Top Remote Security Engineer Jobs in Boston, MA

Partners with engineering teams to identify and remediate product security risks across the software development lifecycle. Responsibilities include threat modeling, secure architecture and coding guidance, security testing, vulnerability prioritization, penetration testing coordination, bug bounty remediation, application monitoring, developer training, and secure deployment practices. The role also advances AI-assisted security tooling, DevSecOps practices, security champions, Kubernetes and container security, and scalable risk-based remediation frameworks.

Assess product and software architecture for security risks, develop threat models, guide vulnerability remediation, and promote secure design practices. Partner with product and engineering teams across the technology stack, provide security training and mentorship, oversee security debt, and build tooling and automation that integrate security into development workflows.

Own and improve vulnerability management across cloud, on-premises, network, and endpoint environments. Responsibilities include scanning, triage, risk-based prioritization, remediation coordination, SLA tracking, exception management, closure validation, asset reconciliation, reporting, incident support, on-call participation, and audit documentation. The role partners with Engineering, SRE, IT, and Infrastructure teams and uses security tooling and AI-assisted workflows to reduce exposure and recurring vulnerabilities.

Lead infrastructure security for GitLab’s FedRAMP and federal cloud environments. Set technical direction, architecture, security automation, and compliance patterns; own security posture; lead threat modeling, security reviews, continuous monitoring, and authorization-impacting initiatives. Partner with SRE, engineering, compliance, and leadership to drive remediation and roadmap decisions. Apply AI to constrained security workflows, mentor engineers, and influence security practices across GitLab offerings.

Lead enterprise IAM and AI access security engineering across Okta, GCP, AWS, and IGA platforms. Replace low-code automation with tested Python services, codify identity infrastructure using Terraform/OpenTofu/Pulumi, implement least-privilege and privileged-access controls, govern human and non-human identities, and secure enterprise AI platforms. Drive cross-functional initiatives, develop technical roadmaps and proposals, support compliance, and mentor engineers.

Assess product and feature security risks through threat modeling, secure architecture reviews, and vulnerability remediation guidance. Partner with product managers, designers, and engineers across the technology stack; promote security culture through training, mentoring, and internal security activities; oversee security debt and explain vulnerability impacts. Build security tooling, automate security practices, develop secure coding patterns, and integrate security tools into engineering workflows.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Designs and engineers secure network and cloud architectures across AWS, GCP, Azure, and physical data centers. Responsibilities include threat modeling, network segmentation, monitoring, alerting, automation, attack-surface reduction, and secure connection patterns. The role drives strategic security improvements, partners with product and infrastructure teams, communicates architectural decisions, and mentors engineers. Candidates need deep hybrid networking and cloud security expertise, protocol knowledge, scripting ability, independent problem-solving skills, and strong communication.

The Security Engineer will manage Liftoff's SIEM, lead the adoption of AI-augmented SOC tools, triage alerts, and improve incident response processes while collaborating on various security functions.

Secure LLMs, generative AI systems, ML infrastructure, training pipelines, and AI applications. Responsibilities include threat modeling, architecture reviews, security controls, hardening, vulnerability remediation, data privacy, incident response runbooks, vendor reviews, governance, policy development, and AI security training. The role also supports proof-of-concept security solutions and monitors emerging AI threats.

Serves as the senior technical authority for enterprise browser data protection and security. Owns architecture, roadmap, standards, lifecycle, browser-based DLP controls, integrations, automation, and operational support. Leads complex troubleshooting, major incident response, root-cause analysis, runbook development, and continuous improvement. Partners across cybersecurity, identity, endpoint, network, cloud, risk, compliance, and vendor teams while mentoring engineers and influencing enterprise security design.

Staff Security Engineer partners with Product, Engineering, and DevOps to embed security into application architecture, cloud infrastructure, and CI/CD processes. Responsibilities include secure design and code review, vulnerability remediation, AWS cloud security, WAF tuning, security automation in Python, SIEM and log pipeline contributions, endpoint controls, and security standards. The role requires deep expertise in application security, cloud security, or security automation, plus threat modeling and independent project ownership.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Operate application security across the SDLC, including secure design, code reviews, threat modeling, API security, DevSecOps tooling, CI/CD security gates, cloud and container security, vulnerability management, and risk communication. Partner with engineering teams on secure coding standards, AWS, Kubernetes, Terraform, mobile ecosystems, and responsible AI integration. Participate in an on-call rotation and develop scalable security platforms, paved roads, documentation, and developer training.

Lead design and implementation of secure global network infrastructure. Architect security standards, conduct threat modeling and network assessments, build security automation and tooling, integrate controls with SDN/BGP/MPLS platforms, support incident response, and mentor engineering teams to maintain resilient, observable network security posture.

Lead assessment and mitigation of security risks in the virtualization stack. Build threat models, rubrics, and defenses; partner with kernel, virtualization, and provisioning teams to design and implement mitigations; mentor engineers, manage vulnerability backlog, and promote security best practices across product teams.

Design, implement, and maintain scalable cloud security controls for Vercel's platform. Harden infrastructure using infrastructure-as-code and policy enforcement, secure CI/CD pipelines, perform threat modeling and risk analysis, improve monitoring and incident response, and build platform-level security tooling in collaboration with platform and infrastructure teams.

Design, maintain, and extend abuse detection and prevention systems for GitLab's SaaS platform. Serve as a core maintainer of a Ruby on Rails monolith, build anomaly detection and agentic AI mitigations, automate abuse response, collaborate with peer engineering and security teams, and produce runbooks and operational documentation.

Build developer-facing security services and tools, partner with engineering teams through the SSDLC to threat model and review code, and contribute to security automation (static analysis, vulnerability management, asset inventory) to help Cedar scale secure patient-facing products.

Perform deep security analysis of endpoint products and sensors: threat modeling, source-code review, exploit-style testing (including kernel components), reproduce/validate bug bounty findings, collaborate with developers to fix vulnerabilities, and build tooling/automation to improve security workflows.

Lead application security for products by performing threat modeling, manual secure code reviews, and penetration testing. Collaborate with engineers to remediate defects, build AppSec automation and tooling, secure cloud/containerized applications, and drive bug-bounty responses to harden platform security.

Perform application security assessments across CrowdStrike products: threat modeling, code review, penetration testing, and secure design guidance. Build automation and tooling, respond to bug bounty reports, and collaborate with engineering to remediate defects and harden cloud-native, containerized applications.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Leads Samsara’s application security and vulnerability management programs across cloud, firmware, IoT, and corporate systems. Responsibilities include setting technical strategy, reducing remediation time, developing automation, guiding engineering teams, mentoring security engineers, assessing high-profile vulnerabilities, supporting incident investigations, and participating in on-call response. The role requires extensive security experience, programming proficiency, AWS expertise, vulnerability management knowledge, and practical use of AI/LLM tooling.

Lead AI security strategy and guardrails, design and review AI gateways and tooling, scale InfoSec review processes, reduce AI-driven security noise, drive remediation and investigations, and mentor security and platform engineers.