Remote jobs in the United States

25+ jobs

Save this search

Added 3 mins ago
RU
Cost Allocation Data Engineer
Randstad USA
Remote, United States
- $45 to $50 USD / hour
We are seeking a senior-level Cost Allocation Data Engineer to design and implement the analytical models powering our enterprise cloud financial management platform. In this role, you will…
Added 3 mins ago
C
Senior AI Developer
ClickUp
Remote, United States
- $200,000 to $250,000 USD / year
…AI daily, and we evaluate AI fluency as part of our hiring process. Join us and help redefine what's possible.…
Added 5 mins ago
Senior Software Engineer (L5), N-Tech Software Engineering
Netflix
Remote, United States
…execute and deliver on the broader strategy and vision. You'll design, develop, and maintain products, infrastructure, and integrations with third-party and other teams’ services. You will…
Added 11 mins ago
TT
Senior Software Engineer, Design
True Talent Solutions Partners
Remote, United States
- $150,000 to $350,000 USD / year
Join a fintech product team as a senior engineer focused on design and frontend craft. You will shape intuitive experiences for complex mortgage workflows, from early design concepts…
Added 14 mins ago
Sr. IAM Engineer | Remote, USA
Optiv Security Inc.
Remote, United States
Optiv is seeking a Sr. IAM Engineer to join Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team. The Optiv AFC line of business…
Added 15 mins ago
S
Staff Backend Graph Engineer
Socure
Remote, United States
- $225,000 to $250,000 USD / year
As a Staff Engineer on this team, you’ll set the technical direction for the platform behind that decision. You’ll own hard problems end to end, work across Engineering, Data Science,…
Added 17 mins ago
Staff Software Engineer, Autonomous Vehicle Performance Metrics
Motional
Remote, United States
…real-world deployment. We are responsible for driving system design, for verifying and validating the autonomy stack, and for defining, measuring, and validating system performance targets.…
Added 18 mins ago
Solutions Architect - Digital Native Business (Geo)
Databricks
Remote, United States
Interview Process: Recruiter Screen → Hiring Manager Screen → Design and Architecture Interview → Live Coding Assessment → Build, Demo, Pitch! Presentation → Reference Check
Added 20 mins ago
CM
Applications Security Engineer II
Centene Management Company LLC
Remote, United States
- $75,300 to $135,400 USD / year
Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties.
Added 21 mins ago
S
Sales Engineer
Sardine
Remote, United States
- $160,000 to $200,000 USD / year
…customers. You will lead prospects through the upsell and cross-sell process by connecting their needs to Sardine’s value to win new customers and drive revenue growth. You will deliver…
Added 26 mins ago
Mobile HVAC Engineer - Wichita Falls, TX
US AMR-Jones Lang LaSalle Americas, Inc.
Remote, United States
…equipment repair and maintenance. Knowledge of overall system design and…
Added 28 mins ago
Refueling & Remote Handling I&C Engineer
NuScale Power, LLC
Remote, United States
Collaborate with mechanical design engineers to integrate instrumentation, sensors, actuators, motion control systems, and automation functions into reactor servicing tools.
Added 30 mins ago
Staff Agentic Software Engineer - US Ticketing Team Lead
Nucleus Security
Remote, United States
…Nucleus Security is seeking an AI-focused, experienced Software Engineer to join our Integrations team and help expand our ecosystem of data integrations with the world’s leading security…
Added 30 mins ago
Senior Associate Software Engineer
Travelers Indemnity Co
Remote, United States
…InsuraMatch is seeking a versatile Senior Associate Software Engineer to support a variety of applications, systems, and platforms that provide acquisition targeting, retention modeling…
Added 36 mins ago
Associate, AI Operations Administrator
SAMC SitusAMC Holdings Corp
Remote, United States
…independent control assurance remain with those teams, and design and build of enterprise security infrastructure remains with Information Security Architecture and Engineering. The…
Added 38 mins ago
Software Engineer Senior Consultant I
Allstate
Remote, United States
We are seeking an accomplished and highly motivated Software Engineer (Full Stack Developer) to join the Law & Regulations Technology team. This position is responsible for the design,…
Added 38 mins ago
SD
Intermediate Cloud Security Engineer (Remote US)
Smile Digital Health
Remote, United States
- $115,000 to $130,000 USD / year
The Cloud Security Engineer is responsible for designing, automating and deploying production-grade services on behalf of the customers to a variety of clouds such as AWS, Azure, OCI and…
Added 1 hour ago
Senior Corporate Security Engineer
GitLab
Remote, United States
As a Senior Corporate Security Engineer, you'll help secure the systems GitLab team members rely on every day across a fully remote environment. This role sits within Corporate Security…
Added 1 hour ago
1
Engineering Manager, Infrastructure (Device Trust)
1Password
Remote, United States
- $192,000 to $278,000 USD / year
…broader 1Password security platform. These systems ingest, process, and store a high volume of telemetry from the devices our customers depend on. Our customers expect this to work with…
Added 2 hours ago
Deal Desk Manager – Global Deal Management
ServiceNow
Remote, United States
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…
Added 2 hours ago
Manager, Software Engineering - Mobile Apps
Funnel Leasing
Remote, United States
Have you ever rented an apartment and wished the process could be better? At Funnel we do too. We know we need to make the process of renting an apartment as easy as purchasing socks on…
Added 2 hours ago
Product Engineer (Full-stack)
Onboarded
Remote, United States
We're looking for a talented Full Stack Product Engineer to join our dynamic team and contribute to the development of our cutting-edge employee hiring and onboarding software. As a key…
Added 2 hours ago
Territory Sales Manager - Kansas City
Victaulic Company
Remote, United States
We engineer change for a more stable and sustainable world.
Added 2 hours ago
L
Staff GTM Systems Engineer
LiveKit
Remote, United States
- $216,000 to $292,000 USD / year
The Staff GTM Systems Engineer at LiveKit is the technical owner and architect of the systems that power our go-to-market engine. You'll decide how our GTM stack is designed, what we build…
Added 2 hours ago
Network Implementation Engineer Automation Specialist (Network Engineer Level II) (Government)
AT&T Technical Services Company, Inc.
Remote, United States
AT&T has an opening for a Network Implementation Engineer Automation Specialist to support the Intelligence Sector. This position is responsible for the delivery and implementation of…

SunCore Digital

Senior Security Operations Engineer

Remote, United States

$165,000 to $205,000 USD / year

Apply About employer

Applications open in a new tab.

Job details

Pay: $165,000 to $205,000 USD / year
Posting language: English

Original job description

Senior Security Operations Engineer About the Role SunCore Digital is seeking a hands-on Senior Security Operations Engineer to assess and improve the security of our applications, cloud environments, development practices, identities, data, and operational tooling. This role will establish practical security standards, build and harden shared security controls, investigate risk, and review security-impacting implementations produced by reliability, recovery, DevOps, and application teams. System-owning teams remain responsible for remediating their applications and services and for operating routine system-specific controls after enablement. This is not a role that manually approves every normal software release. Security review will focus on defined risk areas, including changes involving privileged access, sensitive data, recovery systems, network exposure, secrets, infrastructure, authentication, authorization, and security controls.

Responsibilities

Security assessment

Assess the current security posture across web applications, Flutter mobile applications, APIs, backend services, cloud infrastructure, repositories, CI/CD, databases, and integrations.
Inventory externally accessible services and endpoints.
Identify vulnerabilities, insecure defaults, excessive permissions, unmanaged credentials, and control gaps.
Distinguish confirmed findings from suspected risks and unassessed areas.
Prioritize findings based on exploitability, potential impact, exposure, and launch relevance.
Define remediation requirements and work with system owners, who implement and maintain application- and service-specific fixes. Implement shared security controls where the control belongs to the security function.
Verify that critical findings are resolved effectively.

Identity and access management

Review access to cloud accounts, repositories, databases, CI/CD systems, production environments, and third-party services.
Identify former employee, contractor, shared, excessive, or undocumented access.
Establish least-privilege and access-review practices.
Review service accounts, machine identities, API credentials, and privileged roles.
Define and harden credential lifecycle requirements, and work with DevOps, platform staff, and system owners to implement appropriate issuance, storage, rotation, revocation, and emergency-access mechanisms.
Ensure critical access activity is logged where appropriate.
Support role-based access and authorization reviews.

Application and API security

Review authentication, authorization, session management, permissions, and data isolation.
Assess exposed APIs, input handling, file processing, sensitive-data handling, and administrative functions.
Independently assess high-risk negative-access paths and direct access to restricted endpoints.
Work with QA and developers to convert repeatable security scenarios into regression coverage owned by the applicable delivery team.
Review changes involving sensitive workflows or new public exposure.
Help establish secure coding and review expectations.
Support threat modeling for critical workflows and material architectural changes.

Mobile security

Assess mobile authentication, session handling, secure storage, API access, application permissions, logging, and sensitive-data exposure.
Review risks related to device storage, screenshots, notifications, local caches, and mobile configuration.
Work with the Mobile QA Engineer and mobile developers on security-related testing.
Review mobile release practices where they affect application security.

Security tooling and automation

Define, implement, and harden security-specific automation, including dependency scanning, secret scanning, static analysis, vulnerability scanning, and container or infrastructure scanning where appropriate; establish the long-term owner for each shared control before handoff.
Define security policies, rules, and acceptance thresholds; work with DevOps to integrate shared controls into CI/CD and with repository owners to maintain application-specific configuration.
Establish actionable security gates based on severity and context, while system owners remain responsible for remediation.
Avoid creating low-value controls that block delivery without reducing material risk.
Improve security finding visibility and reporting.
Define exception and escalation procedures.
Track critical remediation through verification.

Review of reliability and recovery implementations

Review security-impacting SRE and Disaster Recovery implementations before production adoption.
Evaluate changes involving:
Privileged automation
Service accounts
Secrets
Backup data
Recovery access
Network or firewall configuration
Infrastructure permissions
Failover paths
Sensitive logging or monitoring
Review DevOps, dashboard, and internal-tooling changes when they affect access, production data, infrastructure, or security controls.
Validate that operational improvements do not introduce avoidable security exposure.

Security operations and incident readiness

Establish security monitoring and escalation requirements.
Develop security incident-response procedures and runbooks.
Define initial security incident severity and notification paths.
Investigate security events and suspicious activity.
Support evidence preservation and technical incident analysis.
Conduct or coordinate security exercises.
Track post-incident corrective actions.
Ensure security runbooks are tested by qualified staff.

Data and vendor security

Identify where sensitive, personal, financial, or operational data is stored and transmitted.
Review encryption in transit and at rest.
Assess retention, deletion, export, logging, and access behavior.
Review third-party services that receive code, credentials, operational data, or sensitive information.
Support vendor security review based on business risk.
Help identify security and privacy obligations that require legal or compliance input.

Collaboration

Work with developers to remediate application findings.
Work with SRE on logging, monitoring, incident readiness, and security-relevant reliability controls.
Work with the Disaster Recovery and Resilience Engineer on backup, restoration, emergency access, and recovery security.
Define security requirements for CI/CD and shared infrastructure; work with DevOps and platform staff to implement them, and with system owners to maintain application-specific configuration.
Work with QA on permissions, authorization, data isolation, and regression scenarios.
Provide clear technical findings and risk information to leadership.

Initial Priorities

Inventory production access, service accounts, secrets, and publicly accessible endpoints.
Review former employee, contractor, and shared access.
Establish and harden shared dependency- and secret-scanning capabilities, coordinate CI/CD integration with DevOps, and assign remediation ownership to the applicable repository teams.
Assess authentication, authorization, and customer-data isolation.
Review critical cloud and infrastructure permissions.
Identify launch-critical security findings.
Establish security review triggers for high-risk changes.
Implement initial security monitoring and incident procedures.
Review SRE and recovery mitigations that affect production security.
Create a factual security-readiness assessment.

Required Qualifications

Five or more years of experience in security engineering, DevSecOps, cloud security, application security, security operations, or a comparable role.
Hands-on experience remediating security issues.
Experience securing cloud-hosted applications and infrastructure.
Experience reviewing authentication, authorization, permissions, and data isolation.
Experience with CI/CD security integration.
Experience with vulnerability, dependency, secret, and static-analysis tooling.
Strong understanding of identity, access, service accounts, secrets, and least privilege.
Experience reviewing web applications and APIs.
Familiarity with mobile application security.
Experience with security monitoring and incident response.
Ability to assess third-party and operational security risks.
Strong technical documentation and communication skills.
Ability to distinguish confirmed vulnerabilities, suspected risks, and unassessed areas.
Comfort working in a small organization where security practices are still being established.

Bonus Points

Experience preparing a platform for its first external users.
Experience establishing security practices in a startup or small engineering organization.
Familiarity with crypto, fintech, digital assets, KYC, AML, or payment-related systems.
Experience with Flutter or mobile application security.
Experience securing disaster-recovery, backup, or privileged automation systems.
Experience with infrastructure as code or containerized platforms.
Experience in a remote, asynchronous environment.

What Success Looks Like

Production access, privileged identities, service accounts, and secrets are inventoried.
Former and excessive access is removed.
Critical repositories and systems have appropriate automated security scanning.
Authentication, authorization, and data-isolation risks are understood.
Launch-critical security findings are visible and remediated or explicitly accepted.
Security-impacting SRE and recovery implementations are reviewed before adoption.
Security controls are practical, documented, and integrated into engineering workflows.
The organization has a tested security incident process.
Security does not depend on undocumented knowledge or manual review of every routine release.

Compensation & Benefits

Base Compensation: Competitive, based on experience, portfolio strength, and geographic location.
Milestone Bonuses: 10% milestone bonus awarded to every team member assisting with the MVP build-out.
Annual Performance Bonus: Represents a significant percentage of total compensation.
Benefits for Domestic Hires: Health, dental, and vision plans.
Annual Paid Offsite: Team retreats in Caribbean, Hawaii, ski destinations, and other exciting locations.

Why Join SunCore Digital?

High-impact role in a rapidly scaling digital company.
Fully remote team with async flexibility.
Direct collaboration with executive leadership and best-in-class marketing/design partners.
Opportunity to shape Security processes and mentor junior team members.
Competitive compensation with performance upside.

Apply About employer

Report this job