Top Remote Senior Security Engineer Jobs

Partner with product and engineering teams to embed security throughout the product lifecycle. Conduct threat modeling, architecture reviews, source-code security analysis, vulnerability identification, and secure test development. Advise on authentication, compliance, and business security requirements; automate security processes; identify emerging vulnerabilities; and coordinate cross-team projects through completion.

Lead complex security incident investigations from assessment through recovery, coordinating containment, remediation, evidence preservation, and stakeholder communication. Analyze threats across endpoint, identity, cloud, SaaS, network, and application environments. Build code, queries, automation, and AI-assisted workflows to improve evidence collection, detection, case management, and response. Lead post-incident reviews, drive lasting improvements, mentor responders, and participate in the incident response on-call rotation.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Secure Zapier’s production infrastructure by identifying and mitigating risks, hardening cloud environments, improving Terraform and CI/CD security, managing vulnerability and misconfiguration tools, enforcing least-privilege access, strengthening data governance, hardening Kubernetes images, and supporting incident response. The role collaborates with Platform, Engineering, and Security teams in a remote-first environment.

Build and operate MITRE ATT&CK-aligned threat detections across cloud, endpoint, identity, email, and application telemetry. Own the full detection lifecycle, advance detection-as-code platforms, improve data pipelines and observability, integrate threat intelligence, evaluate AI-powered security capabilities, and support investigations and incident response. Partner with Security Operations and engineering teams while independently taking projects from concept through production.

Build and operate threat detection systems across cloud, endpoint, identity, email, and application environments. Own detection lifecycles, detection-as-code workflows, data pipelines, CI/CD, integrations, threat intelligence enrichment, and AI-assisted security capabilities. Partner with Security Operations and engineering teams on investigations, incident response, threat hunting, and automation. The role requires strong Python and SQL skills, SIEM expertise, cloud and Linux knowledge, and independent project leadership.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Own and improve security across cloud infrastructure, AI platforms, corporate IT, endpoints, identity, email, and business applications. Build detection and response capabilities, secure containers and software supply chains, implement identity and access controls, manage vulnerabilities and secrets, and automate security guardrails. Investigate threats across cloud, identity, and endpoint telemetry while protecting sensitive customer data and supporting compliance controls.

Leads enterprise application security and secure SDLC initiatives, embedding vulnerability scanning, security gates, security-as-code, and AI security controls across CI/CD pipelines. Oversees vulnerability triage, remediation SLAs, threat modeling, secure code reviews, developer enablement, security metrics, toolchain automation, software supply chain security, and AI governance. Partners with engineering, architecture, delivery enablement, and risk teams to establish secure development standards and reduce application and AI-related security risks.

Lead Aircall’s detection and response program by building detection logic, SIEM data pipelines, security automation, and AI-enabled investigation tools. Own security infrastructure across AWS environments, conduct threat hunting and incident response, and improve detection maturity through documentation, tuning, metrics, and post-incident reviews. Partner with engineering, product, fraud, privacy, and legal teams while participating in on-call rotations and hiring.

Designs and deploys AI-driven security automation, detection logic, and autonomous response workflows across SIEM, EDR/XDR, SOAR, and cloud platforms. Leads threat hunting, complex incident investigations, MITRE ATT&CK coverage, and protection of AI/LLM workloads. Builds Python and PowerShell security tools, integrates APIs, mentors junior engineers, and promotes software engineering best practices.

Own cloud and application security across Redox’s healthcare data platform. Responsibilities include Kubernetes and container hardening, vulnerability management, secure SDLC and CI/CD safeguards, infrastructure-as-code security, secrets management, compliance control implementation, incident response, threat modeling, design reviews, mentorship, and bug bounty triage. The role also involves securing AI workflows and collaborating with engineering teams in a fully remote, asynchronous environment.

Design and harden Nova’s cloud and future on-premise platform security, including tenant isolation, identity, access policies, secrets, keys, networks, and secure execution sandboxes. Lead red-team testing of authentication, AI agents, privilege boundaries, prompt injection, and sandbox escapes. Own SAP identity integrations, internal security standards, compliance readiness, and customer security partnerships. Research offensive and defensive AI security, contribute to product development, and represent Nova in the SAP security community.

Leads enterprise network security architecture, engineering, and modernization across cloud and on-premises environments. Designs firewalls, WAF, DDoS protection, Azure connectivity, microsegmentation, Zero Trust, SASE, and SD-WAN solutions. Serves as a Level 3 incident escalation point, drives root-cause analysis and resilience improvements, establishes automation and DevSecOps standards, and mentors engineers. Partners with stakeholders and vendors to deliver secure, scalable network security platforms.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment.

Designs, implements, configures, tests, supports, and troubleshoots physical security systems including video surveillance, access control, sensors, and integrations. Consults with clients, leads design workshops, develops network architectures, executes test plans, supports sales, manages project expectations, and serves as a technical customer contact. Requires hands-on security systems engineering, network infrastructure experience, client communication, travel, and occasional off-hours work.

Designs, implements, configures, tests, supports, and troubleshoots enterprise physical security systems, including video surveillance, access control, sensors, and integrations. Consults with clients, develops network and system architectures, leads design workshops, creates test plans and documentation, supports sales activities, and serves as a technical customer contact. Requires hands-on security systems engineering, network infrastructure experience, client communication skills, and travel of 25%–50%.

Architects and develops secure, scalable backend services and AI-assisted workflows for identity and access security. Leads architecture, feature delivery, performance optimization, testing, reliability, and production operations. Integrates AI, ML, and LLM capabilities for access intelligence, risk detection, and remediation. Partners with cross-functional leaders, explores emerging IAM technologies, conducts code reviews, and mentors engineers while driving enterprise-ready solutions.

The Senior Application Security Engineer will strengthen Apollo’s secure software development lifecycle through application security reviews, threat modeling, code analysis, vulnerability management, penetration testing, remediation, and AppSec tooling. The role includes developing automation, securing AI-powered features, improving security observability, enabling developers, and partnering across Engineering, Product, Platform, Data, Legal, and Security teams. This senior individual contributor will own long-term AppSec goals, resolve ambiguous risks, and drive cross-functional security improvements.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.