Remote Security Engineer jobs

About the Security Engineer role

What the work looks like

• Review architecture and code for new features, writing threat models and recommending fixes before launch.
• Triage findings from vulnerability scanners, penetration tests and bug bounty reports and drive them to remediation.
• Write detection rules in the SIEM and investigate alerts that suggest compromised accounts or hosts.
• Tighten cloud configuration, such as IAM policies, network rules and secrets handling, usually through infrastructure as code.
• Take part in incident response, preserving evidence, containing the damage and writing the post-incident report.

What employers ask for

• Cloud security on AWS, Azure or Google Cloud
• Scripting in Python, Go or Bash
• Threat modeling and secure code review
• SIEM and endpoint detection tooling
• Identity and access management, SSO and OAuth
• Certifications such as CISSP or OSCP

Doing this job remotely

Most security engineering is done through consoles, code and logs, so it travels well. The constraints come from the work's sensitivity: employers often require company-managed hardware, strict device rules and sometimes US residency or citizenship for regulated customers. Incident response means on-call duty, and a serious incident will not respect working hours.

Where it comes from and where it leads

People typically arrive from software engineering, systems administration, network operations or a security operations center analyst job. From here the path runs to senior and staff security engineer, security architect, or management roles up to chief information security officer.