Top Remote Cyber Security Jobs in Sacramento, CA

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Leads the global Network Security and Load Balancing platform team, setting strategy, architecture, automation, and operational direction. Oversees firewalls, proxies, load balancers, cloud security, Zero Trust, and micro-segmentation. Manages audits, regulatory engagements, vulnerability remediation, risk reporting, product backlogs, and stakeholder communications. Partners with cybersecurity, architecture, application, compliance, and business teams to maintain secure, compliant network platforms.

Manage daily operations of Privileged Identity applications and monitor SIEM services within IAM infrastructure. Handle end-user escalations, update documentation, review and improve PI and SIEM processes, and evolve into global strategic IAM responsibilities.

Designs, develops, deploys, and supports enterprise security automations, custom tools, integrations, and workflows. Responsibilities include Python-based application and API development, vulnerability enrichment, incident response automation, IAM administration, Linux and Docker platform support, and administration of SIEM, SOAR, endpoint, cloud, network, and other security technologies. The role also troubleshoots integrations, monitors operational health, supports security teams, and maintains resilient, secure configurations across enterprise systems.

Lead Fireworks AI’s security operations function, including CrowdStrike deployment, detection engineering, incident response, SOAR workflows, threat intelligence, playbooks, metrics, and cross-functional incident coordination. Build and tune detections, operationalize response processes, run post-incident reviews, and improve coverage against MITRE ATT&CK. The role begins as a hands-on individual contributor and may grow into team leadership, including hiring and expanding 24/7 coverage and capabilities such as cloud detection engineering and red/purple team operations.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Operate and improve cybersecurity tools and processes across cloud, endpoint, identity, application, email, network, data loss prevention, and vulnerability management environments. Respond to alerts and incidents, manage logging and SIEM telemetry, implement security controls aligned with HITRUST, NIST, CIS, HIPAA, and OWASP, support audits, and develop incident response procedures. Collaborate with a Senior Security Engineer and use AI tools to automate security operations.

Lead security architecture for a secure multi-cluster service mesh platform. Design authentication, authorization, tenant isolation, encryption, credential lifecycle, and service-to-service trust. Establish secure development patterns, threat modeling, testing, security quality gates, incident response, vulnerability discovery, and compliance practices. Implement and review Go and gRPC security systems, mentor engineers, guide technical direction, and collaborate with customers and cross-functional teams. Requires international travel to the Middle East and geopolitical hot zones up to 25% annually.

Provides information security support for federal healthcare systems, including security architecture reviews, firewall and infrastructure initiatives, security impact assessments, mitigating controls, system security plans, SOPs, and POA&M remediation. Advises development teams and customer security organizations on federal security requirements, emerging practices such as Zero Trust and SBOM, network monitoring, authentication, and data security. The role is remote and requires passing an IHS background check for Public Trust eligibility.

Own security and infrastructure for a fintech payments platform, with security comprising roughly two-thirds of the role. Responsibilities include cloud and application security, IAM, secrets management, threat modeling, detection engineering, incident response, vulnerability management, compliance, privacy, CI/CD, infrastructure as code, observability, reliability, backups, disaster recovery, and on-call operations. The role reports to the CTO and will establish the security function as the company’s founding security hire.

Act as the technical lead for strategic customers, driving adoption, deployments, architecture reviews, and executive engagements. Remove technical blockers, align cloud security strategy, partner with CSM and Sales on expansions, and provide product feedback to influence roadmap.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Leads security operations and engineering strategy, manages a 2–3-person team, and remains hands-on with WAF, DLP, AI security, automation, vulnerability management, incident response, cloud security, purple teaming, SIEM, and detection engineering. Partners with executives and cross-functional leaders, oversees vendors and tooling, reports risk metrics, and develops team capabilities and security roadmaps.

Lead solution sales for Microsoft Security with enterprise customers: identify opportunities, build solutions and business cases, manage senior relationships and pipeline, collaborate with partners and internal teams, forecast and pursue high-potential accounts, and obtain relevant product/role certifications.

Design, deliver, and support Microsoft cloud security solutions for mission-critical customers. Provide proactive and reactive support, lead architectural sessions, implement identity and Zero Trust controls, optimize Azure resiliency and security posture, coordinate incident resolution with internal teams, and contribute to on-call rotations and continuous improvement.

Lead and run engagement systems for Microsoft Security field communities: design community strategy, communications, events, and feedback loops; collaborate with cross-functional teams to drive adoption of Security priorities; measure community health and impact; support planning, readiness, and change management for security field managers and individual contributors.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead and grow a team of Security and IT technical program managers and own the cyber security and IT program portfolio. Drive prioritization, resourcing, and delivery of cross-functional security initiatives, translate strategy into roadmaps, manage risks and dependencies, and standardize playbooks and metrics.

Lead design, implementation, and maintenance of SAP security across S/4HANA, ECC, Fiori, BTP and SAP Cloud. Perform SoD analysis using GRC, manage role design and user provisioning, support upgrades and implementations, produce audit-ready documentation, mentor junior staff, and participate in CAB meetings to communicate security changes.

Supports cloud security operations through threat monitoring, vulnerability and incident analysis, compliance and governance activities, threat intelligence research, security hardening, incident triage, log analysis, and escalation. The trainee collaborates with Product, Engineering, Operations, and Support teams to apply cloud-native security practices, zero trust principles, and security frameworks while gaining mentorship and practical cybersecurity experience.

Conduct vulnerability assessments and penetration tests across web and mobile applications, cloud infrastructure, SaaS applications, network devices, and open-source projects. Develop and test DAST scanner rules, communicate with clients about remediation, guide vulnerability fixes, and maintain the vulnerability management system.

Sell Mitiga's runtime security platform to enterprise CISOs and security leaders. Manage end-to-end enterprise sales cycles from prospecting to close, build strategic territory and partner plans, collaborate with solutions engineering and customer success, and maintain accurate CRM records while consistently exceeding revenue targets.

Lead and perform HITRUST Gap, Readiness, and Validated Assessments. Define scope, test controls, validate evidence in MyCSF, produce readiness and validated reports, advise clients on remediation, and ensure compliance with HITRUST methodology and related frameworks.