Top Remote Senior Level Cybersecurity & IT Jobs

Lead delivery of a centralized CIAM platform to consolidate authentication and identity verification across channels. Define roadmap for passwordless and risk-based authentication (passkeys, biometrics, device intelligence), embed AI-driven identity intelligence, drive OTP consolidation, ensure enterprise standards and governance, partner across Security, Fraud, Digital, and Technology, own delivery outcomes, adoption, and KPIs tied to fraud reduction and customer experience.

Lead cloud and identity security across Snyk's multi-cloud estate (AWS/GCP). Own cloud IAM and least-privilege, CSPM/CNAPP posture, detection and prevention, Kubernetes and enterprise IdP security. Build preventative IaC guardrails, AI/agent automation for remediation and investigations, secure AI adoption and model pipelines, and mentor engineers while participating in on-call rotations and incident response.

Lead product and application security by partnering with product and engineering to design secure features, perform code and architecture reviews, build AI-native security tooling, create developer guardrails, and support incident response, vulnerability management, and penetration testing to scale Headway's security program.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

Support Security Program Managers by designing and implementing compliance programs, configuring compliance platforms, liaising with clients and auditors, conducting tabletop exercises (incident response, business continuity), completing security questionnaires, training staff, and helping build risk management programs across cloud environments.

Owns Microsoft’s Security Compete Program, developing competitive strategy, battlecards, positioning, and objection-handling guidance for AI security offerings. Provides deal coaching, analyzes competitive wins and losses, tracks performance metrics, gathers field intelligence, and delivers executive reporting. Partners across sales, marketing, engineering, product, and regional teams to improve go-to-market execution, strengthen competitive differentiation, accelerate strategic deals, and influence product and field-readiness decisions.

Own Microsoft's CJIS authority function, representing the company before FBI, DOJ, and state agencies. Interpret CJIS requirements across Microsoft cloud and AI services, guide legal, compliance, engineering, and field teams, lead audit and inquiry responses, advise on agreements and screening obligations, support customer escalations, maintain documentation, and build organizational readiness. Monitor policy and standards changes while shaping public-sector security strategy and industry guidance.

Design and implement platform security solutions across deployments, databases, and control planes. Deliver secure, scalable code, support full product lifecycle, collaborate with Product/Architecture/DevOps/InfoSec, and resolve complex platform and product security challenges.

Leads enterprise cryptographic strategy, architecture, and post-quantum readiness. Maintains visibility into cryptographic assets, certificates, keys, and trust relationships; conducts readiness assessments; evaluates vendor preparedness; develops modernization and remediation roadmaps; and partners with infrastructure, application, cloud, manufacturing, and product teams. Provides technical leadership for PKI, certificate lifecycle management, encryption services, and cryptographic controls while supporting audits, compliance, metrics, and risk reduction initiatives.

Build and operate automated GRC systems, including continuous controls monitoring, evidence collection, compliance-as-code, policy-as-code, control testing, dashboards, access reviews, risk assessments, and vendor risk workflows. Integrate compliance tooling with cloud, identity, ticketing, CI/CD, and HR systems. Set technical direction for GRC automation, reduce audit effort, partner with compliance and risk teams, and mentor engineers and analysts.

Leads complex security alert triage, incident investigations, threat hunting, detection improvement, and incident response. Develops playbooks, operationalizes threat intelligence, builds automation, and mentors analysts. The role partners with detection engineering to improve security monitoring across cloud, endpoint, identity, network, and application telemetry while raising investigation and documentation standards.

Own and coordinate SOC 2 and ISO 27001 audits, maintain security control frameworks, conduct risk and vendor assessments, support customer security reviews, develop policies, track remediation, and improve GRC processes through automation. Partner with technical and business control owners to ensure compliance obligations are met and controls operate effectively.