Remote

Remote Cybersecurity Jobs

401 jobs found

Include remote jobs

All (401) 🌍 Worldwide (61) 🇺🇸 US (333) 📍 Location-specific (7)

1d ago

Infrastructure Security Engineer (Senior/Principal)

Positron AI Remote 🌍 Remote

Remote

1d ago

$170k - $325k/yr Full time Senior Certificate Management Cloud Platforms

Apply Now

Job Description

Positron AI is seeking a Senior or Principal Infrastructure Security Engineer to secure and manage the transition from on-prem systems to a hybrid-cloud environment on GCP. This role focuses on identity and access controls, secure developer infrastructure, secrets and artifact protection, and detection and response capabilities for critical systems.

Identity Platform and Access Control

Define, implement, and operate the identity platform, including Auth0 and role-based access control (RBAC) across internal systems and cloud environments.
Establish least-privilege access policies and lifecycle processes for users, service accounts, and machine identities.

PKI and Certificate Lifecycle

Design and manage public key infrastructure (PKI), including certificate issuance, rotation, and revocation.

Hybrid-Cloud Migration and Secure Infrastructure

Lead the migration of on-prem workloads to a secure hybrid-cloud environment on GCP.
Design and enforce network segmentation between on-prem, cloud, and critical infrastructure environments.
Build and maintain cloud infrastructure for developers using infrastructure as code with Terraform and Ansible.

Developer Tooling, Artifacts, and Secrets Management

Deploy and maintain artifact storage and other core developer tooling with security built in from the start.
Own secrets management across environments, ensuring credentials and keys are stored, accessed, and rotated safely.

Detection, SIEM, and Incident Response

Select, deploy, and operate a SIEM solution covering critical infrastructure.
Build and lead incident response processes, covering detection and triage through remediation and post-incident review.

Required Qualifications

Expertise in identity and access management, including SSO, RBAC, and identity platforms such as Auth0, Okta, or similar.
Experience with Kubernetes, including managed or proprietary Kubernetes distributions.
Hands-on experience building and managing infrastructure as code with Terraform and Ansible.
Production experience with GCP, or with Azure or AWS, with willingness to work in GCP.
Proven experience deploying, tuning, and operating a SIEM solution.
Experience with PKI, including certificate management and lifecycle automation.
Demonstrated incident response experience, including leading investigations and remediation.
Experience deploying and maintaining artifact storage and secrets management systems.
Understanding of network segmentation and secure network design across on-prem and cloud environments.

Technologies

Auth0, RBAC, PKI, GCP, Terraform, Ansible, Kubernetes, SIEM, Okta

Benefits

Fully company-paid medical, dental, and vision insurance for you and your dependents.
Company-paid life and disability coverage, with voluntary options to add more.
Supplemental hospital, critical illness, and accident coverage available.
Unlimited paid time off, encouraged for time to unplug and recharge.
13 paid company holidays.
Remote-first culture with a company-provided computer and home office setup.
Competitive salary and equity.
401(k) with company matching, eligible from day one.

Preferred Qualifications

Broader security engineering experience beyond infrastructure, including application or product security.
Experience designing security architecture for organizations moving from on-prem to hybrid cloud.
Familiarity with endpoint detection and response (EDR) tooling and deployment.

What Success Looks Like

Within the first three to six months, define and stand up the identity foundation with Auth0 and RBAC in place across key systems.
Enable developers to provision cloud infrastructure through infrastructure as code, while driving on-prem to hybrid-cloud migration on a secure, segmented foundation.
Deploy a SIEM solution for monitoring critical infrastructure to improve visibility and support detection and response workflows.

Visa Support

Open to candidates currently authorized to work in the U.S.
No new visa sponsorship available; H-1B visa transfers may be facilitated for eligible candidates.

Location: Remote (remote)

Salary: USD 170,000 - 325,000 per yearly

View full job page →

3d ago

Staff Security Engineer, Security Operations

GoodLeap Remote 🌍 Remote

Remote

3d ago

$167k - $213k/yr Full time Ai Security Analytics Cloud Platforms

Apply Now

Job Description

The Staff Security Engineer, Security Operations role at GoodLeap focuses on protecting cloud environments, applications, endpoints, and corporate systems through detection engineering, incident response, and security operations. The position is responsible for building and tuning detection coverage, leading investigations, and expanding automation, including AI agent capabilities, to improve time-to-detect and time-to-respond.

Responsibilities

Design, build, test, and tune detections across cloud, identity, endpoint, and email telemetry using detection-as-code practices aligned to MITRE ATT&CK.
Manage security logging, SIEM, and alerting pipelines to support detection and monitoring workflows.
Establish monitoring for AI activity, including AI tools, agents, MCP integrations, and API keys, with focus on detecting data exposure, misuse, and anomalous behavior.
Decrease time-to-detect by applying threat intelligence and sensor enrichment.
Lead end-to-end incident activity including investigation, containment, eradication, and recovery.
Act as incident lead for significant events and coordinate with legal, compliance, and leadership on regulatory notification obligations.
Maintain incident response plans, playbooks, and runbooks.
Conduct tabletop exercises and post-incident reviews to drive lasting control improvements.
Deploy and operate the security operations toolset, including cloud security monitoring, WAF, DDoS protection, IDS, EDR (CrowdStrike), and email security.
Build AI agents and automation for alert triage, enrichment, investigation, and response.
Review vulnerability scan results, penetration testing outputs, and other security sources to identify true positives and propose remediation or mitigating controls.
Serve as an SME for AWS cloud security and consult on secure design for cloud-based systems.
Mentor the security team and partner engineering teams on detection, response, and security operations practices.
Share knowledge of company and industry methodologies, policies, standards, and controls.
Support security team growth and lead efforts to mature GoodLeap’s security operations capability.
Develop security requirements, conduct security risk assessments, evaluate security services and technologies, maintain incident response planning, and provide mentoring across the security organization and partner engineering teams.
Own endpoint detection and response (CrowdStrike) and email security as capabilities are brought into the security function.

Requirements

In-depth knowledge of Amazon AWS, including security configuration, logging, and related tooling such as CloudTrail, GuardDuty, and Security Hub.
Hands-on detection engineering experience, including SIEM query languages and detection-as-code.
Hands-on incident response experience, including log analysis and host and cloud investigation.
Familiarity with MITRE ATT&CK and OWASP Top 10.
Knowledge of network and web protocols including TCP/IP, DNS, HTTP, HTTPS, and TLS.
Experience with, or ability to quickly ramp on, EDR platforms (preferred: CrowdStrike Falcon).
Experience with, or ability to quickly ramp on, email security covering phishing, BEC, and DMARC/SPF/DKIM.
Experience building automation in Python or a similar language.
Experience building or integrating LLM-based agents and workflows.
Understanding of AI-specific risks including prompt injection, data leakage, and excessive agent permissions.
Experience working in SOC 2, PCI-DSS, or ISO control environments.
Proven ability to apply business, technical, and process expertise to assess requirements and alignment.
Strong communication skills across verbal, written, ticketing, and messaging channels.
Ability to prioritize and deliver independently across multiple tasks in a fast-paced environment.
GCIH, GCFA, GCDA, CCSP, CISSP, CrowdStrike, or comparable certifications are a plus.

Technologies

Amazon AWS, CloudTrail, GuardDuty, Security Hub
MITRE ATT&CK, OWASP Top 10
SIEM
CrowdStrike Falcon, CrowdStrike, EDR
WAF, DDoS protection, IDS
TCP/IP, DNS, HTTP, HTTPS, TLS
Python
LLM-based agents, MCP integrations, API keys
DMARC, SPF, DKIM
SOC 2, PCI-DSS, ISO

Location

Remote (remote)

Compensation

Salary: USD 167,400 - 212,500 per year

Base pay range (CA, WA, NJ, MA, DC, NYC): $184,100 - $212,500 per year
Base pay range (all other US locations): $167,400 - $193,200 per year

In addition to the above salary, this role may be eligible for a bonus and equity.

View full job page →

4d ago

Adjunct, Cybersecurity and the Role of Artificial Intelligence in Emergency Management

University of St Thomas Saint Paul, MN 🇺🇸 Remote

Saint Paul, MN

4d ago

$1,000 - $5,600/mo Full time Adjunct Adjunct Faculty Ai Security

Apply Now

Job Description

The University of St Thomas seeks an adjunct faculty member to support graduate education focused on emergency and disaster management, with an emphasis on cybersecurity and the role of artificial intelligence in emergency operations. This role will be delivered as an 8-week, fully online, asynchronous course during Fall 2027.

Course Overview

The selected adjunct instructor will teach and/or develop an 8-week graduate course in Emergency and Disaster Management on Cybersecurity and the Role of Artificial Intelligence in Emergency Management. The course format is fully online and asynchronous for graduate learners.

Responsibilities

Develop and/or teach graduate-level course content for an 8-week, online, asynchronous course.
Integrate relevant professional experiences, case studies, and current research into course materials.
Examine cybersecurity threats to critical infrastructure and their implications for emergency preparedness, response, and recovery.
Address applications, opportunities, and challenges of artificial intelligence in cybersecurity and emergency management.
Evaluate student learning using assignments, discussions, and other appropriate assessment methods.
Provide timely feedback and maintain regular communication with students throughout the course.

Required Qualifications

Hold a master’s degree in a relevant discipline.
Meet at least one of the following:
- At least 10 years of relevant professional experience; or
- A sustained record of scholarly achievement demonstrated by at least four academic works, such as peer-reviewed publications, books, book chapters, funded research, or other recognized scholarly contributions.
Relevant experience may include cybersecurity operations, information assurance, critical infrastructure protection, cyber risk management, emergency management, disaster response, artificial intelligence applications, or related areas.

Relevant Disciplines

Cybersecurity, Computer Science, Information Technology, Information Systems
Artificial Intelligence, Data Science, Information Assurance, Cyber Operations
Emergency Management, Homeland Security, Intelligence Studies, Criminal Justice
Public Administration, Public Policy, Risk Management, Engineering
Or other closely related fields

Preferred Expertise

Cybersecurity threats and risk management
Critical infrastructure protection
Cyber incident response and recovery
Artificial intelligence applications in cybersecurity and emergency management
Cybersecurity policy and governance
Integration of technology into emergency preparedness, response, and decision-making

Location and Work Arrangement

Saint Paul, MN (remote).

Compensation

The salary range is USD 1,000 to 5,600 per month, depending on student enrollment.

Initial course development compensation is listed as $4,000.

Application Process

Applications should be submitted by December 1, 2026. The position will remain open until filled.

Submit a current curriculum vitae or résumé and a cover letter.
The cover letter should highlight relevant academic credentials, professional experience, and qualifications to teach the course.
Candidates may include information about teaching experience, online instruction, scholarly publications, research, or other professional accomplishments.
Application materials should demonstrate how the background and expertise align with the course content and minimum qualification requirements.

View full job page →

4d ago

Cybersecurity / IAM Engineer

NTT Ltd Herndon, VA 📍 VA Remote

Herndon, VA

4d ago

$90k - $209k/yr Full time Cloud Platforms Cyber Security Engineer Cybersecurity Operations

Apply Now

Job Description

NTT Ltd is hiring a Cybersecurity / IAM Engineer in Herndon, VA (remote). This role focuses on building and operating secure identity and access capabilities across client cloud, edge, IoT, and data environments, helping ensure compliance with DoD RMF, IL4/IL5, and FedRAMP requirements.

Compensation: USD 90,146 - 208,672 per year. Pay depends on factors including location, relevant experience, and technical skills. The role may be eligible for incentive compensation based on individual and/or company performance (temporary positions are not eligible).

Responsibilities

Architect, implement, and maintain advanced IAM solutions, including RBAC, MFA, SSO, and integrations with identity providers.
Develop and enforce secure authentication and authorization frameworks for client cloud, edge, and data systems.
Lead secure directory services implementation, including PKI and certificate management across client components.
Support continuous monitoring, vulnerability management, and incident response aligned to DoD RMF, IL4/IL5, and FedRAMP.
Partner with DevSecOps, software, and infrastructure teams to apply security best practices across the system lifecycle.
Maintain comprehensive documentation for IAM architectures, security controls, and compliance artifacts.
Support audit, ATO, and risk management activities, including evidence collection and remediation of findings.
Implement and monitor audit logging, access reviews, and compliance reporting across client environments.
Provide technical support for user provisioning, deprovisioning, and lifecycle management.
Participate in security assessments, code reviews, and compliance audits as required by contract and SOW.

Requirements

Master’s degree in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science, or equivalent.
10+ years of experience with cybersecurity engineering.
US Citizenship with ability to obtain a Secret Clearance.

Technical focus

IAM, RBAC, MFA, SSO
PKI, secure directory services, certificate management
Audit logging, compliance reporting
Cloud, IoT, and edge environments, including AWS GovCloud
DoD RMF, IL4, IL5, FedRAMP

Preferred Qualifications

Experience designing and managing IAM solutions in regulated or mission-critical DoD environments.
Proficiency with RBAC, SSO, MFA, PKI, and secure directory services.
Experience with DoD RMF, IL4/IL5, and FedRAMP cybersecurity and compliance requirements.
Familiarity with AWS GovCloud, cloud security, and secure integration of edge/IoT devices.
Strong documentation and communication skills, including producing compliance artifacts and technical guides.
Experience supporting audit, ATO, and risk management for federal systems.
Information Assurance Management (IAM) or Information Assurance Technical (IAT) or IASAE Level I (position-based) per DoD 8570.1M.

Benefits

Medical, dental, and vision insurance with an employer contribution.
Flexible spending or health savings account.
Life and ADD insurance.
Short and long term disability coverage.
Paid time off.
Employee assistance.
Participation in a 401k program with company match.
Additional voluntary or legally-required benefits.

View full job page →

4d ago

Cybersecurity Engineer - AI Trainer

AfterQuery Experts Vienna, VA 🇺🇸 Remote

Vienna, VA

4d ago

$65 - $80/hr Contract Ai Model Training Ai Security Application Security

Apply Now

Job Description

AfterQuery Experts is hiring a remote, asynchronous Cybersecurity Engineer to help frontier AI labs train trustworthy security behavior. In this role, you will design and evaluate security analysis, threat modeling, and incident response scenarios grounded in real-world engineering practice. If you enjoy combining offensive and defensive thinking with clear, auditable explanations, this contract position offers a flexible way to make an impact.

Location: Vienna, VA (remote)

Job type: Contract

Compensation: USD 65 to 80 per hour, paid weekly

Key Responsibilities

Design challenging, realistic security analysis, threat modeling, and incident response tasks drawn from production practice
Evaluate model responses for correctness, sound reasoning, and subtle failure modes
Document your reasoning clearly so another engineer can audit the judgment

What You Bring

2+ years of professional experience in security engineering, red team, or SOC work
Familiarity with common attack classes, detection tooling, and remediation practice
Ability to explain an attack path and its mitigation clearly in writing

Benefits

Competitive Compensation: $65-$80/hour, paid weekly
Flexible Engagement: Fully remote and asynchronous, on your own schedule
Innovative Impact: Join a YC-backed research lab shaping how frontier models reason about software

View full job page →

4d ago

Cybersecurity Engineer - AI Trainer

AfterQuery Experts Columbia, SC 🇺🇸 Remote

Columbia, SC

4d ago

$65 - $80/hr Contract Ai Model Evaluation Ai Security Engineer

Apply Now

Job Description

AfterQuery Experts is hiring a remote, asynchronous Cybersecurity Engineer - AI Trainer to help frontier AI labs build trustworthy security training scenarios.

Responsibilities

Design challenging, realistic security analysis, threat modeling, and incident response tasks based on production practice
Evaluate model outputs for correctness, sound reasoning, and subtle failure modes
Document your reasoning clearly so another engineer can audit the judgment

Requirements

2+ years of professional experience in security engineering, red team, or SOC work
Familiarity with common attack classes, detection tooling, and remediation practice
Ability to explain an attack path and its mitigation clearly in writing

Compensation and Employment Details

Contract role
Location: Columbia, SC (remote)
Rate: USD 65 to 80 per hour
Pay frequency: paid weekly

Benefits

Competitive Compensation: $65-$80/hour, paid weekly
Flexible Engagement: fully remote and asynchronous, on your own schedule

Why Apply

Competitive Compensation: $65-$80/hour, paid weekly
Innovative Impact: join a YC-backed research lab shaping how frontier models reason about software
Flexible Engagement: fully remote and asynchronous, on your own schedule

View full job page →

4d ago

ServiceNow Security Engineer

CACI Remote 🌍 Remote

Remote

4d ago

$105k - $231k/yr Full time Data Security Engineer Fedramp

Apply Now

Job Description

Support ServiceNow platform security through governance, authorization, continuous monitoring, and vulnerability management.

Responsibilities

Perform governance, compliance, and assurance activities to ensure ServiceNow aligns with NIST SP 800-53, NIST RMF, and FedRAMP across environments and instances.
Define, document, and assess security requirements for ServiceNow implementations, including control selection, tailoring, and technical implementation across instance configurations and workflows.
Build, configure, and enforce security controls such as ACLs, RBAC, Column-Level Encryption, encryption in transit, and IP address restrictions following the ServiceNow Hardening Guide.
Configure and monitor ServiceNow event and security telemetry and maintain SIEM integrations for continuous monitoring, alert correlation, and incident detection.
Support continuous monitoring for the ServiceNow boundary with automated evidence gathering, control validation, and recurring assessment activities.
Manage the POA&M lifecycle: document findings, assign technical owners, track milestones, validate remediation testing, and close security items.
Develop and maintain ATO packages for the ServiceNow ecosystem, including SSPs, technical boundary diagrams, control implementation summaries, and evidence artifacts.
Support internal and external security assessments by coordinating with SCAs, federal auditors, and 3PAOs during formal evaluations.
Partner with system owners, ISSOs, ServiceNow platform administrators, developers, and solution architects to implement controls and remediate audit findings.
Perform vulnerability management across the ServiceNow platform and integrations by reviewing patch levels, evaluating CVEs, prioritizing remediation, and tracking resolution timelines.
Validate and enforce secure configuration baselines using ServiceNow Instance Security Center (ISC) and security benchmarks such as CIS benchmarks and DISA STIGs.
Assist with security incident response for the ServiceNow environment, supporting triage, root-cause investigation, containment, and formal reporting.
Conduct log analysis using ServiceNow transaction logs, system logs, and administrative audit trails to detect anomalous activity and support federal logging mandates (e.g., OMB M-21-31).
Oversee user access controls, privileged access management, and SSO/MFA configurations, including periodic user access recertifications.
Maintain configuration integrity and asset visibility within the CMDB aligned to RMF inventory and categorization standards.
Develop and maintain technical security architecture documentation, SOPs, and operational playbooks for platform security administration.
Formulate and execute project plans for deploying, upgrading, and maintaining ServiceNow security capabilities, modules, and platform updates.
Perform risk assessments and security impact evaluations for change requests, including plugin installations, update sets, custom integrations, and security policy exceptions.
Support secure development practices for custom ServiceNow applications and catalog items by conducting security reviews of Script Includes, Business Rules, client scripts, and automated test pipelines.
Use threat intelligence feeds to refine security workflows, identify emerging platform threats, and enhance incident containment playbooks.
Track, aggregate, and report security posture metrics such as instance hardening scores, vulnerability remediation timelines, POA&M aging, and audit compliance rates using ServiceNow dashboards and reporting tools.

Requirements

Ability to obtain Department of Homeland Security (DHS) Entry On Duty (EOD).
B.A./B.S. or equivalent plus 15 years of relevant experience.
Experience supporting ServiceNow development.
Understanding of NIST SP 800-53, RMF, FedRAMP, and federal security control frameworks.
Hands-on experience supporting ATO packages, SSP development, control implementation statements, and evidence collection.
Experience performing security assessments, vulnerability analysis, risk assessments, and remediation tracking.