Top Remote Cyber Security Jobs in Provo, UT

Perform advanced offensive security work: conduct complex penetration tests, teach and integrate offensive tradecraft into the AI platform, harden product and company defenses, and collaborate with core engineers to build and ship capabilities that automate red-team techniques.

Design and integrate diverse cybersecurity and IT tools into an AI engine, ensure common data/function models, advise on autonomous security analysis, and own corporate security posture for endpoints, cloud, and build pipelines.

Own product security across the SDLC: threat modeling, secure design reviews, application security testing (code review, SAST/DAST), supply-chain/dependency hardening, CI/CD security, and building automated security tooling and guardrails while partnering with engineering and product.

Lead cybersecurity advisory engagements including building GRC programs, conducting compliance readiness and ITGC assessments, executing remediation roadmaps, directing incident response exercises, performing IT risk assessments, managing GRC platforms, and delivering client-facing recommendations and project management.

Serve as part-vCISO and account manager: assess client security posture, design and customize security programs mapping controls to infrastructure, liaise with auditors, guide implementations, advise engineering on integrations, and communicate with stakeholders to ensure compliance and operational security.

Own integration, configuration, and output quality of security tooling; tune findings to reduce noise; design severity scoring, triage flows, and enrichment; build a security judgment layer; partner with engineering, product, and design; engage with customers; benchmark and contribute to open-source security tooling.

Perform advanced security evaluations and research on embedded devices, including firmware reverse engineering, low-level code review, hardware hacking, exploit development, and vulnerability assessments. Build tools, communicate findings to technical and non-technical stakeholders, publish research, and support engagement scoping and business development.

Lead design, implementation, and management of security infrastructure across on-prem, cloud, and hybrid environments. Drive incident response, threat detection tuning, vulnerability assessments, risk and compliance (HIPAA, PCI-DSS, NIST, ISO 27001), security policy development, and security training. Collaborate with IT, DevOps, legal, and procurement to integrate security into SDLC and vendor selection.

Build and operate an internal Red Team to continuously find vulnerabilities across protocol, consensus, bridges, and execution clients. Develop Rust-based fuzzers and custom security tooling, simulate economic attacks on testnet, analyze game-theoretic risks (MEV, staking), and partner with engineering teams to review critical architecture and mitigate exploits.

Design, implement, and monitor internal security tooling and controls across endpoints and infrastructure. Enforce endpoint configurations via MDM, manage identity and zero-trust SSO solutions, automate security operations with IaC and scripting, perform log analysis and incident response, and collaborate with client platform and IT teams to harden systems and support threat hunting.

Lead design and management of security architecture (SIEM, EDR, DLP, firewalls, VPNs), drive incident response and detection tuning, perform vulnerability and risk assessments, support compliance/audits (HIPAA, PCI-DSS, NIST, ISO 27001), and provide cross-functional security guidance and training.

Lead enterprise strategy and engineering to defend against AI-powered threats. Design detection, prevention, and response architecture for adversarial AI, integrate controls into cyber tooling, build threat models, prototype defensive AI, and mentor teams while influencing leadership and vendor selection.

Lead and implement security guardrails for AI-enabled development and AWS cloud infrastructure. Design IAM and least-privilege controls, secure AI/ML pipelines, integrate security into CI/CD and developer tooling, run cloud/IAM audits, build AI-driven security monitoring and incident response, ensure HIPAA and other compliance, and mentor engineering teams.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Serve as a public-facing Web3 security researcher: engage the community via social media, speak at conferences, give interviews, collaborate cross-functionally with CertiK teams, and support marketing and product feedback while performing technical Web3 security work.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform end-to-end blockchain security services including consulting, manual code reviews and audits of smart contracts and protocols (Solidity, Go, Rust), threat modeling, property-based and gas-related testing, penetration testing, and deliver detailed security assessments to clients.

Perform guided audits of smart contracts, blockchain protocols, and dApps to identify and remediate vulnerabilities. Contribute to security tooling and research, explore attack vectors, and support process and methodology improvements under senior guidance.

Perform smart contract and blockchain audits to find and analyze vulnerabilities, define attack models, extract exploit characteristics to build feature-analysis tooling, and research/adopt analysis tools and emerging blockchain security technologies.

Own outbound field motion for Identity Threat Protection launch, validate messaging in live deals, synthesize field intelligence into product recommendations, run adoption diagnostics, and provide technical escalation support for complex identity situations.

Support pre-sales and post-sales technical engagements for Keeper's DevOps-focused cybersecurity products. Conduct technical discovery, demos, trials, integrations, and level-2 support for CI/CD, container, and cloud-native environments. Act as DevOps SME, collaborate with sales and engineering, produce technical training, maintain Salesforce records, and travel to customer meetings as needed.

Customer-facing Sales Engineer responsible for technical pre-sales: building relationships with partners and customers, delivering product presentations and demos, aligning solutions to prospect needs, engaging C-level stakeholders, supporting sales teams, and representing the company at industry events and trade shows.