Top Remote Cyber Security Jobs in Provo, UT

Provides L1 technical support to enterprise customers using cloud email and SaaS security platforms. Resolves configuration, API, integration, false-positive, and threat-investigation issues through ticket ownership, log analysis, root-cause analysis, and collaboration with Engineering and Product. Supports onboarding, maintains knowledge-base documentation, communicates customer updates, identifies recurring issues, and recommends product improvements. Requires Spanish fluency and experience supporting cybersecurity, SaaS, or enterprise technology environments.

Build and operate cloud security across AWS, Azure, and GCP; respond to security incidents; manage vulnerability data, remediation SLAs, and audit evidence; tune Microsoft security tooling; build Sentinel detections; embed security controls in CI/CD; support container security and compliance readiness across Cyber Essentials, ISO 27001, SOC 2, and ISO/IEC 42001.

Leads cybersecurity for water and wastewater OT infrastructure, including network security design, penetration testing, vulnerability audits, policy development, incident and disaster recovery planning, and security assessments. Manages project execution, mentors cybersecurity professionals, develops training, supports client relationships and business development, and oversees security deliverables for complex infrastructure projects.

Designs, deploys, maintains, and improves enterprise cybersecurity infrastructure across network, application, cloud, and on-premises environments. Responsibilities include operating firewalls and defensive platforms, managing SASE/ZTNA and SD-WAN implementations, conducting vulnerability and threat analysis, supporting incident response, maintaining secure baselines, automating operational tasks, integrating intrusion detection telemetry, collaborating with SOC and network teams, and contributing to security architecture and roadmap decisions.

Lead product strategy, roadmap, and delivery for AI-native security experiences. Partner with engineering, security research, design, and data science teams to translate emerging technologies into customer value. Establish operational readiness practices covering release governance, risk management, quality reviews, incident learning, executive readiness, onboarding, adoption, and partner success. Drive complex cross-organizational programs and ensure scalable, reliable launches and measurable customer outcomes.

Manages information assurance and cybersecurity support for DHS/TSA, including incident response, vulnerability management, risk and compliance activities, RMF documentation, security assessments, audits, and authorization support. Leads cybersecurity teams, coordinates with system owners and stakeholders, monitors performance, mitigates risks, develops security architectures, and ensures compliance with FISMA, FedRAMP, ISO 27001, NIST RMF, and DHS policies.

Develop and advance the organization’s Insider Threat Program by assessing capabilities, creating behavioral indicators, enhancing detection analytics, and investigating suspicious activity. The role analyzes security, fraud, and behavioral telemetry; configures monitoring technologies; reduces false positives; produces risk reporting and metrics; and partners with Cybersecurity, Fraud, HR, Legal, Risk, and Technology teams to improve insider-risk detection and response.

Manage DoD Risk Management Framework accreditation activities for a Navy information system, including IATT and ATO packages, vulnerability scanning, POA&M tracking, security documentation, risk assessments, and compliance monitoring. Support AWS GovCloud systems, DevSecOps teams, system authorization, STIG remediation, security controls, and coordination with DISA, Fleet Cyber Command, and technical stakeholders. Maintain system security posture and provide risk reports, mitigation recommendations, and status briefings.

Designs, deploys, and improves information security solutions. Responsibilities include vulnerability scanning, penetration testing, risk assessments, network and system monitoring, incident investigation and response, firewall and encryption implementation, security control assessments, compliance reviews, policy development, technical documentation, and staff security guidance.

Protects information systems, data, and operations by assessing security risks, vulnerabilities, and control gaps; monitoring alerts and access activity; investigating security incidents; implementing safeguards; reviewing access controls; maintaining risk, incident, and compliance records; tracking remediation; and developing security policies, procedures, standards, and awareness materials.

Supports IT security governance, risk management, and compliance programs, including third-party risk assessments, PCI-DSS compliance, internal risk reviews, vulnerability management, security policy development, and remediation of control gaps. The role applies security frameworks, assesses cloud and technology risks, collaborates across departments, and supports privacy-related requests. This remote U.S. position requires travel to Nashville two to four times annually.

Own the strategy, roadmap, integrations, APIs, packaging, and commercial success of an AI SOC platform supporting MDR, MXDR, managed network security, and cloud security. Drive AI-assisted detection, triage, investigation, and response automation; multi-tenant MSSP delivery; partner onboarding; governance; competitive positioning; and business cases. Present strategy to customers, partners, sales teams, and executives while tracking automation, cost-to-serve, adoption, retention, and partner revenue metrics.

Leads strategy, roadmap, execution, and commercialization for managed network and cloud security products, including SASE/SSE and web/email security. Oversees product managers and owners, platform investments, P&L, business cases, migrations, modernization, and executive reporting. Partners with Engineering, R&D, Sales, Marketing, and SOC operations to align product direction with customer needs, technical capacity, and revenue goals.

Build and operate security infrastructure protecting MongoDB Atlas across AWS, Azure, and GCP. Responsibilities include hardening Linux hosts and containers, implementing Kubernetes security controls, managing CSPM and workload identity platforms, deploying security controls through Terraform and other IaC tools, and creating monitoring and alerting systems. The role leads initiatives from threat modeling and architecture through implementation, rollout, and ongoing production reliability.

Build and operate security infrastructure for MongoDB Atlas across AWS, Azure, and Google Cloud. Responsibilities include hardening Linux hosts and containers, implementing cloud security controls, workload identity, vulnerability management, Infrastructure-as-Code, runtime threat detection, and monitoring systems. The role leads initiatives from threat modeling and architecture through deployment and long-term production reliability.

Leads adversary emulation, red team operations, penetration testing, cloud and application security assessments, and development of offensive tooling. Simulates advanced threats across hybrid environments, evaluates detection and response controls, coordinates third-party testing, tracks remediation, produces executive reports, conducts purple team exercises, and mentors junior staff.

Lead product security assessments and penetration testing across MongoDB products and cloud environments. Conduct threat modeling, code analysis, architecture reviews, vulnerability verification, and attack research. Use AI and automation to improve assessment workflows, collaborate with engineering teams on remediation and secure coding, and advise on container security and secrets management. Coordinate with red and detection teams while mentoring others and communicating findings to technical and non-technical stakeholders.

Designs, implements, and operationalizes AI security and GenAI data protection controls across enterprise AI usage. Engineers AI Gateway policies, detection logic, monitoring, coaching, redaction, quarantine, and blocking capabilities. Integrates telemetry with SIEM, SOAR, ITSM, identity, and data protection platforms. Assesses risks involving AI agents, MCP, APIs, non-human identities, and third-party integrations while improving control effectiveness, documenting standards, supporting audits, and partnering with technical and business teams.

Designs, builds, and operates cloud-native DFIR tooling, automation, integrations, data pipelines, CI/CD infrastructure, and engagement environments. Maintains security controls, observability, patching, vulnerability management, and operational reliability. Participates in incident response, on-call support, post-incident reviews, documentation, and collaboration with IT, DevOps, product, and detection engineering teams.

Implements, migrates, supports, and provides design assistance for enterprise network security solutions. The role serves as a technical SME for firewall platforms, performs network assessments, executes complex firewall and SD-WAN migrations, troubleshoots hybrid environments, develops technical documentation, and leads client-facing technical discussions. It also provides mentorship, knowledge transfer, and project collaboration across on-premises and cloud networking environments.

Represent security compliance with customers, map frameworks to Zscaler capabilities, create reusable playbooks, educate sales teams, and complete security questionnaires and assessments. Translate technical security and data-protection concepts into business and sales messaging while supporting frameworks including NIST, ISO 27001, DORA, GDPR, PCI, and HIPAA. The role requires customer-facing credibility, compliance expertise, security architecture knowledge, and the ability to leverage AI-driven workflows.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Build GitLab code security capabilities spanning dependency analysis, SBOM and lockfile parsing, vulnerability detection, AI-assisted analyzers, and automated dependency remediation. Design evaluation harnesses, package analyzers for CI and AI workflows, improve security report accuracy, and extend ecosystem coverage. Own initiatives from design through delivery, mentor engineers, collaborate across product and engineering teams, document systems, and participate in on-call support.