Remote (US)

Remote Cybersecurity Jobs (US)

364 jobs found

Include remote jobs

All (404) 🌍 Worldwide (61) 🇺🇸 US (336) 📍 Location-specific (7)

Today

Cloud Security Engineer - Azure Defender/Prisma Cloud/Cortex Cloud

PNC Financial Services Group Pittsburgh, PA 🇺🇸 Remote

Pittsburgh, PA

Today

$91k - $203k/yr Full time Cloud Platforms Cloud Security Cloud Security Assurance

Apply Now

Job Description

Remote eligible Cloud Security Engineer role focused on CNAPP control ownership, vendor partnerships, and cloud security dashboard delivery.

Responsibilities

Partner with teams that own technical controls supported by Cortex Cloud; coordinate evaluation and testing to confirm fit and reduce tool sprawl
Own the vendor relationships for Azure, AWS, and Palo Alto
Provide recurring attestation evidence for each Cloud Security Control, as required
Review and analyze controls on an ongoing basis to validate effectiveness and recommend modifications to meet high standards
Identify gaps and determine whether net-new controls are needed
Assess whether existing controls are no longer applicable
Work with the Cloud Security team to automate attestation evidence
Determine which manually collected evidence items can be automated
Develop cloud security dashboard UI using Microsoft PowerBI
Provide statistics on dashboard usage
Engage customers to gather requirements and build a backlog for the Cloud Security Roadmap
Provide subject matter expertise applying security concepts
Use technical knowledge and industry experience to design, build, and maintain technology solutions
Deliver work aligned to project timelines
Partner with architecture to translate high-level designs into implementation specifics, including sizing, integration details, onboarding, and operationalization
Evaluate patches, updates, and ongoing maintenance activities
Determine impacts to existing solutions when new standards are implemented
Use change control and other governance processes to ensure alignment
Develop detailed implementation, configuration, design, and engineering documentation
Build and implement solutions
Work with operational partners to enable transition and day-to-day supportability
Provide engineering support for existing production technology, collaborating with other groups as needed
Seek opportunities to expand a broad knowledge base to complement specific subject matter expertise

Requirements

Ability to work effectively with ambiguity
Comfort creatively approaching work to move the role’s key pillars forward
Ability to build and maintain relationships
Ability to understand customer needs
Ability to influence partners to adopt CNAPP capabilities
Technical skills with a high-level understanding of CNAPP, controls, and dashboard development
Preferred: working knowledge with at least one CNAPP platform such as AWS, Azure, or Palo Alto
Typically requires a university/college degree and 5+ years of industry-relevant experience
Specific certifications are often required

Technologies

Cortex Cloud
CNAPPs
AWS
Azure
Palo Alto
Microsoft PowerBI

Benefits

Medical/prescription drug coverage (with an HSA feature)
Dental and vision options
Employee and spouse/child life insurance
Short and long-term disability protection
401(k) with PNC match
Pension and stock purchase plans
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance (including select programs fully paid)
Robust wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year (unless otherwise required by law)
Between 15 to 25 vacation days each year, depending on career level

Remote Work Details

Work may be performed from a quiet, confidential home location approved by PNC
Not available in all geographic locations
Remote work in select locations may be available subject to approval by PNC
If approved, the work location must be quiet, secure, and confidential
Occasional in-office participation may be required based on business needs

Preferred Skills

Cybersecurity
Data Security
Endpoint Security
Incident Response
Information Security
Network Security
Quantum Computing
Security Information
Security Operations
Vulnerability Management

Competencies

Analytical Thinking
Effective Communications
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
IT Systems Management
Network and Internet Security
Problem Solving
Technical Troubleshooting

Pay & Schedule

Base salary: $91,000.00 – $202,800.00 per year
This role is incentive eligible; incentive payment based on company, business, and/or individual performance
Application window expected to be posted for two business days from 10/26/2026 (may be longer at business discretion)

Accessibility & Accommodation

For accommodations during the application process, contact AccommodationRequest@pnc.com with subject line “accommodation request” and include name, job ID, and preferred method of contact
Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance
Information provided is kept confidential and used only as required to provide reasonable accommodations

Equal Employment Opportunity

PNC provides equal employment opportunity regardless of protected status categories
Position is subject to requirements of Section 19 of the FDIA, and for registered roles, SAFE Act and/or FINRA requirements which prohibit hiring individuals with certain criminal history

California Residents

Refer to the California Consumer Privacy Act (CCPA) Privacy Notice for how PNC may use or disclose personal information in hiring practices.

View full job page →

Today

Penetration Tester

Centurion Consulting Group Woodlawn, MD

Woodlawn, MD

Today

Full time Cybersecurity Penetration Tester Information Security InfoSec

Apply Now

Job Description

Centurion Consulting Group is seeking a Penetration Tester for an on-site position in Woodlawn, MD (United States). The role focuses on hands-on security testing across web, infrastructure, and network environments.

What you’ll do

In this on-site role, you will perform penetration testing activities across multiple domains, helping ensure teams can identify and address security weaknesses before they can be exploited.

Conduct Web, Infrastructure, and Network related penetration testing.

What you bring

OSCP Certification is required.
Experience with Web Application Penetration Testing.
Proven ability in Penetration Testing and Vulnerability Assessments.

Nice to have

Red Team Operations
Experience with C2 frameworks
Experience related to malware creation

Location and education

Location: United States (onsite), Woodlawn, MD
Education: Bachelors

View full job page →

1d ago

Application Security Program Manager

Knowledge Services United States 🇺🇸 Remote

United States

1d ago

Contract Manager Application Security Application Security Program

Apply Now

Job Description

Knowledge Services is hiring a remote Application Security Program Manager (contract) to help the State of Maine transition and sustain application security practices within the SSDLC.

Responsibilities

Support the Information Security Office in transitioning the State’s secure software development lifecycle (SSDLC) from near-complete modernization to a sustained operating program.
Coordinate the people, decisions, workflows, and measures needed to make application security practices workable across State technology teams.
Shift from transition activities to adoption, performance, risk reduction, and continuous improvement across the application security portfolio.
Lead a cross-functional program management effort across application security stakeholders.
Partner with Vulnerability Management, Security Architecture, Governance Risk and Compliance (GRC), Application Development, GitHub Governance, infrastructure and platform teams, agency product owners, and vendors.
Drive follow-through, adoption, and accountability across stakeholders, escalating decisions to the appropriate owner while specialist teams retain authority for technical, product, and risk approvals.
Oversee application security efforts across multiple teams to improve the State of Maine’s security posture.
Coordinate handoff from project deliverables to owned processes, including named owners, documented handoffs, decision paths, service expectations, and an operating cadence.
Maintain a program roadmap covering priorities, dependencies, risks, and an improvement backlog.
Validate and improve the application risk profile and security workflows, including design review, scanning, finding triage, remediation, exceptions, and release workflows.
Ensure guidance aligns with real tools, different applications, and vendor models.
Plan rollout waves with development and platform partners; support security champions, training, office hours, and developer-facing guidance.
Collect feedback and remove barriers that prevent teams from consistently applying the workflow.
Help product and development teams convert findings into risk-ranked plans with owners, target dates, and closure evidence.
Track coverage gaps, aging findings, blockers, and escalations while responsible teams remediate and verify results.
Facilitate working groups and leadership reviews; maintain a responsibility model; route design questions through Security Architecture and policy, exception, and risk decisions through GRC and authorized Information Security Office leadership.
Define measures with data owners and coordinate trustworthy reporting on application coverage, adoption, remediation, exceptions, and control performance; use trends and stakeholder feedback to propose changes and adjust priorities.
Coordinate related initiatives across repository governance, security tooling, platform integration, third-party application security, and developer enablement.
Surface capacity, funding, and service dependencies; prepare concise options and recommendations for leadership.

Requirements

8 to 10 years of experience in leadership roles and cybersecurity program management, including change agent work improving application security program maturity.
Experience improving application security program maturity.
Stakeholder Management and Organizational Change Management leadership.
Working knowledge of Secure Software Development Lifecycle (SSDLC).
Certification in code and dependency scanning.
Strong facilitation, writing, and stakeholder communication skills.
Substantial experience managing complex technology, cybersecurity, or application security programs across multiple teams, delivering through influence and shared accountability.
Knowledge of software delivery and application security concepts, including security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
Ability to translate technical and policy issues into clear actions, owners, decisions, and management reporting.
Experience establishing repeatable processes, coordinating organizational change, using measures to improve performance, and managing competing priorities in an evolving program.
Experience implementing, operationalizing, or governing SSDLC practices across multiple development teams.

Tech Stack

Secure software development lifecycle (SSDLC)
GitHub
Governance Risk and Compliance (GRC)

Additional Details

Location: United States (remote)
Contract: through end of June 2027 (likely extension)
Time zone: remote work acceptable for candidates residing in EST or CST time zones
Work eligibility: cannot accept candidates requiring C2C or requiring sponsorship for a work visa

Why This Role

Impact the trajectory of application security in the State of Maine by supporting integrity and confidentiality of critical systems.
Work within a large IT enterprise supporting critical State applications.
Contribute to protecting citizens’ data and enabling secure operation of essential government services.

Why Candidates May Like It

Immersion in rapidly evolving state government issues with a fast-moving organization.
Collaboration with peers and exposure to creative problem-solving approaches.
Opportunities to tackle unique and complex projects in application security.

View full job page →

1d ago

Penetration Tester / Ethical Hacker

Experis New York, NY 🇺🇸 Remote

New York, NY

1d ago

$70 - $70/hr Full time Ai Security Application Security Cloud Platforms

Apply Now

Job Description

Support global information security effectiveness through penetration testing and red team engagements across modern environments.

Responsibilities

Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS, Azure, GCP), and internal systems.
Perform manual exploitation and vulnerability validation to reduce false positives and uncover logic flaws automated tooling may miss.
Design, configure, and run automated vulnerability scanning pipelines to increase coverage and consistency across engagements.
Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation.
Run red team engagements simulating APT tactics, techniques, and procedures (TTPs), with tracking and documented activity.

Requirements

3+ years of direct experience performing penetration testing, red teaming, or ethical hacking in an active corporate environment.
Ability to plan and execute penetration tests and red team engagements, including comfort operating in terminal environments.
Working knowledge of common networking protocols: HTTP, DNS, SMB, and related fundamentals.
Familiarity with Windows and Linux systems.
Proficiency with cross-platform scripting languages such as Python or Golang, and PowerShell.
Hands-on experience with industry-standard tools including Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset.

Tech Stack

Cloud: AWS, Azure, GCP
Scripting: Python, Golang, PowerShell
Security testing tools: Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, Kali Linux
Protocols: HTTP, DNS, SMB

Location and Work Details

Location: New York, NY (remote)
Timezone: Remote (EST hours)
Salary: USD 70 per hour
Employment type: W-2 only

What’s In It For Me?

Drive real security value by improving the effectiveness of information security capabilities across business units.
Work on advanced testing approaches combining manual exploitation with automated scanning and AI-agent-driven workflows.
Perform threat-informed testing by analyzing cyber threat intelligence for actionable takeaways.
Create executive-ready and client-ready documentation via executive summaries and in-depth technical reporting.
Collaborate with teams by translating testing objectives and findings into plain English and actionable remediation guidance.

View full job page →

3d ago

Cybersecurity Resilience Lead

Microsoft United States

United States

3d ago

$120k - $261k/yr Full time Cyber Resilience Cybersecurity Tools Incident Response

Apply Now

Job Description

Lead proactive resilience improvements for customers as part of Microsoft’s Detection and Response Team (DART). This United States onsite role focuses on designing resilience assessments and exercises, advising executives, and partnering across incident response and technical teams to strengthen durable response capability.

What you’ll do

Set resilience engagement objectives, customer outcomes, priorities, and evidence requirements, then lead proactive workstreams across enterprise on-premises and cloud environments.
Design and deliver readiness assessments and learning simulations, including tabletop exercises, cyber range activities, playbook development, and threat modeling engagements to improve incident response readiness.
Convert technical and operational findings into risk reduction actions and executive-ready recommendations.
Run workshops to evaluate customer incident response plans, roles, escalation paths, communication models, evidence readiness, and recovery dependencies, identifying what is mature, uncertain, and needs validation.
Facilitate customer workshop sessions and stakeholder discussions that align technical and operational teams, executives, and other business functions around practical response improvements.
Partner with internal teams across incident response, threat hunting, infrastructure, reverse engineering, product, and operations to improve service capabilities and offering quality.
Incorporate customer feedback, field insights, and lessons learned to improve resilience offerings, engagement methods, and DART readiness practices.
Maintain engagement documentation covering objectives, decisions, risks, dependencies, and next actions, supporting final reporting and lessons learned.
Orchestrate evidence-driven proactive engagements and communicate clear priorities, recommendations, and readiness improvements to customers.

Minimum qualifications

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field, OR Master’s Degree in the same areas plus 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
OR Bachelor’s Degree in the same areas plus 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
OR equivalent experience.

Additional requirements

Ability to meet Microsoft, customer and/or government security screening requirements, including the Microsoft Cloud Background Check and any additional checks needed for customer or government work.
Experience in incident response, incident management, crisis management, resilience, security operations, or enterprise risk reduction.
Demonstrated experience planning, coordinating, delivering, and evaluating business resilience exercises such as table-tops, cybersecurity workshops, readiness assessments, incident response plans, or operational resilience engagements.
Experience reviewing, assessing, and developing resilience-related technical and operational programs/plans (including business continuity management, crisis management, operational resilience, technical resilience, and incident response).
Proven ability to evaluate and communicate improvement opportunities across stakeholder cybersecurity technical and operational risk, including consolidation of inputs, disruption risk assessment, and recommended remediation efforts.
Ability to guide stakeholders, build agreement, and translate technical issues into practical actions for teams with different technical knowledge levels.
Experience applying cybersecurity or resilience frameworks such as NIST, MITRE ATT&CK, ISO 27001, or equivalent guidance in customer-facing work.
Customer-facing written and verbal communication, including executive briefings, facilitation, and clear documentation.
Sound judgment, accurate record keeping, operational discipline, and effective follow-the-sun handovers.
Flexibility to work non-standard business hours, potentially including evenings, nighttime, weekends, and/or holidays.
Experience delivering cyber range exercises, tabletop exercises, purple-team style scenarios, or customer readiness programmes.
Track record leading or developing enterprise business continuity, crisis management, or incident response programs.
Cloud security experience in hybrid environments, with practical understanding of identity, endpoint, network, and recovery dependencies.
Research, process improvement, offering development, or technical mentoring experience that strengthens resilience capability.
Certifications such as CISSP, CISM, DRI, GIAC, or equivalent practical expertise.
Resilience under stress and ability to collaborate across globally distributed teams, customers, and partners.

Pay and benefits

Salary: USD 119,800 - 261,000 per year (base pay range across the U.S. is USD 119,800 - 234,700 per year).

There is a different range for specific work locations: San Francisco Bay area and New York City metropolitan area (base pay range USD 160,200 - 261,000 per year).

Certain roles may be eligible for benefits and other compensation. Find additional information here: https://careers.microsoft.com/us/en/us-corporate-pay.

View full job page →

3d ago

Operational Technology Cybersecurity Consultant

Transit Safety & Security Solutions Inc United States

United States

3d ago

Contract Industrial Control Systems Industrial Control Systems Security Industrial Cybersecurity

Apply Now

Job Description

Transit Safety & Security Solutions Inc provides operational technology (OT) cybersecurity consulting on an as-needed, project-based basis for organizations focused on keeping critical systems secure and dependable. In this contract role (onsite in the United States), Operational Technology Cybersecurity Consultant(s) help identify, assess, and reduce cybersecurity risks across OT, Enterprise Control Systems (ECS), and associated IT/OT environments. The work supports improved security and resilience while maintaining operational availability, safety, and reliability.

Responsibilities

Conduct cybersecurity risk assessments of OT, ICS, SCADA, networks, and related IT/OT environments.
Identify cybersecurity vulnerabilities, threats, control deficiencies, and operational risks, then recommend mitigation strategies aligned to OT realities.
Lead or support gap assessments, maturity assessments, vulnerability assessments, and security-control reviews.
Support implementation and assessment of cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST SP 800-82, NIST SP 800-53, and ISA/IEC 62443, along with other regulatory or client requirements.
Provide FTA, FRA, and other sector-specific guidance where applicable.
Develop risk registers, prioritized remediation plans, and recommendations tailored to the client’s OT environment and tolerance for operational disruption.
Prepare assessment reports, technical memoranda, risk analyses, findings, recommendations, and executive-level presentations.
Support cybersecurity requirements across the system development and project lifecycle.
Coordinate with system engineers, IT personnel, operations staff, vendors, contractors, and client cybersecurity teams.
Perform OT cybersecurity architecture and design reviews for existing systems and new projects.
Review or advise on OT network architecture, zoning, and conduits.
Evaluate network segmentation, remote access, authentication, asset management, monitoring, logging, patch management, vulnerability management, and incident-response capabilities.
Recommend and advise on hardening of OT assets and supporting infrastructure, including secure baselines and patching strategies that respect safety and operations constraints.
Assist with OT/ICS cybersecurity asset inventories, system categorization, risk registers, and remediation plans.
Provide guidance on secure remote access and vendor connectivity, OT operator and engineer access management, and monitoring/logging integration with SOC/SIEM for OT events.
Review system designs, specifications, network diagrams, cybersecurity documentation, vendor submissions, and technical requirements.
Collaborate on and evaluate third-party and supply-chain cybersecurity risks tied to OT systems, vendors, and equipment.
Help clients develop and implement cybersecurity programs, policies, standards, procedures, and technical controls.
Develop cybersecurity requirements for procurements, contracts, system implementations, upgrades, and capital projects.
Advise on alignment with applicable cybersecurity and privacy laws and regulations, including state breach-notification laws and sector-specific requirements.
Support contractual and insurance-driven cybersecurity obligations where relevant.
Participate in client meetings, workshops, technical reviews, audits, and cybersecurity compliance activities.
Assist with OT incident-response and recovery procedures and support tabletop exercises when required.
Track identified vulnerabilities and cybersecurity risks through remediation and closure.
Maintain awareness of emerging OT cybersecurity threats, vulnerabilities, attack techniques, technologies, regulatory requirements, and industry best practices.
Develop OT playbooks and incident severity classification for OT assets.
Provide incident containment consulting to triage and identify attack vectors, recommend immediate containment/mitigation steps (subject to client operational and safety constraints), and coordinate with internal teams and third-party responders.
Develop and deliver remote training content for OT engineers and maintenance personnel, control room operators, and management and executive stakeholders.
Perform additional cybersecurity consulting duties as assigned based on project and client requirements.

Technologies

NIST Cybersecurity Framework (CSF)
NIST SP 800-82
NIST SP 800-53
ISA/IEC 62443
SOC/SIEM

Engagement Summary

Provide cybersecurity consulting, assessment, risk management, and technical advisory services for OT, ECS, and associated IT environments on an as-needed, project-based basis.
Identify, assess, and mitigate cybersecurity risks affecting critical operational systems and infrastructure.
Work with engineering, information technology, cybersecurity, safety, operations, project management, and client stakeholders to improve OT security and resilience while maintaining safety and reliability.
May support the company’s communications infrastructure, SCADA systems, and other critical infrastructure.

Scope of Services: Services may be engaged depending on statements of work or project assignments.

View full job page →

8d ago

Adjunct, Cybersecurity and the Role of Artificial Intelligence in Emergency Management

University of St Thomas Saint Paul, MN 🇺🇸 Remote

Saint Paul, MN

8d ago

$1,000 - $5,600/mo Full time Adjunct Adjunct Faculty Ai Security

Apply Now

Job Description

The University of St Thomas seeks an adjunct faculty member to support graduate education focused on emergency and disaster management, with an emphasis on cybersecurity and the role of artificial intelligence in emergency operations. This role will be delivered as an 8-week, fully online, asynchronous course during Fall 2027.

Course Overview

The selected adjunct instructor will teach and/or develop an 8-week graduate course in Emergency and Disaster Management on Cybersecurity and the Role of Artificial Intelligence in Emergency Management. The course format is fully online and asynchronous for graduate learners.

Responsibilities

Develop and/or teach graduate-level course content for an 8-week, online, asynchronous course.
Integrate relevant professional experiences, case studies, and current research into course materials.
Examine cybersecurity threats to critical infrastructure and their implications for emergency preparedness, response, and recovery.
Address applications, opportunities, and challenges of artificial intelligence in cybersecurity and emergency management.
Evaluate student learning using assignments, discussions, and other appropriate assessment methods.
Provide timely feedback and maintain regular communication with students throughout the course.

Required Qualifications

Hold a master’s degree in a relevant discipline.
Meet at least one of the following:
- At least 10 years of relevant professional experience; or
- A sustained record of scholarly achievement demonstrated by at least four academic works, such as peer-reviewed publications, books, book chapters, funded research, or other recognized scholarly contributions.
Relevant experience may include cybersecurity operations, information assurance, critical infrastructure protection, cyber risk management, emergency management, disaster response, artificial intelligence applications, or related areas.

Relevant Disciplines

Cybersecurity, Computer Science, Information Technology, Information Systems
Artificial Intelligence, Data Science, Information Assurance, Cyber Operations
Emergency Management, Homeland Security, Intelligence Studies, Criminal Justice
Public Administration, Public Policy, Risk Management, Engineering
Or other closely related fields

Preferred Expertise

Cybersecurity threats and risk management
Critical infrastructure protection
Cyber incident response and recovery
Artificial intelligence applications in cybersecurity and emergency management
Cybersecurity policy and governance
Integration of technology into emergency preparedness, response, and decision-making

Location and Work Arrangement

Saint Paul, MN (remote).

Compensation

The salary range is USD 1,000 to 5,600 per month, depending on student enrollment.

Initial course development compensation is listed as $4,000.

Application Process

Applications should be submitted by December 1, 2026. The position will remain open until filled.

Submit a current curriculum vitae or résumé and a cover letter.
The cover letter should highlight relevant academic credentials, professional experience, and qualifications to teach the course.
Candidates may include information about teaching experience, online instruction, scholarly publications, research, or other professional accomplishments.
Application materials should demonstrate how the background and expertise align with the course content and minimum qualification requirements.