Remote IT Security Engineer Jobs
Remote IT Security Engineer jobs are open across the U.S. in sectors from financial services and healthcare to cloud software and defense contracting, with distributed teams at both remote-first firms and established enterprises hiring at every level from junior analysts to senior architects. Employers hiring remotely right now include Make-A-Wish Foundation of America, Randolph-Brooks Federal Credit Union, and Ahead. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 34+ Remote IT Security Engineer jobs
Job Description and Requirements
Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Principal Application Security Engineer to join our amazing IT Security team!
The Principal Application Security Engineer will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.
All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.
To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.
- Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided). Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment
The Principal Application Security Engineer is an enterprise technical leader responsible for shaping and scaling application and product security strategy across the organization. The role leads the most complex and consequential security architecture decisions, establishes secure engineering standards and reference architectures, and creates platform-level capabilities that make secure development the default. The Principal Engineer influences senior technology leaders, mentors security and engineering talent, addresses emerging risks, and drives measurable improvements across the software ecosystem.
Essential Functions and Responsibilities:
- Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security in alignment with business and technology priorities.
- Lead security architecture, threat modeling, and design decisions for the organization’s highest-risk, most complex, or most strategically important systems.
- Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.
- Architect and guide the development of scalable application security platforms, automation, telemetry, risk analytics, and CI/CD controls used across the enterprise.
- Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs addressing AI security, software supply chain risk, cloud-native security, and platform resilience.
- Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.
- Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.
- Influence senior engineering, architecture, product, risk, and business leaders to prioritize and adopt strategic security improvements.
- Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.
- Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate. All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice)
Requirements:
- Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
- Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.
- Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.
- Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.
- Advanced software engineering capability in one or more production languages and a strong record of designing maintainable tooling, platforms, or controls.
- Ability to define strategy and technical standards while remaining sufficiently hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.
- Exceptional systems thinking and technical judgment, including the ability to make defensible decisions when data is incomplete and tradeoffs span security, reliability, delivery, cost, and customer impact.
- Executive-level written and verbal communication skills, with the ability to frame complex risk, build alignment, and influence decisions across organizational boundaries.
- Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives. High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes.
Skills / Certification / Licensing:
- Recognized enterprise authority who integrates deep expertise across software, architecture, cloud, data, identity, automation, and emerging technology.
- Defines strategic problems, creates direction, and operates with broad organizational trust and accountability.
- Resolves novel, high-consequence, systemic problems and establishes durable enterprise solutions.
- Shapes organization-wide technology decisions, engineering standards, investment priorities, and risk outcomes.
- Influences executives and senior technical leaders, reconciles competing priorities, and creates alignment across organizational boundaries.
- Multiplies organizational capability through strategy, standards, mentorship, communities of practice, and technical stewardship. Delivers measurable enterprise risk reduction, improved developer experience, stronger technical talent, and scalable secure-by-default capabilities.
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.
Job Description and Requirements
Randolph-Brooks Federal Credit Union is currently searching for an experienced and talented Principal Application Security Engineer to join our amazing IT Security team!
The Principal Application Security Engineer will have the ability to work a hybrid schedule (remote/onsite) after a period of training (time frame may vary). Training will take place at the RBFCU Administrative Service Center: 1 Ikea-RBFCU Pkwy, Live Oak, Texas 78233.
All applicants must reside within the state of Texas and have the capability of performing all of the work from their home in Texas.
To successfully work from home, employees must have access to a minimum internet connection as noted by RBFCU.
- Must have a reliable home internet provider and the ability to hard wire a connection directly to modem (Ethernet cable provided). Must be able to provide a workspace at home that is safe, suitable for work, and within a distraction free environment
The Principal Application Security Engineer is an enterprise technical leader responsible for shaping and scaling application and product security strategy across the organization. The role leads the most complex and consequential security architecture decisions, establishes secure engineering standards and reference architectures, and creates platform-level capabilities that make secure development the default. The Principal Engineer influences senior technology leaders, mentors security and engineering talent, addresses emerging risks, and drives measurable improvements across the software ecosystem.
Essential Functions and Responsibilities:
- Define the multi-year technical strategy, target state, standards, and capability roadmap for application and product security in alignment with business and technology priorities.
- Lead security architecture, threat modeling, and design decisions for the organization’s highest-risk, most complex, or most strategically important systems.
- Establish enterprise guardrails, secure defaults, paved paths, reference architectures, and engineering standards spanning applications, APIs, cloud, data, containers, identity, and infrastructure.
- Architect and guide the development of scalable application security platforms, automation, telemetry, risk analytics, and CI/CD controls used across the enterprise.
- Identify systemic risk patterns, anticipate emerging threats, and sponsor cross-functional programs addressing AI security, software supply chain risk, cloud-native security, and platform resilience.
- Provide authoritative technical guidance for critical vulnerabilities, security incidents, risk acceptances, acquisitions, major transformations, and executive-level technology decisions.
- Define measurement frameworks that connect engineering practices and security controls to risk reduction, business outcomes, developer experience, and operational effectiveness.
- Influence senior engineering, architecture, product, risk, and business leaders to prioritize and adopt strategic security improvements.
- Develop technical talent through mentorship, design and code review, communities of practice, succession planning, and raising expectations for engineering excellence.
- Represent the organization in industry forums, peer networks, strategic vendor engagements, or professional communities as appropriate. All other duties as assigned (note: essential functions and responsibilities may change or new ones may be assigned at any time with or without notice)
Requirements:
- Bachelor's degree in Computer Science, Management Information Systems, Cybersecurity, Information Technology, or a related field; or equivalent combination of education and experience.
- Minimum of 5 years of progressive experience in application security, product security, security engineering, software engineering, cloud security, or a related cybersecurity discipline.
- Demonstrated mastery of threat modeling, secure architecture, code review, application and API security, vulnerability management, cloud-native security, container security, and security automation.
- Proven experience designing or materially influencing large-scale platforms, distributed systems, cloud environments, developer platforms, or security engineering capabilities.
- Advanced software engineering capability in one or more production languages and a strong record of designing maintainable tooling, platforms, or controls.
- Ability to define strategy and technical standards while remaining sufficiently hands-on to evaluate designs, review critical code, guide prototypes, and resolve difficult engineering problems.
- Exceptional systems thinking and technical judgment, including the ability to make defensible decisions when data is incomplete and tradeoffs span security, reliability, delivery, cost, and customer impact.
- Executive-level written and verbal communication skills, with the ability to frame complex risk, build alignment, and influence decisions across organizational boundaries.
- Demonstrated leadership through influence, including mentoring senior engineers, resolving conflict, creating clarity in ambiguity, and sustaining momentum across long-running initiatives. High integrity, sound discretion, organizational awareness, and a consistent record of taking accountability for enterprise outcomes.
Skills / Certification / Licensing:
- Recognized enterprise authority who integrates deep expertise across software, architecture, cloud, data, identity, automation, and emerging technology.
- Defines strategic problems, creates direction, and operates with broad organizational trust and accountability.
- Resolves novel, high-consequence, systemic problems and establishes durable enterprise solutions.
- Shapes organization-wide technology decisions, engineering standards, investment priorities, and risk outcomes.
- Influences executives and senior technical leaders, reconciles competing priorities, and creates alignment across organizational boundaries.
- Multiplies organizational capability through strategy, standards, mentorship, communities of practice, and technical stewardship. Delivers measurable enterprise risk reduction, improved developer experience, stronger technical talent, and scalable secure-by-default capabilities.
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, or other legally protected status.
See All 34 Remote IT Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote IT Security Engineer Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
- Consulting & Professional Services
What Employers Look For
The qualifications that appear most often in remote IT security engineer jobs.
- Bachelor's degree in computer science, information security, or a related field
- Active certifications such as CISSP, CEH, CompTIA Security+, or CISM
- Hands-on experience with SIEM platforms, firewalls, and intrusion detection systems
- Proficiency in vulnerability assessment tools and penetration testing methodologies
- Working knowledge of compliance frameworks including NIST, ISO 27001, and SOC 2
- Experience with cloud security controls in AWS, Azure, or Google Cloud environments
Tips for Your Remote IT Security Engineer Job Search
Apply early to remote roles that fit
Migrate Mate lists remote it security engineer openings from across the U.S. in one place, so you can find roles that match your skills and apply directly without sorting through unrelated listings.
Document your async communication skills visibly
Remote security teams rely on written runbooks, Slack threads, and Confluence documentation. Include examples of incident reports, policy drafts, or post-mortems you've written so hiring managers can see you can communicate security findings clearly without a meeting.
Build a home lab and show your work
Remote employers can't watch you work, so a documented home lab using tools like Splunk, Wazuh, or a cloud security sandbox proves hands-on competence. A GitHub repo or a write-up detailing what you built and what you learned makes your skills concrete and verifiable.
Prepare for async-first remote interviews
Many distributed security teams use asynchronous technical screens before live interviews. Practice explaining your approach to threat detection or vulnerability management in written form, and be ready for a take-home scenario involving log analysis or cloud misconfiguration review.
Remote IT Security Engineer Jobs: Frequently Asked Questions
How do I get a remote it security engineer job?
Remote it security engineer roles go to candidates who can demonstrate self-direction and clear written communication alongside technical depth. Distributed security teams screen for hands-on experience with SIEM platforms, endpoint detection tools, and cloud security frameworks because there's no one to shadow on day one. A home lab, an active GitHub, or a published incident response write-up signals you can work independently, which remote employers weigh heavily.
Which companies hire remote it security engineers?
Companies hiring remote it security engineers right now include Make-A-Wish Foundation of America, Randolph-Brooks Federal Credit Union, and Ahead, based on current remote listings on Migrate Mate as of November 2026. Remote-first software firms, managed security service providers, and distributed financial services companies account for a large share of these openings.
Can you get a remote it security engineer job with no experience?
Yes, but remote entry-level security roles are harder to land than in-office ones because you must work independently from day one without on-site mentorship. Smaller remote-first companies and MSSPs occasionally hire juniors who hold CompTIA Security+, CEH, or equivalent certifications. A documented home lab, a CTF portfolio, or a completed cloud security training path can substitute for professional experience and open those doors.
Do you need a degree for remote it security engineer jobs?
Not always. Many remote employers prioritize certifications such as CISSP, CompTIA Security+, or AWS Security Specialty alongside demonstrable hands-on skills over a formal degree. Distributed teams care most about what you can do asynchronously and independently, so a strong portfolio of real security work, documented in writing, often carries as much weight as a computer science credential.
Which industries hire the most remote it security engineers?
The sectors hiring the most remote it security engineers are Technology & Software and Consulting & Professional Services, based on current remote listings on Migrate Mate as of November 2026. These industries run large distributed workforces and complex cloud environments that require dedicated security coverage regardless of where the engineer is located.
See All 34 Remote IT Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs