Remote Lead Security Officer Jobs
Remote Lead Security Officer jobs are open across the U.S. in sectors like cybersecurity, financial services, healthcare, and technology, where distributed teams need experienced professionals to oversee security programs without being on-site. Employers hiring remotely right now include Gainwell Technologies, NMS, and Wiz. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Open roles12
Top employerGainwell Technologies
Top credentialMaster's degree
Companies hiring10
Showing 5 of 12+ Remote Lead Security Officer jobs
Information Systems Security Officer
We won't show you this job again
New 20h ago
Sparibis
Information Systems Security Officer
Washington, District of Columbia
New 20h ago
Information Security Officer
We won't show you this job again
Added 3d ago
Gainwell Technologies LLC
Information Security Officer
California
Added 3d ago
Information Security Officer (ISO) (Remote)
We won't show you this job again
Added 1w ago
Gainwell Technologies LLC
Information Security Officer (ISO) (Remote)
Arizona
Added 1w ago
S
Information System Security Officer - ISSO Analyst
We won't show you this job again
S
Added 2w ago
SecurePro
Information System Security Officer - ISSO Analyst
Washington, District of Columbia
Added 2w ago
Information System Security Officer–Federal Programs
We won't show you this job again
Added 3w ago
Commence
Information System Security Officer–Federal Programs
Virginia Beach, Virginia
Added 3w ago
New 20h ago
Information Systems Security Officer
Sparibis·Washington, District of Columbia
Job functions:
Remote (US)
Bachelor's degree in information technology
Job Description
Location: 100% remote.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
- Experience independently leading and executing the complete Risk Management Framework (RMF) lifecycle for IATT/ATO activities involving custom on-prem and AWS cloud solutions.
- Professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs.
- Experience developing, managing, maintaining, and supporting comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Cybersecurity related certification preferred.
- Ability to independently lead, manage, and execute the complete RMF lifecycle for assigned information systems, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring, to obtain and maintain an Authority to Operate (ATO).
- Coordinate RMF activities with U.S. Navy customers, government stakeholders, system owners, engineering teams, and other program personnel to ensure security requirements are implemented and authorization milestones are achieved.
- Develop, manage, maintain, and support comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Manage and maintain RMF authorization documentation, security control assessments, compliance information, and authorization package records within the Enterprise Mission Assurance Support Service (eMASS), ensuring documentation and security control implementation evidence are accurate and current.
- Interpret and apply applicable Cybersecurity Control Security Requirements Guides (CCSRGs) to assess system security requirements, validate security control implementation, identify compliance gaps, and support RMF authorization and continuous monitoring activities.
- Interpret, assess, and apply NIST SP 800-53 security controls and applicable government cybersecurity requirements to custom on-premises and AWS cloud environments, identifying control gaps and coordinating implementation and remediation activities.
- Conduct and coordinate vulnerability management activities, including ACAS scanning, vulnerability analysis, Security Technical Implementation Guides (STIGs) reviews, and tracking remediation through VRAM and other applicable tools and processes.
- Perform continuous monitoring of activities, including monthly security reporting, vulnerability scan analysis, security control reviews, account and access reviews, configuration changes, and tracking of corrective actions to maintain an effective security posture.
- Develop, coordinate, and execute security assessment and testing plans to evaluate system security requirements, assess the implementation and effectiveness of security controls, identify vulnerabilities and deficiencies, and document assessment results and supporting evidence required for RMF authorization package submission and approval.
- Identify, document, assess, and communicate cybersecurity risks and deficiencies.
- Coordinate directly with program stakeholders to gather, document, and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and track security work through completion.
- Assist the customer in preparing training and tabletop exercises for contingency planning, incident response and disaster recovery.
- Must have 5+ years of professional experience in Cybersecurity.
- Demonstrated experience serving as an ISSO or in a comparable cybersecurity role with direct responsibility for independently managing system security authorization, RMF compliance, and ongoing security operations within a federal government environment.
- Must be able to obtain and maintain a Secret security clearance.
- Must have a Bachelor’s Degree in a Cybersecurity or IT related field.
- Cybersecurity related certification preferred.
- Demonstrated experience independently leading and executing the complete RMF lifecycle for IATT/ATO activities involving custom on-prem and cloud solutions.
- This includes experience with RMF preparation, system categorization, supporting information systems, security controls selection and implementation, security control assessments, authorization package development and submission, coordination of ATO approvals and authorization, and continuous monitoring.
- Experience preparing, maintaining, and managing comprehensive RMF authorization documentation packages, including SSPs, SARs, POA&Ms, Security Assessment Reports, and supporting assessment evidence.
- Must have strong working knowledge and professional experience applying NIST SP 800-53 security controls and applicable federal cybersecurity requirements within the RMF.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs and assessing system compliance with applicable security configuration requirements.
- Must have demonstrated professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation, security control assessments, compliance records, and supporting evidence.
- Must have demonstrated professional experience interpreting and applying applicable CCSRG requirements to assess system security controls, validate compliance, identify deficiencies, and support authorization activities.
- Experience evaluating applications, infrastructure, database, and API security, including familiarity with API-based security mechanisms and the OWASP framework for web application vulnerabilities.
- Strong understanding of AWS cloud environments, architecture, and security services, including experience assessing and implementing security controls within cloud-based environments.
- Experience conducting continuous monitoring, analyzing vulnerability scan results, preparing security status reports, and maintaining ongoing system security compliance.
- Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
- Experience assessing security control deficiencies, evaluating cybersecurity risks, documenting findings, developing remediation plans, and tracking corrective actions through resolution.
- Strong communication and organizational skills, with the ability to independently manage multiple RMF activities, coordinate with government customers and technical stakeholders, communicate security risks, and drive deliverables through completion.
- Experience with requirements analysis, security architecture and design, translating cybersecurity requirements into technical security controls, and coordinating implementation with engineering and technical teams.
- Experience gathering and creating security requirements, coordinating with stakeholders, facilitating meetings, and tracking security work through completion.
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
- Familiarity with Atlassian tools, such as Jira, Confluence, and/or Splunk.
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
Sparibis
Information Systems Security Officer
Washington, District of Columbia
New 20h ago
Job functions:
Remote (US)
Bachelor's degree in information technology
Job Description
Location: 100% remote.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
- Experience independently leading and executing the complete Risk Management Framework (RMF) lifecycle for IATT/ATO activities involving custom on-prem and AWS cloud solutions.
- Professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs.
- Experience developing, managing, maintaining, and supporting comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Cybersecurity related certification preferred.
- Ability to independently lead, manage, and execute the complete RMF lifecycle for assigned information systems, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring, to obtain and maintain an Authority to Operate (ATO).
- Coordinate RMF activities with U.S. Navy customers, government stakeholders, system owners, engineering teams, and other program personnel to ensure security requirements are implemented and authorization milestones are achieved.
- Develop, manage, maintain, and support comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Manage and maintain RMF authorization documentation, security control assessments, compliance information, and authorization package records within the Enterprise Mission Assurance Support Service (eMASS), ensuring documentation and security control implementation evidence are accurate and current.
- Interpret and apply applicable Cybersecurity Control Security Requirements Guides (CCSRGs) to assess system security requirements, validate security control implementation, identify compliance gaps, and support RMF authorization and continuous monitoring activities.
- Interpret, assess, and apply NIST SP 800-53 security controls and applicable government cybersecurity requirements to custom on-premises and AWS cloud environments, identifying control gaps and coordinating implementation and remediation activities.
- Conduct and coordinate vulnerability management activities, including ACAS scanning, vulnerability analysis, Security Technical Implementation Guides (STIGs) reviews, and tracking remediation through VRAM and other applicable tools and processes.
- Perform continuous monitoring of activities, including monthly security reporting, vulnerability scan analysis, security control reviews, account and access reviews, configuration changes, and tracking of corrective actions to maintain an effective security posture.
- Develop, coordinate, and execute security assessment and testing plans to evaluate system security requirements, assess the implementation and effectiveness of security controls, identify vulnerabilities and deficiencies, and document assessment results and supporting evidence required for RMF authorization package submission and approval.
- Identify, document, assess, and communicate cybersecurity risks and deficiencies.
- Coordinate directly with program stakeholders to gather, document, and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and track security work through completion.
- Assist the customer in preparing training and tabletop exercises for contingency planning, incident response and disaster recovery.
- Must have 5+ years of professional experience in Cybersecurity.
- Demonstrated experience serving as an ISSO or in a comparable cybersecurity role with direct responsibility for independently managing system security authorization, RMF compliance, and ongoing security operations within a federal government environment.
- Must be able to obtain and maintain a Secret security clearance.
- Must have a Bachelor’s Degree in a Cybersecurity or IT related field.
- Cybersecurity related certification preferred.
- Demonstrated experience independently leading and executing the complete RMF lifecycle for IATT/ATO activities involving custom on-prem and cloud solutions.
- This includes experience with RMF preparation, system categorization, supporting information systems, security controls selection and implementation, security control assessments, authorization package development and submission, coordination of ATO approvals and authorization, and continuous monitoring.
- Experience preparing, maintaining, and managing comprehensive RMF authorization documentation packages, including SSPs, SARs, POA&Ms, Security Assessment Reports, and supporting assessment evidence.
- Must have strong working knowledge and professional experience applying NIST SP 800-53 security controls and applicable federal cybersecurity requirements within the RMF.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs and assessing system compliance with applicable security configuration requirements.
- Must have demonstrated professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation, security control assessments, compliance records, and supporting evidence.
- Must have demonstrated professional experience interpreting and applying applicable CCSRG requirements to assess system security controls, validate compliance, identify deficiencies, and support authorization activities.
- Experience evaluating applications, infrastructure, database, and API security, including familiarity with API-based security mechanisms and the OWASP framework for web application vulnerabilities.
- Strong understanding of AWS cloud environments, architecture, and security services, including experience assessing and implementing security controls within cloud-based environments.
- Experience conducting continuous monitoring, analyzing vulnerability scan results, preparing security status reports, and maintaining ongoing system security compliance.
- Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
- Experience assessing security control deficiencies, evaluating cybersecurity risks, documenting findings, developing remediation plans, and tracking corrective actions through resolution.
- Strong communication and organizational skills, with the ability to independently manage multiple RMF activities, coordinate with government customers and technical stakeholders, communicate security risks, and drive deliverables through completion.
- Experience with requirements analysis, security architecture and design, translating cybersecurity requirements into technical security controls, and coordinating implementation with engineering and technical teams.
- Experience gathering and creating security requirements, coordinating with stakeholders, facilitating meetings, and tracking security work through completion.
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
- Familiarity with Atlassian tools, such as Jira, Confluence, and/or Splunk.
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
See All 12 Remote Lead Security Officer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Lead Security Officer Job Market
Who's Hiring
What Employers Look For
The qualifications that appear most often in remote lead security officer jobs.
- Minimum 3-5 years of security experience with at least one year in a supervisory or lead capacity
- Valid state security guard license or registration required by jurisdiction
- CPR, AED, and first aid certification from an accredited provider
- Demonstrated experience writing detailed incident, accident, and shift reports
- Proficiency with access control systems, CCTV monitoring platforms, and visitor management software
- High school diploma or GED required, with associate or bachelor's degree in criminal justice preferred
Tips for Your Remote Lead Security Officer Job Search
Apply early to remote roles that fit
Migrate Mate lists remote lead security officer openings from across the U.S. in one place, so you can find roles that match your background and apply directly without sifting through unrelated postings.
Show async coordination skills upfront
Remote lead security officer roles require managing incidents, writing policies, and directing staff entirely through written channels. Highlight experience using tools like Slack, Microsoft Teams, or ticketing systems to coordinate security operations without in-person contact.
Lead with security certifications on your resume
Remote employers screening lead security officer candidates prioritize certifications like CPP, PSP, or CISSP early in the review process. Place your active credentials in a dedicated section near the top so they're visible before a recruiter reads your work history.
Prepare for remote panel interviews on security scenarios
Remote lead security officer interviews frequently involve video panels where multiple stakeholders assess how you'd handle real incidents, policy decisions, or staffing challenges. Practice walking through structured responses that demonstrate independent judgment and clear verbal communication under pressure.
Remote Lead Security Officer Jobs: Frequently Asked Questions
How do I get a remote lead security officer job?
Target companies with distributed security teams, such as remote-first technology firms, cloud service providers, and financial services companies that manage security operations across multiple locations. Remote employers screen heavily for self-direction, clear written communication, and the ability to coordinate investigations or policy enforcement asynchronously. Certifications like CISSP, CPP, or PSP, combined with demonstrated experience managing security personnel without direct oversight, give candidates a clear edge.
Which companies hire remote lead security officers?
Companies hiring remote lead security officers right now include Gainwell Technologies, NMS, and Wiz, based on current remote listings on Migrate Mate as of November 2026. These tend to be remote-first firms, enterprise technology companies, and large distributed organizations in sectors like healthcare, financial services, and cybersecurity that need security leadership across multiple sites or virtual environments.
Can you get a remote lead security officer job with no experience?
Yes, but remote entry-level lead security officer roles are harder to land because employers expect you to operate independently from day one with minimal supervision. Your best path is through smaller remote-first companies or startups that hire developing security professionals. Showing completed security certifications, documented volunteer or contract security work, and strong written communication skills can substitute for direct experience in a traditional setting.
Do you need a degree for remote lead security officer jobs?
Not always. Many remote employers weigh professional certifications, hands-on security management experience, and demonstrated results over a formal degree for lead security officer roles. Credentials like CPP, PSP, or CISSP carry significant weight, as does a verifiable history of leading security teams, managing incidents, and developing security protocols that produced measurable outcomes.
See All 12 Remote Lead Security Officer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs