Top Remote Cyber Security Jobs in Tulsa, OK

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Supports application security and information systems for a large healthcare organization. Analyzes user requirements, develops and implements system solutions, manages moderately complex projects, coordinates project teams, establishes system procedures, and provides guidance to less experienced staff. Collaborates with internal teams, vendors, and stakeholders across multiple facilities. Epic accreditation or certification is required, along with industry experience and a related bachelor's degree.

Owns compliance documentation and security control narratives for an Agentic AI platform. Responsibilities include authoring System Security Plans, managing POA&Ms, coordinating audit evidence, supporting RMF and ATO activities, maintaining policies and SOPs, and partnering with cloud, platform, and security engineers. The role validates that documentation reflects implemented infrastructure and supports CMMC, FedRAMP, DoD, and NIST-aligned compliance efforts.

Adversarially test and strengthen Generative AI models against cyber-CBRNE threats by designing red-team prompts, jailbreaks, multi-turn attacks, and scenario-based evaluations; develop test suites, taxonomies, and actionable mitigations while documenting vulnerabilities and maintaining threat and AI-safety expertise.

Conduct manual penetration tests and secure code reviews across web applications, APIs, AWS infrastructure, and AI systems. Develop AI-assisted security tooling, test LLM applications and agents, triage SAST findings, tune detection rules, support security reviews before production, and communicate risks and remediation priorities to engineering teams.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Provides security engineering and architecture expertise for FedRAMP Cloud Service Provider assessments. Reviews full-stack architectures, authorization packages, security controls, policies, assessment reports, vulnerability scans, and penetration tests for compliance with FedRAMP, NIST, FISMA, RMF, and agency requirements. Leads vendor interviews, identifies technical and documentation gaps, supports continuous monitoring, advises government program leaders and CISOs, and provides security recommendations for cloud systems.

Leads information security risk and compliance assessments, evaluates technical, administrative, and physical controls, maintains system security plans, manages remediation through POA&Ms, and supports audits. The role monitors regulatory changes, develops governance documentation, translates security requirements into practical controls, and reports risks and compliance findings to leadership while partnering with IT, Legal, Privacy, and business stakeholders.

Perform offensive security research and engineering for Windows: discover vulnerabilities, develop PoC mitigations and tools (fuzzers/agents), conduct code and design reviews, partner with product teams, and engage external researchers to improve OS security.

Build, secure, automate, and operate AWS and Kubernetes infrastructure while supporting HIPAA and SOC 2 compliance. Responsibilities include Terraform development, CI/CD security, IAM, vulnerability management, observability, SIEM integrations, incident response, infrastructure hardening, scripting, technical documentation, and cross-functional automation. The role also participates in on-call coverage and evaluates new security and infrastructure tools.

Implements Tanium cybersecurity solutions for enterprise customers, advises cybersecurity teams, develops security content, supports technical integrations, and manages projects. The role combines customer-facing consulting, technical sales support, and cybersecurity solution deployment. Responsibilities include deploying SIEM, SOAR, threat intelligence, and endpoint detection solutions from provisioning through production while advising on ransomware, attack frameworks, Zero Trust, threat hunting, malware intelligence, and cloud security posture management.

Build and scale application security for a SaaS platform by integrating SAST, SCA, DAST, secrets scanning, and container/IaC checks into CI/CD. Partner with engineering and DevOps teams on threat modeling, secure code reviews, vulnerability remediation, incident response, and secure development practices. The role also supports compliance goals and translates security risks clearly to engineers.

Leads enterprise security architecture for cloud and on-premises systems supporting a federal agency. Develops security standards, reference architectures, diagrams, policies, procedures, and hardening guidance; assesses architectures and security postures; identifies gaps and privacy requirements; supports Zero Trust, RMF, acquisition, compliance, risk management, and technical briefings. Partners with stakeholders to translate business needs into secure technical solutions and maintains architecture documentation throughout the system lifecycle.

Designs and maintains Cribl data models and security log pipelines, routing and transforming telemetry into enterprise SIEM platforms. Supports SIEM, XDR, vulnerability management, DLP, endpoint security, Linux sensors, system hardening, threat detection, and defensive security architecture. Develops Python and Bash automation, integrations, and security controls while troubleshooting complex data issues. The role is fully remote within the United States, includes occasional South Carolina onsite work, and requires on-call participation.

Implement and configure SailPoint IdentityIQ and Identity Security Cloud solutions, including identity lifecycle management, access certifications, provisioning, integrations, workflows, rules, and application onboarding. Lead or support IIQ-to-ISC migrations, gather client requirements, create technical documentation, troubleshoot deployments, and support UAT and hypercare. The role also involves client interaction, mentoring junior engineers, and contributing to reusable delivery assets in a remote consulting environment.

Leads security operations and corporate IT for a healthcare technology company handling PHI. Responsibilities include incident response, application and cloud security, IAM, endpoint management, vendor reviews, security policies, compliance support for HIPAA, SOC 2, and HITRUST, and management of three direct reports. The role also builds AI-driven automation tools and workflows for IT and security operations while partnering with executives, engineers, customers, auditors, and compliance leaders.

Monitor, investigate, and respond to global security incidents; lead incident response as an incident commander; develop security alerts, playbooks, automated actions, and escalation workflows; conduct threat hunting and threat intelligence research; improve detection, containment, and post-incident processes; collaborate with stakeholders; and participate in an on-call rotation.

Supports managed security clients through threat hunting, security event analysis, detection use-case tuning, incident documentation, remediation guidance, metrics, root cause analysis, and process improvement. Provides escalation support, mentorship, technical oversight, and collaboration with security engineering and architecture teams. Requires experience with enterprise SIEM and case-management tools, SOAR platforms, vulnerability scanning, cybersecurity frameworks, technical documentation, and 24/7 managed services operations.

Supports IT solution design and implementation, analyzes cybersecurity protocols and recommends improvements, and collaborates with data science teams to analyze data and generate actionable insights. The internship provides hands-on experience, mentorship, professional development, and exposure to aerospace technology. Candidates must be enrolled in a relevant bachelor's or higher degree program, maintain a 3.0 GPA, and graduate in December 2027 or later.

Provides pre-sales technical support and technical account management for Vectra’s cybersecurity platform. Leads customer discovery, product demonstrations, proofs of concept, technology reviews, integrations, and security architecture discussions. Builds technical relationships with customers and channel partners, supports sales teams, collaborates on deployments and product projects, and maintains expertise in security technologies, networking, cloud security, attacker progression, incident response, and competitive offerings. Regional travel is required as needed.

Monitor and investigate security alerts across client environments in a 24/7 security operations center. Analyze threats, identify malicious activity and indicators of compromise, distinguish false positives, support incident response and remediation, develop vulnerability reports, and communicate findings to technical and executive audiences. Participate in shift handoffs and rotating incident triage coverage while collaborating with incident response teams.

Own and improve Onebrief’s corporate security stack across endpoints, identity, SaaS, browsers, Zero Trust, EDR, SIEM, and MDM. Establish secure configuration baselines, detect and remediate drift, integrate telemetry, and build API-driven or infrastructure-as-code automation. Translate CMMC 2.0 and NIST-aligned requirements into continuously validated technical controls and reliable audit evidence. Partner with Corporate IT, Security Operations, GRC, and application owners to strengthen security posture and reduce manual compliance work.

Lead the creation and growth of a new OT/IoT cybersecurity practice, owning its P&L, offerings, pricing, partnerships, hiring, delivery quality, and go-to-market strategy. Serve as a senior technical SME and trusted advisor for client assessments, regulatory compliance, executive workshops, roadmaps, and security engagements. Shape and close consulting opportunities, develop methodologies and deliverables, manage teams, and advise organizations on ICS/SCADA, segmentation, monitoring, IT/OT convergence, and AI-related risks.

Leads and coordinates security and operational incident response for infrastructure, platforms, hosting, and customer environments. Serves as incident commander, manages escalations and communications, facilitates bridge calls and post-mortems, analyzes incident trends, maintains response procedures, and tracks corrective actions. Partners with technical and leadership teams to improve incident management maturity, accountability, governance, reporting, and operational transparency during high-severity events.

Leads the organization’s cybersecurity program, including security operations, incident response, vulnerability management, GRC, compliance, third-party risk, security architecture, automation, and AI adoption. Manages security staff, vendors, MDR providers, projects, policies, audits, and operational improvements while reporting risks and performance to senior leadership. The role also drives security awareness, cross-functional collaboration, incident preparedness, and team development.