Remote (US)

Remote Cybersecurity Jobs (US)

125 jobs found

Include remote jobs

All (140) 🌍 Worldwide (13) 🇺🇸 US (125) 📍 Location-specific (2)

6d ago

Application Security Engineer - AI Trainer

DataAnnotation Kirkland, WA 🇺🇸 Remote

Kirkland, WA

6d ago

$50 - $100/hr Contract Ai Training Application Security Artificial Intelligence

Apply Now

Job Description

DataAnnotation offers a remote contract opportunity to help train AI security models. This role involves evaluating AI-generated cybersecurity content, solving security problems, and delivering feedback that shapes how AI systems reason about threats and defenses. The arrangement provides flexible scheduling and remote work, allowing you to balance with other commitments or pursue it as a primary focus.

Benefits

Fully remote: work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule: choose projects and hours that fit your life, using your own computer from home.
Competitive pay: hourly rates from $50 to $100, with opportunities for higher bonus rates on select projects.
Impact: help shape the future of AI technologies built for cybersecurity.

Responsibilities

Evaluate AI-generated cybersecurity content, including threat analyses, vulnerability assessments, and offensive security techniques, for real-world accuracy and validity.
Design and solve security-focused technical problems used to train AI systems.
Write clear technical explanations and security-relevant code.
Provide feedback that directly shapes the next generation of AI security models.

Requirements

2+ years of hands-on cybersecurity experience in roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.
Some coding experience; comfort navigating and patching a codebase is key.
English proficiency at native or bilingual level with strong writing skills.
Bachelor's degree preferred.
Cybersecurity certifications are a plus (eg OSCP, CRTO, GREM, GCFA, CEH, and similar).

Note: Payment is issued via PayPal. We will never ask for money from applicants. This position is open to candidates located in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

6d ago

Penetration Tester (Ethical Hacker) - AI Trainer

DataAnnotation Alaska 🇺🇸 Remote

Alaska

6d ago

$50 - $100/hr Contract Ai Trainer Ai Training Artificial Intelligence

Apply Now

Job Description

DataAnnotation seeks a remote Penetration Tester (Ethical Hacker) to serve as an AI Trainer. The role centers on evaluating AI-generated cybersecurity content and solving security challenges to inform the next generation of AI security models. This contract position is fully remote and based in Alaska, offering flexible scheduling.

Responsibilities

Assess AI-generated cybersecurity content, including threat analyses, vulnerability assessments, and offensive security techniques, for accuracy and real-world relevance.
Design and solve security-focused technical challenges used to train AI systems.
Produce clear technical explanations and write security-relevant code.
Provide actionable feedback that shapes the development of future AI security models.

Requirements

Minimum of two years of hands-on experience in cybersecurity roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber operations.
Some coding experience is required; comfort navigating and patching a codebase is essential.
Fluent English with strong writing skills, native or bilingual.
A bachelor’s degree is preferred.
Cybersecurity certifications are advantageous, such as OSCP, CRTO, GREM, GCFA, CEH, and similar.

Benefits

Fully remote work from locations including the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule enabling project selection and work from your own device and home.
Competitive hourly pay at USD 50 - 100 per hour, with opportunities for higher bonus rates on select projects.
Impactful work contributing to the future of AI technologies built for cybersecurity.

Note

Payment is processed via PayPal. We will never ask for money from you. This role is available to candidates located in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

6d ago

Penetration Tester (Ethical Hacker) - AI Trainer

DataAnnotation La Crosse, WI 🇺🇸 Remote

La Crosse, WI

6d ago

$50 - $100/hr Full time Ai Trainer Ai Training Artificial Intelligence

Apply Now

Job Description

This contract role invites a Penetration Tester, also known as an Ethical Hacker, to join DataAnnotation as an AI Trainer. The core objective is to assess AI-generated cybersecurity content for real-world accuracy and to contribute to training AI security models. The position offers remote, flexible scheduling and is anchored to Wisconsin as the designated work location, with remote engagement possible from various environments.

Responsibilities

Assess AI-produced cybersecurity content, including threat analyses, vulnerability assessments, and offensive security techniques, for accuracy and real-world relevance.
Develop and resolve security-centric technical challenges used to train AI systems.
Produce clear technical explanations and write security-relevant code.
Deliver actionable feedback that informs the next generation of AI security models.

Requirements

Minimum of 2+ years in hands-on cybersecurity roles such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or related fields, including government or military cyber operations.
Some coding experience; the ability to navigate and patch a codebase is essential.
Fluency in English with strong written communication skills (native or bilingual level).
A bachelor’s degree is preferred.
Cybersecurity certifications are a plus (eg, OSCP, CRTO, GREM, GCFA, CEH, and similar).

Benefits

Fully remote work: operate from anywhere in the US, Canada, the UK, Ireland, Australia, and New Zealand.
Flexible schedule: decide which projects to take and when to work, using your own computer from home.
Competitive compensation: hourly pay ranges from USD 50 to 100 per hour, with potential higher bonuses on select projects.
Impactful work: contribute to shaping AI technologies designed for cybersecurity applications.

View full job page →

7d ago

Director, Application Security (Cybersecurity Defense)

Information Technology Senior Management Forum Cardinal, VA 🇺🇸 Remote

Cardinal, VA

7d ago

$135k - $208k/yr Full time Api Security Application Security Cloud Platforms

Apply Now

Job Description

Lead the enterprise application security strategy across Pharma, Medical, and Commercial Technology segments, embedding security into the SDLC and reducing application risk.

Responsibilities

Direct the enterprise application security program to align with cybersecurity priorities, risk governance, and business goals.
Create governance structures to weave security into the software development lifecycle across all app domains.
Partner with enterprise architecture, engineering, and product teams to synchronize security with technology roadmaps and transformation efforts.
Provide executive and business leadership with guidance on application security risks, priorities, and funding decisions.
Foster a secure-by-design mindset across development and engineering groups.
Oversee application security capabilities across all segments to ensure consistent security practice implementation.
Define segment-specific requirements and approaches to address regulatory, operational, and risk considerations.
Maintain alignment of security practices across segments while allowing flexibility for business-specific needs.
Standardize processes, tooling, and reporting across segment app security teams.
Manage the organization’s application security testing program, including SAST, DAST, SCA, and IAST across all environments.
Ensure vulnerabilities are identified, assessed, prioritized, and remediated within the development lifecycle before deployment.
Establish secure coding standards and integrate security controls into CI/CD pipelines and development workflows.
Partner with development teams to reduce security technical debt and improve code quality.
Oversee runtime security controls for applications and APIs, including WAFs, API gateways, and runtime monitoring solutions.
Embed security requirements into application and API design, deployment, and operations.
Collaborate with engineering and infrastructure to enforce runtime protections aligned with enterprise architecture.
Monitor runtime risks and coordinate remediation across application environments.
Lead development and integration of application security tooling, including configuration, onboarding, and ongoing management.
Define use cases, policies, and detection logic for app security tools to ensure coverage and scalability.
Drive integration of application security tools into CI/CD pipelines and DevSecOps workflows.
Ensure tooling aligns with enterprise security architecture and standards.
Partner with Security Architecture to establish secure design patterns, reference architectures, and app security standards.
Incorporate application security requirements into solution design and architecture reviews.
Work with engineering to implement secure development lifecycle practices and controls.
Support evaluation of new technologies and architectures to ensure security alignment.
Ensure app security practices meet regulatory, compliance, and enterprise risk management standards.
Provide oversight for audits, regulatory assessments, and compliance reporting.
Collaborate with risk and compliance to translate app security risks into enterprise risk insights.
Support remediation of identified risks and align with risk tolerance and governance processes.
Define and track KPIs and KRIs related to app security posture, vulnerability management, and SDLC integration.
Deliver regular updates to executives on security risks, trends, and program effectiveness.
Use data analytics to drive ongoing improvement in application security practices and outcomes.
Identify opportunities to automate, streamline, and scale app security processes.
Partner with development, product, IT, security operations, and business teams to integrate app security into core enterprise processes.
Collaborate with Cyber Detection & Response to embed app security findings into monitoring and incident response workflows.
Coordinate with segment leaders to align app security initiatives with business priorities and risk considerations.
Support M&A activities by assessing and integrating app security controls for acquired applications.
Build and lead a high-performing app security organization with expertise in secure development, testing, and runtime protection.
Ensure the team’s capabilities stay aligned with evolving technologies, threats, and business needs.

Requirements

10+ years of cybersecurity experience with emphasis on application security, secure development, or DevSecOps.
Extensive expertise in SAST, DAST, SCA, and IAST testing methods and secure development practices.
Solid understanding of application and API security, cloud-native architectures, and modern development frameworks.
Experience leading enterprise-scale application security programs within large, complex organizations.
Knowledge of cybersecurity frameworks such as NIST CSF, OWASP, ISO 27001, and relevant regulatory requirements.
Proven ability to collaborate with cross-functional teams and influence executive leadership.
Strong leadership, communication, and problem-solving abilities.

Technologies

SAST
DAST
SCA
IAST
WAF
API gateways
CI/CD pipelines
DevSecOps workflows
Runtime monitoring solutions

Benefits

Medical, dental and vision coverage
Paid time off plan
Health savings account (HSA)
401k savings plan
Access to wages before pay day with myFlexPay
Flexible spending accounts (FSAs)
Short- and long-term disability coverage
Work-Life resources
Paid parental leave
Healthy lifestyle programs

Location

Cardinal, VA, remote. Open to candidates nationwide with fully remote work; preference for candidates near Central Ohio, with willingness to travel to the Dublin, OH corporate HQ as needed.

Posted

Posted date: 6/03/2026

Salary

135,400.00 - 208,100.00 Annual

Anticipated salary range

$135,400 - $208,100

Bonus eligible

Yes

Application window

Anticipated to close on 07/01/2026; applications encouraged as soon as possible.

Type

Full-time

View full job page →

7d ago

Offensive Security Engineer, Technical Lead

Freddie Mac McLean, VA 🇺🇸 Remote

McLean, VA

7d ago

$150k - $224k/yr Full time Senior Application Security Cybersecurity Tools

Apply Now

Job Description

Freddie Mac is expanding its offensive security program with an Offensive Security Engineer, Technical Lead role that targets elevated risk reduction through proactive defense. The position centers on advanced offensive security, vulnerability remediation, and secure engineering practices across the organization, including building AI-powered tools and automation to sharpen the team’s capabilities. Based in McLean, VA with remote options, the opportunity offers a salary range of USD 150,000 - 224,000 per year and requires 8+ years of relevant experience.

Responsibilities

Bring expert-level knowledge in one or more domains, including web applications, AI-powered business systems, cloud environments, and related areas.
Execute sophisticated red team assessments across diverse attack surfaces.
Partner with internal stakeholders to define engagement scope and success criteria, then translate complex technical findings into actionable business risk narratives.
Research, develop, and maintain cutting-edge offensive security tools and automation frameworks to enhance team capabilities and operational efficiency.

Requirements

8+ years of relevant experience.
Proven ability to critically examine applications and identify, exploit, and remediate complex vulnerabilities.
Proven ability to create automation workflows that scale to enterprise environments.
Demonstrated expertise in bypassing modern defensive controls and security measures to achieve assessment objectives.
Demonstrate proficiency in the chosen domain using public research, personal blog, active projects, bug bounty, and public disclosures.
Must be willing to work east coast hours.

Benefits

Competitive compensation and market-leading benefit programs.

Position Overview

We are seeking an Offensive Security Engineer who can navigate ambiguity, uncover weaknesses, and engineer practical solutions that elevate our security posture. The role blends technical ingenuity with disciplined problem-solving to develop automation, tools, and methods that drive meaningful risk reduction.

Our Impact

Freddie Mac's Information Security team continuously tests the strength of the organization’s defenses across people, process, and technology by simulating attacker objectives and actions.

Your Impact

In this role you will join a collaborative team as a subject-matter expert focused on advanced offensive security. You will design and implement AI-powered security tools, proactively address vulnerabilities, and champion secure engineering practices across the organization.

CA Applicants

Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Notice to External Search Firms

Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC.

Time-Type

Full time

FLSA Status

Exempt

View full job page →

7d ago

AI Penetration Tester

BMO Financial Group Miami, FL 🇺🇸 Remote

Miami, FL

7d ago

$122k - $228k/yr Full time Adversarial Ai Agent Ai Security

Apply Now

Job Description

Location

Florida (remote). Work remotely within the EST or CST time zones.

Responsibilities

Conduct security assessments of AI systems, LLMs, AI agents, and machine learning applications.
Perform adversarial testing including prompt injections, jailbreaks, model manipulation, and abuse-case testing.
Execute application, API, and cloud security testing supporting AI-enabled solutions.
Develop repeatable AI security testing methodologies, tools, and automation.
Partner with development and engineering teams to validate and remediate findings.
Produce technical reports and executive summaries communicating risks and recommendations.
Research emerging AI threats and attack techniques.
Support red team exercises involving AI-enabled attack scenarios.

Requirements

Advanced penetration testing experience across web applications, APIs, and cloud environments.
Hands-on experience assessing AI/LLM technologies, AI agents, ML models, or GenAI applications.
Strong understanding of offensive security methodologies and adversarial attack techniques.
Experience with Python scripting and security tool development/automation.
Knowledge of OWASP Top 10, API Security Top 10, and emerging OWASP LLM Security risks.
Experience performing threat modeling and security assessments.
Strong understanding of authentication, authorization, identity, and cloud security concepts.
Ability to clearly document findings and remediation recommendations.
Typically 7+ years of relevant experience and a post-secondary degree in Information Security, Computer Science, Engineering, Information Systems, Business or related field, or an equivalent combination of education and experience.
Multiple Information Security certifications from recognized institutions (e.g., ISC2, ISACA, SANS).
Expert knowledge of information security, requirements gathering, and reporting in a financial services setting.
Data manipulation and analysis skills with the ability to organize and analyze significant information with accuracy.
Knowledge of information security processes, procedures, and controls.
Understanding of information security issues across the bank and related regulatory requirements.
Understanding of industry standards and frameworks such as NIST CSF and ISO 27001/27002.
Ability to navigate complex computing environments and understand how security platforms impact them.
Strong verbal and written communication, analytical, problem-solving, and cross-team collaboration skills.
Ability to manage ambiguity and make data-driven decisions.

Technologies

Python

Benefits

Health insurance
Tuition reimbursement
Accident insurance
Life insurance
Retirement savings plans
Performance bonuses
Discretionary bonuses
Other benefits and rewards

Compensation

Salary: USD 122,400 – 228,000 per year. Salaries vary by location, skills, experience, and education, and may include incentive structures. Part-time roles are pro-rated. For roles with commissions, the stated salary represents the first-year target.

Application Deadline

10/30/2026

Location Details

VIRTUAL09 - HomeRes - FL

What makes this role unique?

Build something new by creating and maturing a first-of-its-kind AI Security Testing capability within BMO's Security Testing Team.
Work with emerging technology to evaluate LLMs, AI agents, GenAI platforms, and ML systems using advanced adversarial testing techniques.
Drive enterprise impact by shaping security outcomes for strategic AI initiatives before they reach production.
Design and develop new AI adversarial testing methodologies that become part of BMO's long-term security strategy.
Expand expertise through leading security testing exercises, AI threat research, and simulating emerging attack techniques targeting AI systems.
Collaborate with leading security practitioners, AI engineers, architects, and governance teams to solve complex challenges.
Enjoy flexible remote work within EST or CST time zones.

View full job page →

8d ago

Application Security Engineer

Black Duck Software, Inc. Oregon City, OR 🇺🇸 Remote

Oregon City, OR

8d ago

$136k - $204k/yr Full time Application Security Cybersecurity Tools DevSecOps

Apply Now

Job Description

Application Security Engineer role delivering Black Duck Software's application security products to large enterprise customers, primarily remote on the West Coast, with a salary range of USD 135,900 to 203,900 per year.

Responsibilities

Educate customers on secure development practices; identify opportunities to strengthen security operations and maximize value.
Provide formal client training to foster ongoing self-sufficiency across assigned accounts.
Collaborate with customers to understand business needs and design solutions addressing quality, security, and compliance challenges.
Lead projects from kickoff to completion, owning end-to-end outcomes.
Develop custom integrations to embed our tools into SDLC and DevOps workflows.
Serve as a trusted advisor, delivering solution expertise in software testing and security.

Requirements

Proven ability to deploy both SaaS and on-premises software solutions.
Software development experience in at least two languages from C/C++, C#, or Java.
Strong scripting skills in Perl, Python, PowerShell, or Bash.
Experience with project scoping and requirements gathering.
Experience with Continuous Integration and DevOps tools.
Solid background in client consultation and onboarding.
Proven ability to prioritize activities, set objectives, and meet milestones.
Highly organized with a track record of delivering milestones on time.
Familiarity with open-source libraries such as glib, OpenSSL, Boost C++, and related licensing.
Willingness to travel up to 20 percent as the job requires.
Bachelor's degree in Computer Science; Master's degree preferred or equivalent experience.
Must be eligible to work in the United States or Canada without sponsorship now or in the future.