Remote Systems Security Engineer Jobs
Remote systems security engineer jobs are open across the U.S. at remote-first firms and distributed teams in defense contracting, financial services, healthcare technology, and cloud infrastructure. Employers hiring remotely right now include Kastle Systems, Johnson Controls, and Second Front Systems. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 32+ Remote Systems Security Engineer jobs
Information System Security Engineer
**Immediate Requirement**
**Remote work**
CSEngineering is seeking an experienced Information System Security Engineer to join our growing team! This position will support the Indian Health Service (IHS), Division of Information Security, under the M-21-31 Logging, Reporting and SSP Development Services effort.
The ideal candidate will bring strong expertise in Information System Security Officer (ISSO) support, Risk Management Framework (RMF), System Security Plan (SSP) development, and cybersecurity compliance. This role will focus on supporting NIST SP 800-53 Rev. 5 security controls, managing compliance documentation through RSA Archer, conducting security assessments, reviewing Plans of Action and Milestones (POA&Ms), and supporting Splunk-based logging and reporting operations.
This is a fully remote position with occasional travel (up to 10%) as required.
JOB RESPONSIBILITIES
- Develop, validate, update, and maintain System Security Plans (SSPs) in accordance with NIST SP 800-53 Rev. 5 requirements.
- Review and validate SSP documentation across assigned systems and maintain accurate compliance records.
- Serve as an Information Security Subject Matter Expert (SME) and provide guidance to System Owners on security control implementation and RMF requirements.
- Review POA&Ms, identify security control gaps, and recommend corrective actions and remediation strategies.
- Manage and update security controls, POA&Ms, supporting evidence, and compliance documentation within RSA Archer.
- Support system assessments, security risk assessments, internal and third-party audits, and vulnerability remediation activities.
- Evaluate system architectures and technology solutions to identify security vulnerabilities and recommend improvements.
- Assist System Owners with System Categorization Worksheets and security control implementation.
- Provide risk-based assessments and recommendations to the ISSO Lead and Federal HQ ISSO.
- Review vulnerability reports and coordinate with System Owners and Cybersecurity Incident Response teams on remediation activities.
- Configure, maintain, and manage Splunk M-21-31 logging packages and Splunk SIEM across EL1, EL2, and EL3 logging levels.
- Generate and maintain logging reports in support of OMB Memorandum M-21-31 and Executive Order 14028.
- Serve as a liaison between information security teams, System Owners, and other stakeholders to communicate security objectives and requirements.
- Provide technical recommendations, documentation, and reporting to support enterprise cybersecurity compliance and risk management initiatives.
REQUIRED QUALIFICATIONS
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Assurance, or a related engineering discipline.
- Minimum of 8 years of dedicated cybersecurity or information assurance experience.
- At least 5 years of hands-on experience with the NIST Risk Management Framework (RMF) and Assessment and Authorization (A&A) processes using NIST SP 800-53 Rev. 4/Rev. 5.
- Minimum of 2 years of hands-on experience using RSA Archer to manage security controls, POA&Ms, and compliance documentation.
- Demonstrated experience managing multiple System Security Plans (SSPs) concurrently, preferably across a large portfolio of systems.
- Strong experience advising non-technical System Owners on cybersecurity requirements, risk management, and security control implementation.
- Proficiency in Splunk, Splunk Enterprise, Splunk Security Enterprise, and Splunk User Behavior Analytics (UBA).
- CISSP or CISM certification required.
- Citizenship: Must be a U.S. Citizen.
Location: Remote (Candidate must be in the DC area)
PREFERRED CERTIFICATIONS
- Information Systems Security Engineering Professional (ISSEP).
- Certified in Risk and Information Systems Control (CRISC).
- CompTIA CASP+.
- At least 5 years of experience with Splunk Enterprise, Splunk Enterprise Security, and User Behavior Analytics (UBA).
ADDITIONAL REQUIREMENTS
- Experience supporting federal government cybersecurity programs is beneficial.
- Strong analytical, documentation, communication, and stakeholder management skills.
- Ability to manage multiple security compliance requirements and meet task-specific response timelines.
BACKGROUND AND SECURITY SCREENING
- Final candidates may be subject to employment verification, education verification, professional reference checks, criminal background screening, security clearance verification, and/or suitability review, as permitted by applicable federal, state, and local laws.
- Candidates are expected to provide accurate and complete information throughout the application and interview process. Any material misrepresentation, omission of relevant information, falsification of qualifications, certifications, employment history, clearance status, or educational credentials may result in removal from consideration or withdrawal of an employment offer.
- For positions supporting federal agencies or government contracts, additional security, clearance, credentialing, or customer-specific suitability requirements may apply.
COMPANY OVERVIEW
Who we are- CSEngineering, a Service-Disabled Veteran-owned small business established in 2002, is dedicated to becoming the premier engineering and services firm in our industry, all while prioritizing client satisfaction above all else.
What we do- With a rich history of excellence, we boast significant expertise in a wide array of areas, including satellite systems, weapons and missile systems, naval architecture, aviation systems, IT and Enterprise Architecture, and more. We offer a comprehensive range of services, including logistics, program management, and IT operations. As a recipient of the Hire Vets Gold Medallion award, we're proud of our commitment to veteran hiring, retention, and professional development.
Why should you be a part of CSE- At CSEngineering, our employees are at the heart of everything we do. We foster a culture of passion and growth, where individuals are encouraged to excel build fulfilling careers, and continually strive for excellence. Our dedication to innovation and excellence propels us forward, as we continuously strive to set new standards in our industry. Join us and be part of a team that's redefining what's possible.
CSEngineering offers a competitive salary and comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off.
CSEngineering is an equal opportunity employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, or veteran status.
Information System Security Engineer
**Immediate Requirement**
**Remote work**
CSEngineering is seeking an experienced Information System Security Engineer to join our growing team! This position will support the Indian Health Service (IHS), Division of Information Security, under the M-21-31 Logging, Reporting and SSP Development Services effort.
The ideal candidate will bring strong expertise in Information System Security Officer (ISSO) support, Risk Management Framework (RMF), System Security Plan (SSP) development, and cybersecurity compliance. This role will focus on supporting NIST SP 800-53 Rev. 5 security controls, managing compliance documentation through RSA Archer, conducting security assessments, reviewing Plans of Action and Milestones (POA&Ms), and supporting Splunk-based logging and reporting operations.
This is a fully remote position with occasional travel (up to 10%) as required.
JOB RESPONSIBILITIES
- Develop, validate, update, and maintain System Security Plans (SSPs) in accordance with NIST SP 800-53 Rev. 5 requirements.
- Review and validate SSP documentation across assigned systems and maintain accurate compliance records.
- Serve as an Information Security Subject Matter Expert (SME) and provide guidance to System Owners on security control implementation and RMF requirements.
- Review POA&Ms, identify security control gaps, and recommend corrective actions and remediation strategies.
- Manage and update security controls, POA&Ms, supporting evidence, and compliance documentation within RSA Archer.
- Support system assessments, security risk assessments, internal and third-party audits, and vulnerability remediation activities.
- Evaluate system architectures and technology solutions to identify security vulnerabilities and recommend improvements.
- Assist System Owners with System Categorization Worksheets and security control implementation.
- Provide risk-based assessments and recommendations to the ISSO Lead and Federal HQ ISSO.
- Review vulnerability reports and coordinate with System Owners and Cybersecurity Incident Response teams on remediation activities.
- Configure, maintain, and manage Splunk M-21-31 logging packages and Splunk SIEM across EL1, EL2, and EL3 logging levels.
- Generate and maintain logging reports in support of OMB Memorandum M-21-31 and Executive Order 14028.
- Serve as a liaison between information security teams, System Owners, and other stakeholders to communicate security objectives and requirements.
- Provide technical recommendations, documentation, and reporting to support enterprise cybersecurity compliance and risk management initiatives.
REQUIRED QUALIFICATIONS
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Assurance, or a related engineering discipline.
- Minimum of 8 years of dedicated cybersecurity or information assurance experience.
- At least 5 years of hands-on experience with the NIST Risk Management Framework (RMF) and Assessment and Authorization (A&A) processes using NIST SP 800-53 Rev. 4/Rev. 5.
- Minimum of 2 years of hands-on experience using RSA Archer to manage security controls, POA&Ms, and compliance documentation.
- Demonstrated experience managing multiple System Security Plans (SSPs) concurrently, preferably across a large portfolio of systems.
- Strong experience advising non-technical System Owners on cybersecurity requirements, risk management, and security control implementation.
- Proficiency in Splunk, Splunk Enterprise, Splunk Security Enterprise, and Splunk User Behavior Analytics (UBA).
- CISSP or CISM certification required.
- Citizenship: Must be a U.S. Citizen.
Location: Remote (Candidate must be in the DC area)
PREFERRED CERTIFICATIONS
- Information Systems Security Engineering Professional (ISSEP).
- Certified in Risk and Information Systems Control (CRISC).
- CompTIA CASP+.
- At least 5 years of experience with Splunk Enterprise, Splunk Enterprise Security, and User Behavior Analytics (UBA).
ADDITIONAL REQUIREMENTS
- Experience supporting federal government cybersecurity programs is beneficial.
- Strong analytical, documentation, communication, and stakeholder management skills.
- Ability to manage multiple security compliance requirements and meet task-specific response timelines.
BACKGROUND AND SECURITY SCREENING
- Final candidates may be subject to employment verification, education verification, professional reference checks, criminal background screening, security clearance verification, and/or suitability review, as permitted by applicable federal, state, and local laws.
- Candidates are expected to provide accurate and complete information throughout the application and interview process. Any material misrepresentation, omission of relevant information, falsification of qualifications, certifications, employment history, clearance status, or educational credentials may result in removal from consideration or withdrawal of an employment offer.
- For positions supporting federal agencies or government contracts, additional security, clearance, credentialing, or customer-specific suitability requirements may apply.
COMPANY OVERVIEW
Who we are- CSEngineering, a Service-Disabled Veteran-owned small business established in 2002, is dedicated to becoming the premier engineering and services firm in our industry, all while prioritizing client satisfaction above all else.
What we do- With a rich history of excellence, we boast significant expertise in a wide array of areas, including satellite systems, weapons and missile systems, naval architecture, aviation systems, IT and Enterprise Architecture, and more. We offer a comprehensive range of services, including logistics, program management, and IT operations. As a recipient of the Hire Vets Gold Medallion award, we're proud of our commitment to veteran hiring, retention, and professional development.
Why should you be a part of CSE- At CSEngineering, our employees are at the heart of everything we do. We foster a culture of passion and growth, where individuals are encouraged to excel build fulfilling careers, and continually strive for excellence. Our dedication to innovation and excellence propels us forward, as we continuously strive to set new standards in our industry. Join us and be part of a team that's redefining what's possible.
CSEngineering offers a competitive salary and comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off.
CSEngineering is an equal opportunity employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, or veteran status.
See All 32 Remote Systems Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Systems Security Engineer Job Market
Who's Hiring
- Kastle Systems12
- Johnson Controls2
- Second Front Systems2
- NVIDIA1
- Viasat1
Top Industries Hiring
- Technology & Software11
- Electronics & Hardware11
- Construction & Real Estate8
- Cybersecurity3
- Manufacturing1
What Employers Look For
The qualifications that appear most often in remote systems security engineer jobs.
- Bachelor's degree in computer science, information security, or a related technical field
- Active or clearable U.S. security clearance at the Secret or Top Secret level
- Professional certification such as CISSP, CISM, CEH, or CompTIA Security+
- Hands-on experience with SIEM platforms, firewalls, and endpoint detection and response tools
- Proficiency in at least one scripting or programming language such as Python, Bash, or PowerShell
- Demonstrated experience conducting vulnerability assessments, penetration testing, or threat modeling
Tips for Your Remote Systems Security Engineer Job Search
Apply early to remote roles that fit
Migrate Mate lists remote systems security engineer openings from across the U.S. in one place, so you can find roles that match your skills and apply directly without sorting through unrelated listings.
Highlight async security communication skills
Remote security teams depend on written runbooks, incident post-mortems, and Slack-based escalation chains. Show employers you document clearly by including examples of incident reports, threat summaries, or security briefings you've written in past roles.
Demonstrate your home lab and tooling setup
Remote employers want to know you can operate independently. Call out the specific tools in your personal environment: Splunk, Elastic SIEM, Wireshark, Kali Linux, or whatever you use to stay sharp. A functioning home lab signals self-direction and keeps your skills current.
Prepare for remote technical interview formats
Remote systems security interviews often combine asynchronous take-home threat scenarios with live video walkthroughs of your methodology. Practice explaining your reasoning out loud while screen-sharing, since interviewers are assessing how you communicate complex security decisions without whiteboards or in-person cues.
Remote Systems Security Engineer Jobs: Frequently Asked Questions
How do I get a remote systems security engineer job?
Remote systems security engineer roles go to candidates who can demonstrate independent judgment, clear written communication, and the ability to triage and escalate issues without in-person backup. Remote employers screen for hands-on experience with SIEM platforms, endpoint detection tools, and zero-trust architecture. Holding active certifications like CISSP, CEH, or CompTIA Security+ and showing documented outcomes from past work gives you a clear edge over equally qualified candidates who can't prove remote-readiness.
Which companies hire remote systems security engineers?
Remote systems security engineer roles are posted by Kastle Systems, Johnson Controls, and Second Front Systems and others right now, based on current remote listings on Migrate Mate as of November 2026. Remote-first software firms, distributed defense contractors, and cloud-native fintech and healthtech companies make up the largest share of hiring for this role.
Can you get a remote systems security engineer job with no experience?
Yes, but remote entry-level roles are harder to land because employers expect you to work independently from day one without on-site mentorship. Your best path is building a home lab, earning foundational certifications like CompTIA Security+ or Google's Cybersecurity Certificate, and contributing to open-source security projects. Smaller remote-first startups and managed security service providers are more likely to hire entry-level candidates who can demonstrate self-directed learning and practical skills.
Do you need a degree for remote systems security engineer jobs?
Not always. Many remote employers weigh certifications, demonstrated skills, and real work results more heavily than a formal degree, particularly for candidates who hold CISSP, CISM, or equivalent credentials. A portfolio showing vulnerability assessments, incident response work, or security architecture contributions can substitute for a degree at remote-first companies and cloud-focused teams that prioritize output over credentials.
Which industries hire the most remote systems security engineers?
The sectors hiring the most remote systems security engineers are Technology & Software, Electronics & Hardware, and Construction & Real Estate, based on current remote listings on Migrate Mate as of November 2026. These industries rely on distributed teams protecting sensitive data and regulated systems, which makes remote security engineers a practical and common hire across their engineering and IT organizations.
See All 32 Remote Systems Security Engineer Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs