaluates technical risks, and collaborates with sales teams, partners, and customers. The role also supports post-sales transitions, complex troubleshooting, technical integration, customer enablement, and demo equipment management. Travel exceeds 50% across the assigned territory.

Optimize Microsoft security operations by tuning Sentinel detections, reducing false positives, designing alert and incident-response automation, integrating Defender products and third-party telemetry, improving SOC workflows, and developing investigation playbooks, runbooks, and documentation. This hands-on 3–4 month contract requires strong Sentinel and Defender expertise, advanced KQL, Logic Apps, SOAR automation, SIEM engineering, and security operations optimization experience.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Monitor security telemetry, investigate and contain incidents, conduct vulnerability assessments, support penetration testing, maintain security tools, perform threat hunting, and develop cybersecurity policies, procedures, playbooks, and after-action reports. The role also includes researching emerging threats, educating employees on security practices, and configuring SIEM, EDR/XDR, SOAR, IDS/IPS, and endpoint security platforms.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.