Remote Cyber security Jobs · Application Security

Job listings

US 18w maternity 16w paternity

  • Contribute to secure-by-design practices and maturing SAST, SCA, and DAST programs.
  • Develop Secure AI Development Lifecycle and AI-assisted threat modeling framework.
  • Mentor engineers on secure coding and foster cross-functional collaboration.

Spring Health is a global mental health company using an AI-native platform to deliver personalized mental health support. The company reaches over 170 million people worldwide and fosters a culture of innovation, collaboration, and commitment to eliminating barriers to mental health.

$160,000–$180,000/yr
US Unlimited PTO

  • Own and mature Cleo's SSDLC, including threat modeling, design reviews, and automated security scanning.
  • Run risk-based triage for product vulnerabilities, penetration testing, and the CVE lifecycle.
  • Own product security posture, customer-facing advisories, and secure-by-default configurations.

Cleo provides secure data integration and managed file transfer solutions for enterprise businesses. With over 4,000 clients and a 99% retention rate, the company promotes a supportive, life-work balanced culture.

US Unlimited PTO

  • Build and tune the application security scanning program (SAST, DAST, SCA, container and IaC) to surface real risk.
  • Triage scan, penetration test, and bug bounty findings, prioritizing by risk and tracking remediation to closure.
  • Partner with engineering on threat modeling, secure-coding standards, and hands-on fixes.

Turquoise Health is a Series C price transparency platform building a more open, efficient healthcare marketplace for finance leaders. They're a remote-first US team backed by top investors, powering transparency for 300+ enterprise organizations.

Deputy CISO

Ethos
$185,000–$327,000/yr

  • Partner with the CISO to define and execute security strategy, roadmap, and priorities across the organization.
  • Provide hands-on technical review and oversight of security architecture across cloud platforms, applications, APIs, and infrastructure.
  • Lead technical incident response and threat modeling while driving secure-by-design practices into the SDLC and CI/CD pipelines.

Ethos is a leading life insurance technology company on a mission to protect families by democratizing access to life insurance and empowering agents at scale. The company is transforming the life insurance experience through a technology platform that makes coverage instant, accessible, and easy to obtain without medical exams.

  • Work with engineering teams to run security assessments and threat models for cloud-native and SaaS products.
  • Review cloud application architectures, build automation for security controls, and participate in incident response.
  • Communicate security risks to technical and non-technical audiences and champion improvements to security processes.

Atlassian provides collaboration software solutions designed to help teams work better together. The company has a global, inclusive culture where the unique contributions of all employees create success.

$120,000–$150,000/yr

  • Protect cloud infrastructure, applications, and customer data across a modern technology environment.
  • Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
  • Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.

Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.

  • Lead the Application Security program across all products, embedding security throughout the SDLC.
  • Integrate AppSec findings into centralized vulnerability workflows, correlating them with asset and exploit intelligence.
  • Automate security testing pipelines and mentor engineers on secure coding and threat modeling.

ServiceNow is the AI control tower for business reinvention, helping 85% of the Fortune 500 work smarter with its AI platform. The company is building an AI-native culture where technology and talent are unstoppable together.

$160,000–$180,000/yr

  • Lead and mature cybersecurity compliance programs including SOC 2 Type 2 and ISO 27001 readiness.
  • Drive cloud and application security across AWS and Azure, integrating secure SDLC and DevSecOps practices.
  • Manage corporate IT operations, identity and access, and build the cybersecurity team as the organization grows.

Genea is a leader in property technology, providing cloud-based physical security, submeter billing, and on-demand HVAC solutions to over 1 million users across 39 countries. It has been recognized as a Top Workplace from 2021-2025 with a 4.3 Glassdoor rating, fostering a team-oriented and transparent culture.