Top Remote Cyber Security Jobs in Madison, WI

Triage, investigate, and remediate security alerts from the Huntress platform. Perform forensic review of EDR telemetry, malware analysis, and cloud/M365 investigations. Escalate incidents, contribute to detection engineering, and support SOC operations and partner outcomes.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Perform 24/7 SOC monitoring and incident response across networks, endpoints, cloud and SaaS; triage, investigate, and remediate incidents; collaborate with vulnerability management, FedRAMP, and engineering teams; refine detection/playbooks; maintain incident documentation and SOC processes; support FedRAMP-related security and privacy responsibilities and periodic background investigations.

Conduct advanced OSINT and operational tradecraft to collect, track, and report on hacktivist and state-sponsored threat actor activity across South Asia, Latin America, and North Africa. Produce contextual internal reports, collaborate on analytical products, and employ secure methods to support threat intelligence operations.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Design, build, and deliver technical cybersecurity training: analyze needs, create modular learning assets (self-paced and instructor-led), validate effectiveness, coordinate with SMEs, and translate operational knowledge into trusted documentation.

Design and build custom security tools, middleware, and automations to integrate Identity, MDM, EDR, SIEM, and SaaS platforms. Implement API-driven data flows, UIs, CI/CD pipelines, SOAR playbooks, and secure deployment practices. Collaborate with Security Ops, IT, and Engineering to translate policies into automated, secure solutions.

Lead large-scale collection and analysis of deep and dark web data, build and maintain production-grade automated collection systems (LLM-integrated), operate Docker/cloud-based pipelines and APIs, respond to collection failures and incidents, perform threat actor research, and apply OPSEC tradecraft while collaborating globally.

Analyze in-the-wild exploits and perform deep reverse engineering to track adversaries. Build detection, automation, and classification frameworks; develop host/network signatures and tooling. Produce high-quality intelligence reports and briefings, collaborate across teams, and contribute to mitigation and large-scale hunting efforts.

Lead OSINT and engagement-driven investigations into Russian-language eCrime actors across surface, deep, and dark web. Collect actionable intelligence, produce contextual internal reports, collaborate with analytic teams, employ secure virtual OPSEC tradecraft, and leverage AI to accelerate research and decision-making under tight deadlines.

Lead and grow a remote Security Detection & Response team, build detection engineering and observability systems, drive telemetry onboarding, Panther and MITRE-aligned detections, Python automation, CI/CD workflows, and AI-assisted triage. Own incident response, investigations, cross-functional collaboration, and measurement of detection effectiveness.

Lead federal cloud security and compliance efforts to achieve and sustain ATOs. Implement and automate FedRAMP/IL-5/RMF controls, manage continuous monitoring, coordinate 3PAO audits, drive cloud security architecture, oversee change control/SCRs, and lead incident response and POA&M remediation using AI-enabled automation and monitoring across high-security GovCloud environments.

Lead end-to-end Application Security product and program: set strategy, prioritize roadmap, ship AI-powered threat modeling and code-evaluation surfaces, enable secure-by-design SDLC, enforce CI/CD gates, drive vulnerability prioritization/remediation, establish governance and metrics, and align security initiatives with engineering and executive stakeholders.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Lead the Application Security Practice, overseeing team performance and business growth while delivering high-quality security consulting services and fostering innovation through AI integration and research contributions.

Lead AppSec efforts across product, platform, and AI features by owning secure SDLC, performing threat modeling and deep code reviews, driving vulnerability management and remediation, building AppSec tooling and automations (including AI-assisted workflows), and enabling engineering teams with secure design guidance and training.

The Security Software Engineer will design and implement security controls for MongoDB Atlas, collaborating across engineering teams and ensuring adherence to high security standards.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

The Senior Site Reliability Engineer will lead security design and implementation for cloud infrastructures, mentor teams, and automate security solutions.

Lead end-to-end execution of a 12+ initiative product security program, managing cross-team dependencies, vendor procurement, BAU security operations, and executive reporting. Maintain roadmap and tracking in Jira/Confluence, drive procurement/POCs, produce executive-ready metrics, and establish program cadence to ensure timely remediation and predictable delivery.

Lead product vision and strategy for security operations services, defining outcomes for managed investigation, response, threat hunting, and advisory services. Partner with customer security ops, product, and marketing teams to deliver AI-driven, automated features, represent Zscaler to customers, and drive measurable security outcomes and operational alignment.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.