Top Remote Senior Security Engineer Jobs

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Lead KPA's enterprise security platforms and technical security initiatives across cloud, identity, endpoints, network, and DevOps. Own vulnerability management, incident response, SOC 2 compliance, vendor security assessments, and security automation. Partner with IT and DevOps to embed security in CI/CD, IaC, containers, and cloud workloads while improving posture through detection engineering, automation, and governance.

The Senior Security Engineer will manage customer identity platforms, ensuring secure authentication and access across products, while supporting integration and optimizing performance.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Design and implement multi-cloud security controls, build policy-as-code and IaC guardrails integrated into CI/CD, harden container and Kubernetes workloads, perform vulnerability analysis and remediation, support incident response and forensics, provide audit evidence for compliance frameworks, mentor other security engineers, and participate in on-call incident rotations to improve remediation and response processes.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

Design, implement, and support enterprise physical security systems (video surveillance, access control, sensors, IoT). Consult with clients, develop technical architectures, configure and test systems, troubleshoot hardware/software, manage projects, run design workshops, and support sales and delivery. Travel 25-50% and perform hands-on installations and network-integrated solutions.

Build and advance application and product security across the engineering organization. Responsibilities include establishing secure defaults, CI guardrails, security requirements, threat modeling, risk assessments, penetration testing, vulnerability remediation, secure coding education, roadmap ownership, and hands-on code review. The role partners closely with product, engineering, DevOps, and services teams to secure applications, microservices, and AI features while enabling efficient development.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Design, implement, and operate IAM solutions across cloud and internal systems. Build role-based access models, automate least-privilege workflows with Terraform/Teleport, integrate access observability into SIEM, run access reviews, and drive secure-by-default adoption through automation and documentation.

Design, build, and operate scalable IAM solutions across cloud and internal systems. Implement role design, reduce privilege sprawl, automate access workflows and reviews, integrate logging/metrics into SIEM, identify and mitigate risky permissions, and drive secure-by-default patterns and operational runbooks.

The Senior Embedded Security Engineer will enhance the security of the flight software for space vehicles, ensuring high standards for safety and secure coding practices throughout the development lifecycle.

Design, build, and operate Identity & Access Management solutions across cloud infrastructure, SaaS, and internal systems. Implement role design, least-privilege models, automated access reviews, SIEM-based observability, and Terraform/IAC automation. Drive end-to-end IAM projects, reduce privilege sprawl, and codify secure-by-default practices and runbooks.

Design, build, and scale IAM solutions across cloud and internal systems. Implement role design and least-privilege models, automate access workflows and reviews, integrate logging/metrics into SIEM, reduce privilege sprawl, identify and mitigate risky permissions, and operationalize IAM projects end-to-end with documentation and runbooks.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Provides operational support for Zscaler security platforms, including policy configuration, tuning, monitoring, alert triage, DLP, CSPM, DSPM, and incident response. Maintains zero trust access controls, investigates user and application experience issues, documents procedures, and automates repetitive workflows. Requires five-plus years in security operations or related technical fields, hands-on ZIA or ZPA administration, cloud and networking knowledge, and U.S. citizenship.

Build and operate security log pipelines, SIEM detections, endpoint controls, security automation, and internal tooling across AWS, macOS, Windows, CI/CD, and infrastructure repositories. Develop primarily in Python, implement Terraform-based infrastructure and policy-as-code safeguards, integrate security tools through APIs, and embed scanning and secrets detection into developer workflows. Own the reliability and coverage of security platforms while independently driving projects and implementing fixes directly in systems managed by other teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Design, build, validate, and maintain high-confidence detections across SIEMs and security platforms. Translate incidents, hunts, and threat intelligence into production-ready detection logic, drive detection-as-code workflows, and partner with responders to reduce noise, improve context, and monitor detection health. Coach teams, shape telemetry requirements, and own the full detection lifecycle from development to retirement.

Design, implement, and maintain enterprise-scale Identity & Access Management solutions across hybrid environments. Drive modernization to Zero Trust, automate identity processes, strengthen privileged access and governance, integrate AI-enabled tooling, monitor and respond to identity threats, ensure compliance and audit readiness, and collaborate with cross-functional teams to reduce identity risk and enable secure business operations.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

The Senior Application Security Engineer will implement security controls for space systems, ensuring compliance with government standards while collaborating with engineering teams to enhance security practices and respond to threats.