Top Remote Cyber Security Jobs in Portland, OR

Lead hands-on product security architecture across GitLab, including design reviews, threat modeling, systemic risk remediation, security standards, prototypes, and reusable developer guardrails. Partner with engineering and product leaders, secure distributed systems and software supply chains, guide AI coding tool security, mentor security engineers, and influence technical direction through proactive architecture and clear communication.

Lead security operations and incident response engineering across hybrid cloud environments. Conduct deep-dive investigations, digital forensics, threat modeling, detection engineering, SIEM tuning, threat intelligence review, and automated remediation. Develop incident response playbooks, maintain investigation documentation, apply MITRE ATT&CK, and support incident command and SOC process optimization.

Leads Tier-3 security monitoring, threat hunting, incident response, and SLA delivery across multi-tenant environments. Serves as incident commander while engineering detections, SOAR playbooks, integrations, and AI-assisted automation using Python, APIs, LLMs, and cloud security data. Advises clients, reduces alert noise, and aligns operations with NIST, ISO 27001, privacy, and regulatory requirements.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Lead identity and access management implementations for federal and enterprise customers. Responsibilities include IAM solution design, architecture, deployment, integration, testing, troubleshooting, documentation, customer workshops, and knowledge transfer. The consultant provides technical leadership, advises stakeholders on authentication and identity governance, collaborates across project teams, and mentors junior consultants. The role requires extensive IAM consulting experience, strong security technology knowledge, active Top Secret clearance with full-scope polygraph, and customer-facing technical leadership.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Leads cybersecurity competitive strategy and execution, including deal coaching, competitive positioning, win/loss analysis, compete playbooks, field enablement, and cross-functional recommendations for sales, product, engineering, marketing, and partner teams. The role focuses on Google Security, Mandiant, Wiz, and Microsoft Security competitive scenarios, translating market and customer insights into scalable go-to-market motions and product strategy.

Provides proactive technical account management for strategic cybersecurity customers. Responsibilities include customer onboarding, platform training, health checks, issue resolution, escalation management, success planning, knowledge-base development, renewal-risk mitigation, and expansion support. The role serves as a customer advocate while collaborating with support, engineering, and sales teams. Candidates need cloud, application infrastructure, security, incident response, forensics, networking, and cloud architecture expertise, along with strong communication and customer-success skills.

Directs security operations for a complex Department of State contract. Manages security teams, develops and implements compliance procedures, investigates violations, prepares incident reports, mitigates risks, coordinates with government agencies, and ensures adherence to federal regulations and company policies. Requires strong leadership, communication, organizational, reporting, and strategic assessment skills, along with a bachelor's degree, extensive federal program management experience, U.S. citizenship, and an active Secret clearance.

Own and scale LiveKit’s vulnerability management and security operations program. Responsibilities include selecting and operationalizing scanning tools, triaging vulnerabilities, assigning owners, setting remediation SLAs, building remediation dashboards, automating compliance evidence collection, and developing automation to reduce manual security work. The role partners closely with engineering and compliance teams to prioritize risk and accelerate remediation.

Own infrastructure security for LiveKit’s production platform. Map cloud security posture, prioritize and remediate infrastructure risks, harden IAM, secrets, networks, tenant isolation, and media storage, and build secure infrastructure-as-code guardrails. Partner with compliance teams on PCI-DSS and ISO 27001 controls and automate audit evidence. The role requires cloud, Kubernetes, Terraform, scripting, and production infrastructure security experience, with AI security and real-time media experience preferred.

Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing.

Conduct application security assessments, discover and validate vulnerabilities, analyze code and architectures, perform threat modeling, build security tooling, and develop proof-of-concept exploits. Own scoped assessment components from discovery through client delivery, communicate findings and remediation guidance, and contribute to security research, open-source tools, and technical documentation. The role requires hands-on coding, vulnerability research, memory-corruption knowledge, operating-system familiarity, and independent technical investigation.

Develops secure, isolated attack scenarios across cloud, on-premises, and hybrid environments. Reproduces vulnerabilities, builds multi-step attack chains, creates automated graders and reward signals, and validates outcomes using system state and telemetry. The role also develops attack variants and benign comparisons to evaluate AI security agents, partnering with threat researchers, AI engineers, and environment engineers.

Participate in a paid, part-time cybersecurity internship involving technical development, security response, collaborative projects, shadowing, vendor training, and certifications. Complete in-house training while working with cybersecurity experts. Interns must be U.S.-based, available primarily during weekday EST hours, attend mandatory Tampa onboarding, provide a personal computer and reliable internet, and demonstrate foundational IT, networking, operating systems, and information security knowledge.

Provides customer-facing presales cybersecurity expertise by leading discovery, assessing cloud and hybrid security architectures, designing CNAPP-based solutions, delivering demonstrations and technical presentations, supporting proofs of concept, enabling sales teams, collaborating with vendors, and assisting with statements of work and post-sale handoffs.

Triage bug bounty and vulnerability management reports, validate findings, assess severity, identify duplicates, and coordinate remediation through closure. Collaborate with PSIRT, engineering, legal, communications, customer success, and security teams. Support CVE assignments as a CNA representative, communicate with researchers and customers, maintain accurate records, monitor operational metrics, and improve vulnerability-handling procedures, runbooks, and documentation.

Develop and operate cloud security solutions across Azure, AWS, Google Cloud, and Oracle platforms. Define security standards, implement least-privilege access, network segmentation, encryption, monitoring, and compliance controls. Review cloud architectures and risk assessments, automate security processes, support incident response and vulnerability remediation, and participate in DevSecOps, SAST, DAST, code review, and red-team activities. Partner with architects and business stakeholders to communicate risks and implement secure cloud solutions.

Secure Windows products and devices through offensive security research, code and design reviews, penetration testing, vulnerability discovery, fuzzing, and mitigation development. Build reusable security review tools, identify vulnerabilities in operating system features and native applications, collaborate with Windows engineering teams on durable defenses, engage security researchers, and communicate the business value of security investments.

Designs, implements, and oversees security architectures for federal systems, including zero-trust and cloud environments. Leads secure system design, control integration, detection and response architecture, and alignment with NIST and FISMA requirements. Collaborates with SOC analysts, incident responders, engineers, and leadership to build resilient, scalable security operations environments.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Provides L1 technical support for enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat investigation issues through troubleshooting and log analysis. Communicates root causes and recommendations, partners with Engineering and Product, supports onboarding, maintains knowledge documentation, and identifies recurring customer issues. Requires 4+ years of cybersecurity, SaaS, or enterprise technical support experience, strong email security and cloud ecosystem knowledge, API troubleshooting skills, and excellent communication.

Provides customer-facing cybersecurity expertise during presales engagements. Consults with CIOs, CISOs, security engineers, and procurement teams; educates sales teams; develops cybersecurity collateral, use cases, and service offerings; supports solution scoping and statements of work; and demonstrates security technologies including DLP, DSPM, DDR, and file encryption. The role requires strong cybersecurity knowledge, presales consulting experience, security framework familiarity, product expertise, and up to 20% travel.

Manages enterprise security awareness and training programs, including campaign development, content creation, global delivery, project calendars, compliance alignment, stakeholder collaboration, and outcome reporting. The role adapts training for diverse employee groups, uses creative learning methods and LMS platforms, supports security culture initiatives, and protects confidential information.