Top Remote Senior Security Engineer Jobs

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Independently manages AWS infrastructure, Terraform-based deployments, cloud security, IAM, access controls, DevSecOps, production monitoring, compliance, SOC 2 audits, vulnerability remediation, disaster recovery, endpoint security, and SageMaker environments. Supports segregation of duties, secure client onboarding, security training, documentation, and production troubleshooting across remote, US business hours.

Lead secure design reviews, threat modeling, and security risk assessments for products and features. Partner with engineers, product managers, and designers to develop secure architectures, provide remediation guidance, promote security culture through training and mentoring, oversee vulnerability management, and explain security events. Build security tooling, automate secure development practices, and establish architectural patterns and processes that reduce security risk across DigitalOcean’s engineering organization.

Lead and evolve the insider threat program by engineering detection, automating investigation workflows, tuning UEBA/SIEM/DLP/UAM/SOAR detection content, conducting threat hunting and DFIR, collaborating with HR/Legal, and using data analytics (e.g., Pandas) to investigate anomalous activity and reduce internal risk.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Lead the technical presales process for Proofpoint’s data security and insider risk solutions. Partner with sales teams, conduct technical discovery, design security architectures, and manage proof-of-concept and production evaluations. Present solutions to customers, support deployments and training, collaborate with Professional Services, Engineering, Product Management, and Support, and provide customer insights to improve products. The role also develops internal documentation, training, and repeatable sales engineering processes.

Build security tooling and customer-facing transparency systems; oversee SBOM, vulnerability management, vulnerability disclosure, and bug bounty programs. Assess vulnerability severity and exploitability, publish security advisories and CVE records, coordinate disclosures, answer customer security inquiries, and collaborate with Engineering, Product, customers, partners, and security researchers. Apply AI to security workflows and use software engineering and automation practices to improve security processes.

Lead engineering-driven enterprise data protection and DLP capabilities across cloud, SaaS, endpoint, email, collaboration, and web environments. Build automated policy-as-code workflows, CI/CD pipelines, reusable controls, integrations, detection logic, and operational health checks. Partner with technical, compliance, privacy, legal, and business teams to improve data protection effectiveness. Investigate events, reduce false positives, establish governance standards, and define metrics demonstrating risk reduction and operational maturity.

Leads enterprise data protection initiatives, including data classification, DLP policy management, eDiscovery support, insider threat investigations, and data governance. Uses behavioral analytics, audit logs, SIEM, UEBA, and forensic tools to identify misuse and leakage. Develops security controls, incident response playbooks, and compliance updates while collaborating with Legal, HR, and Compliance. Participates in threat-hunting and red, blue, and purple team exercises. Requires five-plus years of relevant experience and eligibility for a Top Secret clearance.

Leads technical security sales engagements through demonstrations, proofs of concept, hackathons, architecture workshops, and customer consultations. Designs secure, scalable cloud and hybrid architectures, resolves technical blockers, and advises customers on Microsoft Security solutions, including Defender and Sentinel. Develops security posture recommendations, supports XDR, zero trust, cloud security, and AI adoption strategies, while influencing technical decisions and representing Microsoft in developer communities.

Owns end-to-end security engineering, including risk identification, secure-by-default libraries, least-privilege guardrails, developer machine hardening, supply-chain security, and identity and authentication protections. Partners with compliance to implement effective controls for healthcare requirements such as HIPAA and HITRUST. The role requires production software engineering and security expertise, with broad autonomy in a fully remote environment.

The Senior Security Engineer will secure cloud infrastructure across various services, develop security policies, manage exceptions, and respond to security alerts while collaborating with teams to eliminate security risks.

Design, implement, and maintain security controls across cloud (AWS) and on-prem systems. Lead vulnerability management, incident response, and remediation. Serve as SME for SIEM, SAST/DAST, IAM. Embed security in SDLC, support SOC 2/ISO 27001 audit readiness, mentor junior engineers, and recommend control improvements.

Designs and implements secure cloud architectures, IL5 controls, STIG-aligned hardening baselines, identity integrations, and cybersecurity controls for federal and DoD-aligned platforms. Performs security assessments, vulnerability analysis, continuous monitoring, secure deployment reviews, audit support, and remediation planning. Requires expertise in AWS, NIST, RMF, PKI, SIEM, and cloud security, along with mentoring junior engineers and documenting technical architectures. The role is fully remote but requires an active Top Secret clearance and substantial security engineering experience.

Senior Security Engineer responsible for application, cloud, and platform security across an enterprise SaaS environment. The role involves building security automation and agents, integrating risk-based reviews into development, conducting threat modeling and code reviews, improving detection and observability, remediating systemic risks, and supporting compliance initiatives. The engineer will partner closely with development teams and help secure AI-powered features, cloud infrastructure, APIs, and deployment mechanisms.

Designs, deploys, maintains, and improves enterprise endpoint security solutions. Responsibilities include managing endpoint protection platforms, threat analysis, security event triage, vulnerability remediation, system hardening, compliance reporting, policy development, technology evaluation, project leadership, documentation, and mentoring junior staff. The role collaborates with Security Operations, IT Service teams, leadership, and vendors to strengthen protection against cyber threats.

Designs, deploys, maintains, and improves enterprise endpoint security platforms and controls. Responsibilities include threat analysis, security event triage, endpoint infrastructure tuning, vulnerability management, policy enforcement, compliance reporting, technical documentation, and technology evaluations. The role supports security projects, mentors junior staff, collaborates with IT and leadership, and helps strengthen protection against emerging cyber threats across the enterprise.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Lead the design and implementation of cloud-based identity governance and administration capabilities. Shape enterprise identity engineering strategy across human and non-human identities, support governance, privileged access, and federation platforms, and reduce security risks through access analysis, segregation of duties, and least-privilege enforcement. Automate identity processes integrated with HRIS systems and guide recommendations for improving governance and access controls.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.