Remote (US)

Remote Cybersecurity Jobs (US)

366 jobs found

Include remote jobs

All (406) 🌍 Worldwide (61) 🇺🇸 US (338) 📍 Location-specific (7)

Today

Cybersecurity Engineer III

Teladoc Health New York, NY 🇺🇸 Remote

New York, NY

Today

$149k - $171k/yr Full time Application Security Application Security Testing Automated Security Testing

Apply Now

Job Description

Teladoc Health is hiring a Cybersecurity Engineer III (New York, NY, remote) to strengthen Application Security, DevSecOps, and medical device security.

Responsibilities

Advance Application Security (AppSec) by integrating Static Application Security Testing (SAST), Software Composition Analysis (SCA), and secrets scanning into development workflows
Support DevSecOps by writing basic scripts to automate security checks and monitoring vulnerabilities across the SDLC
Maintain endpoint security by monitoring EDR (Endpoint Detection and Response) alerts
Ensure application controls and threat detection are correctly applied across the Teladoc Health medical device fleet
Enhance Medical Device Security by assisting with risk assessments
Support enforcement of security controls and participate in documenting compliance with safety standards

Requirements

Bachelor’s degree (or foreign equivalent) in Computer Science, Information Technology, Electrical Engineering, Cybersecurity, Computer Engineering, or a related field
4+ years of experience as a Cybersecurity Engineer, Security Analyst, or in an occupation involving application security and medical device security within the Healthcare Industry
Employment experience translating security findings into actionable engineering guidance
Experience working across partner teams (including DevOps and application teams) to define and implement security-related solutions
Ability to provide clear documentation for the design and implementation of security controls and processes
Hands-on familiarity with related security platforms: AppSec, DevSecOps, and EDR
Experience applying security controls within medical device systems

Technologies

Static Application Security Testing (SAST)
Software Composition Analysis (SCA)
Secrets scanning tools
EDR (Endpoint Detection and Response)
AppSec, DevSecOps
SDLC

Compensation

USD 149,011 - 170,900 per year

Benefits

Flexible Vacation Policy (all time off must be approved by your manager prior to use)
80 hours of Paid Sick, Safe, and Caregiver Leave annually (full-time positions only)

Position qualification: Bachelor’s degree (or foreign equivalent) plus 4 years of experience in roles involving application security and medical device security within the Healthcare Industry, including experience with security findings-to-guidance translation, cross-team implementation (DevOps and application teams), documentation of security controls and processes, AppSec/DevSecOps/EDR platforms, and applying security controls within medical device systems.

View full job page →

Today

Cybersecurity Engineer

Southwest Airlines Dallas, TX 🇺🇸 Remote

Dallas, TX

Today

$120k - $133k/yr Full time Application Security Cybersecurity Operations Cybersecurity Tools

Apply Now

Job Description

Southwest Airlines is seeking a Cybersecurity Engineer for its Cybersecurity Aircraft Team. This remote role supports the protection of aircraft systems and aviation technologies in a safety-critical environment through security guidance, vulnerability investigation, hands-on testing, and program maturity work in collaboration with the FAA and other stakeholders.

Role Overview

In this position, you will help build, test, and support cybersecurity solutions for aircraft and related aviation technologies. You will provide practical security direction, help investigate potential vulnerabilities, and support the ongoing maturity of Southwest’s aircraft cybersecurity program while coordinating with internal partners and external stakeholders.

Key Responsibilities

Provide security guidance to application and Partner Teams to remediate security vulnerabilities, risk items, and policy exceptions
Deliver training for clients on key Cybersecurity systems and automated environments
Identify cybersecurity problems, plan solutions, recommend software and systems, and coordinate development to meet business requirements
Oversee immediate response and maintenance for production program issues
Partner with production testers to identify defects and complete testing
Test and implement system enhancements using techniques that preserve system integrity
Partner to maintain systems, manage escalation issues, and support regular functionality
Triage, research potential defects, complete repairs, and transition features to Business support
Maintain established procedures and standards to ensure high-quality and high-quantity output
Partner and lead communication across internal and cross-functional teams to achieve goals
Perform other job duties as directed by Employee leaders

Required Qualifications

Knowledge of Agile best practices
Knowledge of at least one value pipeline element, such as PingFederate, eDirectory, Active Directory, CyberArk, or Micro Focus IDM
Knowledge of at least one scripting and development language, such as Python, Go, or Javascript
Skills in at least one cloud computing technology and associated concepts, such as AWS
Skilled in infrastructure-as-code development (Terraform, CloudFormation, or similar) and automated configuration management using configuration-as-code (Chef, Puppet, Ansible, or similar)
Skilled in implementing cybersecurity-specific unit tests for applicable elements
Skilled in performance, logging, and cybersecurity monitoring tools
Skilled in delivering valuable software and reasoning about it
Strong communication, collaboration, organization, problem solving, and prioritization skills
High School Diploma or GED
Bachelor’s degree in Computer Science, Engineering, Information systems, or similar fields of study, or equivalent advanced-level experience
Intermediate-level experience with broad knowledge in developing, implementing, or integrating technologies for Enterprise security

Preferred Qualifications

Experience performing penetration testing, technical assessments, or vulnerability assessments for embedded devices, operational technology (OT), or safety-critical systems
Experience coordinating cybersecurity risk assessments, vulnerability management, and remediation activities
Experience with NIST Cybersecurity Framework (CSF), NIST 800-series publications, or similar cybersecurity risk management frameworks
Knowledge of aviation cybersecurity standards, including ARINC, RTCA, SAE, or related regulatory guidance
Experience supporting aviation cybersecurity programs and partnering with the FAA, manufacturers, or industry stakeholders

Technologies

PingFederate, eDirectory, Active Directory, CyberArk, Micro Focus IDM
Python, Go, Javascript
AWS
Terraform, CloudFormation
Chef, Puppet, Ansible

Work Location and Travel

Remote workplace position in Dallas, TX (remote)
May require travel for training, meetings, conferences, and related activities
Majority of working time may be spent remotely away from Corporate Campus
Limited group of states/localities are ineligible for regular remote work, including: Alaska, California, Colorado, Delaware, Illinois, Iowa, Maryland, Massachusetts, Montana, New Hampshire, New Jersey, New York, North Dakota, Oregon, Pennsylvania, South Dakota, Vermont, West Virginia, Washington, Wyoming, and Puerto Rico

Additional Qualifications and Physical Abilities

Ability to work from a limited space work station/desk/office area for extended periods
Ability to communicate and interact with others in English to meet job demands
Ability to use a computer and office productivity tools with sufficient speed and accuracy
Must maintain a well-groomed appearance per Company appearance standards
U.S. citizenship or current authorization to work in the U.S. required; no current or future work authorization sponsorship available
Must be at least 18 years of age
Must comply with Company attendance standards
Must be able to travel and/or attend Company and non-Company facilities and remote locations as necessary

Compensation and Incentives

Salary range: USD 119,900 - 133,200 per year, depending on qualifications and experience
Pay is competitive and varies by role; additional bonus opportunities may be available for eligible Leadership and individual contributor roles at the company’s discretion
401(k) retirement savings with Company contributions up to 9.3% of eligible earnings
Potential annual ProfitSharing contribution in the Southwest Retirement Savings Plan (subject to plan terms and discretion)
401(k) match and ProfitSharing contributions are subject to Retirement Savings Plan vesting schedule and applicable IRS limits where applicable

Benefits

Fly for free on any open seat on all Southwest flights for eligible employees; eligible dependents also receive privilege access
Competitive health insurance for you and eligible dependents, including pets
Health plan coverage options start from the very first day of employment, with selection and enrollment within 30 days and retroactive availability

Application Deadline

Job posting end date: 10/30/2026

View full job page →

Today

Cloud Security Engineer - Azure Defender/Prisma Cloud/Cortex Cloud

PNC Financial Services Group Pittsburgh, PA 🇺🇸 Remote

Pittsburgh, PA

Today

$91k - $203k/yr Full time Cloud Platforms Cloud Security Cloud Security Assurance

Apply Now

Job Description

Remote eligible Cloud Security Engineer role focused on CNAPP control ownership, vendor partnerships, and cloud security dashboard delivery.

Responsibilities

Partner with teams that own technical controls supported by Cortex Cloud; coordinate evaluation and testing to confirm fit and reduce tool sprawl
Own the vendor relationships for Azure, AWS, and Palo Alto
Provide recurring attestation evidence for each Cloud Security Control, as required
Review and analyze controls on an ongoing basis to validate effectiveness and recommend modifications to meet high standards
Identify gaps and determine whether net-new controls are needed
Assess whether existing controls are no longer applicable
Work with the Cloud Security team to automate attestation evidence
Determine which manually collected evidence items can be automated
Develop cloud security dashboard UI using Microsoft PowerBI
Provide statistics on dashboard usage
Engage customers to gather requirements and build a backlog for the Cloud Security Roadmap
Provide subject matter expertise applying security concepts
Use technical knowledge and industry experience to design, build, and maintain technology solutions
Deliver work aligned to project timelines
Partner with architecture to translate high-level designs into implementation specifics, including sizing, integration details, onboarding, and operationalization
Evaluate patches, updates, and ongoing maintenance activities
Determine impacts to existing solutions when new standards are implemented
Use change control and other governance processes to ensure alignment
Develop detailed implementation, configuration, design, and engineering documentation
Build and implement solutions
Work with operational partners to enable transition and day-to-day supportability
Provide engineering support for existing production technology, collaborating with other groups as needed
Seek opportunities to expand a broad knowledge base to complement specific subject matter expertise

Requirements

Ability to work effectively with ambiguity
Comfort creatively approaching work to move the role’s key pillars forward
Ability to build and maintain relationships
Ability to understand customer needs
Ability to influence partners to adopt CNAPP capabilities
Technical skills with a high-level understanding of CNAPP, controls, and dashboard development
Preferred: working knowledge with at least one CNAPP platform such as AWS, Azure, or Palo Alto
Typically requires a university/college degree and 5+ years of industry-relevant experience
Specific certifications are often required

Technologies

Cortex Cloud
CNAPPs
AWS
Azure
Palo Alto
Microsoft PowerBI

Benefits

Medical/prescription drug coverage (with an HSA feature)
Dental and vision options
Employee and spouse/child life insurance
Short and long-term disability protection
401(k) with PNC match
Pension and stock purchase plans
Dependent care reimbursement account
Back-up child/elder care
Adoption, surrogacy, and doula reimbursement
Educational assistance (including select programs fully paid)
Robust wellness program with financial incentives
Maternity and/or parental leave
Up to 11 paid holidays each year
9 occasional absence days each year (unless otherwise required by law)
Between 15 to 25 vacation days each year, depending on career level

Remote Work Details

Work may be performed from a quiet, confidential home location approved by PNC
Not available in all geographic locations
Remote work in select locations may be available subject to approval by PNC
If approved, the work location must be quiet, secure, and confidential
Occasional in-office participation may be required based on business needs

Preferred Skills

Cybersecurity
Data Security
Endpoint Security
Incident Response
Information Security
Network Security
Quantum Computing
Security Information
Security Operations
Vulnerability Management

Competencies

Analytical Thinking
Effective Communications
Information Security Management
Information Security Technologies
IT Environment
IT Standards, Procedures & Policies
IT Systems Management
Network and Internet Security
Problem Solving
Technical Troubleshooting

Pay & Schedule

Base salary: $91,000.00 – $202,800.00 per year
This role is incentive eligible; incentive payment based on company, business, and/or individual performance
Application window expected to be posted for two business days from 10/26/2026 (may be longer at business discretion)

Accessibility & Accommodation

For accommodations during the application process, contact AccommodationRequest@pnc.com with subject line “accommodation request” and include name, job ID, and preferred method of contact
Applicants may also call 877-968-7762 and say “Workday” for accommodation assistance
Information provided is kept confidential and used only as required to provide reasonable accommodations

Equal Employment Opportunity

PNC provides equal employment opportunity regardless of protected status categories
Position is subject to requirements of Section 19 of the FDIA, and for registered roles, SAFE Act and/or FINRA requirements which prohibit hiring individuals with certain criminal history

California Residents

Refer to the California Consumer Privacy Act (CCPA) Privacy Notice for how PNC may use or disclose personal information in hiring practices.

View full job page →

Today

Penetration Tester

Centurion Consulting Group Woodlawn, MD

Woodlawn, MD

Today

Full time Cybersecurity Penetration Tester Information Security InfoSec

Apply Now

Job Description

Centurion Consulting Group is seeking a Penetration Tester for an on-site position in Woodlawn, MD (United States). The role focuses on hands-on security testing across web, infrastructure, and network environments.

What you’ll do

In this on-site role, you will perform penetration testing activities across multiple domains, helping ensure teams can identify and address security weaknesses before they can be exploited.

Conduct Web, Infrastructure, and Network related penetration testing.

What you bring

OSCP Certification is required.
Experience with Web Application Penetration Testing.
Proven ability in Penetration Testing and Vulnerability Assessments.

Nice to have

Red Team Operations
Experience with C2 frameworks
Experience related to malware creation

Location and education

Location: United States (onsite), Woodlawn, MD
Education: Bachelors

View full job page →

2d ago

Application Security Program Manager

Knowledge Services United States 🇺🇸 Remote

United States

2d ago

Contract Manager Application Security Application Security Program

Apply Now

Job Description

Knowledge Services is hiring a remote Application Security Program Manager (contract) to help the State of Maine transition and sustain application security practices within the SSDLC.

Responsibilities

Support the Information Security Office in transitioning the State’s secure software development lifecycle (SSDLC) from near-complete modernization to a sustained operating program.
Coordinate the people, decisions, workflows, and measures needed to make application security practices workable across State technology teams.
Shift from transition activities to adoption, performance, risk reduction, and continuous improvement across the application security portfolio.
Lead a cross-functional program management effort across application security stakeholders.
Partner with Vulnerability Management, Security Architecture, Governance Risk and Compliance (GRC), Application Development, GitHub Governance, infrastructure and platform teams, agency product owners, and vendors.
Drive follow-through, adoption, and accountability across stakeholders, escalating decisions to the appropriate owner while specialist teams retain authority for technical, product, and risk approvals.
Oversee application security efforts across multiple teams to improve the State of Maine’s security posture.
Coordinate handoff from project deliverables to owned processes, including named owners, documented handoffs, decision paths, service expectations, and an operating cadence.
Maintain a program roadmap covering priorities, dependencies, risks, and an improvement backlog.
Validate and improve the application risk profile and security workflows, including design review, scanning, finding triage, remediation, exceptions, and release workflows.
Ensure guidance aligns with real tools, different applications, and vendor models.
Plan rollout waves with development and platform partners; support security champions, training, office hours, and developer-facing guidance.
Collect feedback and remove barriers that prevent teams from consistently applying the workflow.
Help product and development teams convert findings into risk-ranked plans with owners, target dates, and closure evidence.
Track coverage gaps, aging findings, blockers, and escalations while responsible teams remediate and verify results.
Facilitate working groups and leadership reviews; maintain a responsibility model; route design questions through Security Architecture and policy, exception, and risk decisions through GRC and authorized Information Security Office leadership.
Define measures with data owners and coordinate trustworthy reporting on application coverage, adoption, remediation, exceptions, and control performance; use trends and stakeholder feedback to propose changes and adjust priorities.
Coordinate related initiatives across repository governance, security tooling, platform integration, third-party application security, and developer enablement.
Surface capacity, funding, and service dependencies; prepare concise options and recommendations for leadership.

Requirements

8 to 10 years of experience in leadership roles and cybersecurity program management, including change agent work improving application security program maturity.
Experience improving application security program maturity.
Stakeholder Management and Organizational Change Management leadership.
Working knowledge of Secure Software Development Lifecycle (SSDLC).
Certification in code and dependency scanning.
Strong facilitation, writing, and stakeholder communication skills.
Substantial experience managing complex technology, cybersecurity, or application security programs across multiple teams, delivering through influence and shared accountability.
Knowledge of software delivery and application security concepts, including security requirements, code and dependency scanning, vulnerability management, remediation, and risk treatment.
Ability to translate technical and policy issues into clear actions, owners, decisions, and management reporting.
Experience establishing repeatable processes, coordinating organizational change, using measures to improve performance, and managing competing priorities in an evolving program.
Experience implementing, operationalizing, or governing SSDLC practices across multiple development teams.

Tech Stack

Secure software development lifecycle (SSDLC)
GitHub
Governance Risk and Compliance (GRC)

Additional Details

Location: United States (remote)
Contract: through end of June 2027 (likely extension)
Time zone: remote work acceptable for candidates residing in EST or CST time zones
Work eligibility: cannot accept candidates requiring C2C or requiring sponsorship for a work visa

Why This Role

Impact the trajectory of application security in the State of Maine by supporting integrity and confidentiality of critical systems.
Work within a large IT enterprise supporting critical State applications.
Contribute to protecting citizens’ data and enabling secure operation of essential government services.

Why Candidates May Like It

Immersion in rapidly evolving state government issues with a fast-moving organization.
Collaboration with peers and exposure to creative problem-solving approaches.
Opportunities to tackle unique and complex projects in application security.

View full job page →

2d ago

Penetration Tester / Ethical Hacker

Experis New York, NY 🇺🇸 Remote

New York, NY

2d ago

$70 - $70/hr Full time Ai Security Application Security Cloud Platforms

Apply Now

Job Description

Support global information security effectiveness through penetration testing and red team engagements across modern environments.

Responsibilities

Plan and execute penetration tests across web applications, APIs, mobile apps, networks, cloud infrastructure (AWS, Azure, GCP), and internal systems.
Perform manual exploitation and vulnerability validation to reduce false positives and uncover logic flaws automated tooling may miss.
Design, configure, and run automated vulnerability scanning pipelines to increase coverage and consistency across engagements.
Build and deploy AI-agent-driven testing workflows to accelerate reconnaissance, fuzzing, exploit chaining, and report generation.
Run red team engagements simulating APT tactics, techniques, and procedures (TTPs), with tracking and documented activity.

Requirements

3+ years of direct experience performing penetration testing, red teaming, or ethical hacking in an active corporate environment.
Ability to plan and execute penetration tests and red team engagements, including comfort operating in terminal environments.
Working knowledge of common networking protocols: HTTP, DNS, SMB, and related fundamentals.
Familiarity with Windows and Linux systems.
Proficiency with cross-platform scripting languages such as Python or Golang, and PowerShell.
Hands-on experience with industry-standard tools including Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, and the Kali Linux toolset.

Tech Stack

Cloud: AWS, Azure, GCP
Scripting: Python, Golang, PowerShell
Security testing tools: Burp Suite, Metasploit, Nmap, Wireshark, Cobalt Strike, BloodHound, Kali Linux
Protocols: HTTP, DNS, SMB

Location and Work Details

Location: New York, NY (remote)
Timezone: Remote (EST hours)
Salary: USD 70 per hour
Employment type: W-2 only

What’s In It For Me?

Drive real security value by improving the effectiveness of information security capabilities across business units.
Work on advanced testing approaches combining manual exploitation with automated scanning and AI-agent-driven workflows.
Perform threat-informed testing by analyzing cyber threat intelligence for actionable takeaways.
Create executive-ready and client-ready documentation via executive summaries and in-depth technical reporting.
Collaborate with teams by translating testing objectives and findings into plain English and actionable remediation guidance.

View full job page →

4d ago

Cybersecurity Resilience Lead

Microsoft United States

United States

4d ago

$120k - $261k/yr Full time Cyber Resilience Cybersecurity Tools Incident Response

Apply Now

Job Description

Lead proactive resilience improvements for customers as part of Microsoft’s Detection and Response Team (DART). This United States onsite role focuses on designing resilience assessments and exercises, advising executives, and partnering across incident response and technical teams to strengthen durable response capability.

What you’ll do

Set resilience engagement objectives, customer outcomes, priorities, and evidence requirements, then lead proactive workstreams across enterprise on-premises and cloud environments.
Design and deliver readiness assessments and learning simulations, including tabletop exercises, cyber range activities, playbook development, and threat modeling engagements to improve incident response readiness.
Convert technical and operational findings into risk reduction actions and executive-ready recommendations.
Run workshops to evaluate customer incident response plans, roles, escalation paths, communication models, evidence readiness, and recovery dependencies, identifying what is mature, uncertain, and needs validation.
Facilitate customer workshop sessions and stakeholder discussions that align technical and operational teams, executives, and other business functions around practical response improvements.
Partner with internal teams across incident response, threat hunting, infrastructure, reverse engineering, product, and operations to improve service capabilities and offering quality.
Incorporate customer feedback, field insights, and lessons learned to improve resilience offerings, engagement methods, and DART readiness practices.
Maintain engagement documentation covering objectives, decisions, risks, dependencies, and next actions, supporting final reporting and lessons learned.
Orchestrate evidence-driven proactive engagements and communicate clear priorities, recommendations, and readiness improvements to customers.

Minimum qualifications

Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field, OR Master’s Degree in the same areas plus 3+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
OR Bachelor’s Degree in the same areas plus 4+ years experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection.
OR equivalent experience.

Additional requirements

Ability to meet Microsoft, customer and/or government security screening requirements, including the Microsoft Cloud Background Check and any additional checks needed for customer or government work.
Experience in incident response, incident management, crisis management, resilience, security operations, or enterprise risk reduction.
Demonstrated experience planning, coordinating, delivering, and evaluating business resilience exercises such as table-tops, cybersecurity workshops, readiness assessments, incident response plans, or operational resilience engagements.
Experience reviewing, assessing, and developing resilience-related technical and operational programs/plans (including business continuity management, crisis management, operational resilience, technical resilience, and incident response).
Proven ability to evaluate and communicate improvement opportunities across stakeholder cybersecurity technical and operational risk, including consolidation of inputs, disruption risk assessment, and recommended remediation efforts.
Ability to guide stakeholders, build agreement, and translate technical issues into practical actions for teams with different technical knowledge levels.
Experience applying cybersecurity or resilience frameworks such as NIST, MITRE ATT&CK, ISO 27001, or equivalent guidance in customer-facing work.
Customer-facing written and verbal communication, including executive briefings, facilitation, and clear documentation.
Sound judgment, accurate record keeping, operational discipline, and effective follow-the-sun handovers.
Flexibility to work non-standard business hours, potentially including evenings, nighttime, weekends, and/or holidays.
Experience delivering cyber range exercises, tabletop exercises, purple-team style scenarios, or customer readiness programmes.
Track record leading or developing enterprise business continuity, crisis management, or incident response programs.
Cloud security experience in hybrid environments, with practical understanding of identity, endpoint, network, and recovery dependencies.
Research, process improvement, offering development, or technical mentoring experience that strengthens resilience capability.
Certifications such as CISSP, CISM, DRI, GIAC, or equivalent practical expertise.
Resilience under stress and ability to collaborate across globally distributed teams, customers, and partners.

Pay and benefits

Salary: USD 119,800 - 261,000 per year (base pay range across the U.S. is USD 119,800 - 234,700 per year).

There is a different range for specific work locations: San Francisco Bay area and New York City metropolitan area (base pay range USD 160,200 - 261,000 per year).

Certain roles may be eligible for benefits and other compensation. Find additional information here: https://careers.microsoft.com/us/en/us-corporate-pay.