Top Remote Senior Level Cybersecurity & IT Jobs

Build and advance application and product security across the engineering organization. Responsibilities include establishing secure defaults, CI guardrails, security requirements, threat modeling, risk assessments, penetration testing, vulnerability remediation, secure coding education, roadmap ownership, and hands-on code review. The role partners closely with product, engineering, DevOps, and services teams to secure applications, microservices, and AI features while enabling efficient development.

Own and improve enterprise security platforms, cloud and infrastructure security, identity governance, endpoint protection, vulnerability management, incident response, network controls, and DevSecOps practices. Lead complex security initiatives, compliance controls, vendor assessments, security architecture reviews, and AI security governance. Build automation with PowerShell and Python, partner with IT Operations and DevOps, reduce manual work, and serve as the senior escalation point for technical security incidents.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Design, build, and operate security-focused software, services, automation frameworks, APIs, and developer platforms. Integrate security controls into CI/CD and cloud-native workflows, implement identity and access-management capabilities, conduct secure code reviews and threat modeling, and maintain security telemetry systems. Collaborate with engineering, security, and compliance teams, support incident response, translate emerging threats into engineering requirements, and mentor engineers on secure coding and architecture.

Leads the enterprise Red Team program, managing offensive security professionals and directing adversary emulation, Purple Team engagements, assumed-breach exercises, and AI security testing. Partners with cybersecurity, technology, legal, risk, and detection teams to improve controls, response, and resilience. Establishes operating standards, tools, metrics, and guardrails; translates findings into risk mitigation recommendations; supports compliance activities; and communicates outcomes to technical stakeholders and executives.

Leads application security, vulnerability management, threat detection, AI-driven security automation, and security engineering. Administers SAST, DAST, SCA, SIEM, EDR, IAM, and cloud security platforms; develops MITRE ATT&CK-mapped detections; investigates Tier 2/3 incidents; builds Python-based automation and AI agent integrations; supports architecture reviews, penetration testing, policy development, threat intelligence, compliance, and security reporting.

Lead the design of secure AI and machine learning architectures, including LLM pipelines and automated decision systems. Conduct AI threat modeling, develop governance standards, evaluate security technologies and vendors, and ensure regulatory and framework compliance. Partner with engineering, data science, legal, and leadership teams on security-by-design. Create technical documentation and data flow diagrams while mentoring security professionals and data scientists.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.