Top Remote Security Engineer Jobs in Los Angeles, CA

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Design, deploy, and maintain cloud and edge security across AWS/GCP/Azure including Cloudflare WAF and SASE. Implement zero-trust access, CSPM, IaC security, threat modeling, incident runbooks, detection tuning, and mentor junior engineers while participating in on-call rotation.

The Senior Application Security Engineer will implement security controls for space systems, ensuring compliance with government standards while collaborating with engineering teams to enhance security practices and respond to threats.

Senior technical security engineer responsible for cloud infrastructure security, detection engineering, incident response, application and product security, vulnerability management, penetration test ownership, and security automation. Partners with platform, logistics, and IT teams, manages an application security contractor, and builds tooling to raise the security posture across AWS, IaC, edge, and container environments.

Own and drive product security for the MongoDB Database Server: lead fuzzing, threat modeling, secrets/container security efforts; perform security assessments, POCs, code reviews, and remediation for low-level memory issues; partner with engineering to design controls and educate teams.

Designs, implements, maintains, and troubleshoots enterprise Identity and Access Management systems. Integrates IAM platforms, manages authentication/authorization, performs patching and monitoring, provides training and best-practice guidance, and supports compliance and incident resolution.

Design and implement multi-cloud security controls, build policy-as-code and IaC guardrails integrated into CI/CD, harden container and Kubernetes workloads, perform vulnerability analysis and remediation, support incident response and forensics, provide audit evidence for compliance frameworks, mentor other security engineers, and participate in on-call incident rotations to improve remediation and response processes.

Assess and harden software supply chain security by performing technical assessments, designing and implementing security controls and monitoring for build pipelines, investigating systems for vulnerabilities, creating tooling to address gaps, and leading cross-team projects to improve CrowdStrike's product security posture.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Designs, implements, tests, and maintains enterprise IAM/SSO solutions. Troubleshoots authentication/authorization issues, integrates federation protocols (SAML/OAuth/SCIM), applies patches, trains stakeholders, and advises on IAM best practices and compliance.

Lead application security efforts by threat modeling (STRIDE), performing secure code reviews, creating CI/CD security tests, administering bug bounty programs, coaching security champions, consulting with development teams, and maturing the AppSec program while leveraging AI to streamline work.

Build and maintain Ruby on Rails backend features for vulnerability management, including security dashboards, reports, and ingestion pipelines. Improve system performance, reliability, and scalability; collaborate across backend, frontend, product, design, and security teams; review code; address technical debt; and participate in on-call rotations. The role requires relational database experience, distributed-team collaboration, technical problem-solving, and contributions across the stack when needed.

Lead application security engineering across the SDLC using AI-assisted threat modeling, automated security testing, vulnerability prioritization, and secure-by-default controls. Partner with Engineering, Product, QA, DevOps, and AI platform teams to secure applications, APIs, cloud infrastructure, data, and AI/ML systems. Build security automation, CI/CD controls, policy-as-code guardrails, developer enablement, and proactive defenses against emerging threats such as prompt injection and data poisoning.

Design, implement, and support enterprise identity and access management using Microsoft Entra. Build controls for Conditional Access, MFA, identity governance, privileged access, authentication modernization, and Zero Trust. Develop PowerShell automation for identity lifecycle and governance, partner with technical and business teams, improve security operations, and mentor engineers. The role also includes on-call participation and occasional after-hours work.

Leads enterprise AI tooling and security engineering, designing scalable cloud platforms and secure AI applications. Responsibilities include protecting models, agents, prompts, data, APIs, and outputs; securing the AI/ML lifecycle; implementing identity, encryption, monitoring, threat detection, adversarial testing, and incident response; and establishing engineering standards. The role mentors engineers, influences architecture and technology strategy, and partners with governance, risk, compliance, and business teams to support responsible AI adoption.

Leads enterprise AI tooling and security strategy, building secure cloud-native platforms and protecting AI models, agents, prompts, data, APIs, and outputs. Designs controls for identity, access, encryption, monitoring, threat detection, adversarial testing, governance, and incident response. Provides distinguished technical leadership, mentors engineers, establishes engineering standards, and partners across architecture, security, governance, risk, compliance, and business teams.

Build and operate security log pipelines, SIEM detections, endpoint controls, security automation, and internal tooling across AWS, macOS, Windows, CI/CD, and infrastructure repositories. Develop primarily in Python, implement Terraform-based infrastructure and policy-as-code safeguards, integrate security tools through APIs, and embed scanning and secrets detection into developer workflows. Own the reliability and coverage of security platforms while independently driving projects and implementing fixes directly in systems managed by other teams.

Own AWS cloud security posture and vulnerability management using Wiz and AWS-native services. Build Infrastructure as Code guardrails, secure CI/CD pipelines, automate vulnerability workflows, and operate WAF protections. Partner with DevOps and engineering on IAM, network segmentation, containers, secrets, data exposure, telemetry, threat modeling, and application security. Drive projects independently while reducing organizational risk.

Lead detection, response, and digital forensics for security incidents. Monitor alerts, perform technical analysis, act as Incident Commander, build automation and runbooks, mentor engineers, and coordinate cross-team investigations and insider threat work.

Drive adoption of Datadog security solutions in strategic enterprise accounts. Partner with sales teams to understand customer requirements, conduct technical demonstrations, support evaluations and proof-of-value initiatives, develop proposals, and provide technical expertise throughout the sales cycle. Maintain expertise in security products, vulnerabilities, cloud platforms, SIEM, SOC workflows, endpoint security, and application security. Relay customer feedback to product and engineering teams and participate in industry events with up to 30% travel.

Lead hands-on security engineer responsible for designing, implementing, hardening, automating, and optimizing enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Builds and maintains security platforms (SIEM, SOAR, XDR/EDR), develops detection logic, automates workflows, supports incident response, and partners with cross-functional teams to raise security engineering maturity and reduce risk.

Hands-on Staff Security Engineer to build and operate DevSecOps capabilities: automate security controls, harden AWS/cloud and CI/CD, improve supply-chain security, build detection/response tooling, partner with engineering for secure design, and lead incident response and compliance automation.

Own and define IAM strategy for corporate and production environments. Migrate Okta to Terraform, design least-privilege access, automate provisioning/deprovisioning and access reviews, build/manage MDM/MAM tooling, partner with platform and engineering teams, and serve as the IAM subject matter expert across Security, IT, and Engineering.

Defines enterprise technology strategy, architecture standards, security controls, and multi-year roadmaps across AWS, Azure, GCP, GitHub Enterprise, AI platforms, and infrastructure. Leads cloud governance, migration, modernization, FinOps, developer platform management, AI governance, and security architecture initiatives. Advises executives, ensures compliance and risk alignment, drives operational excellence, and mentors architects and engineers.