Remote Security Operations Jobs in the US

Find remote security operations opportunities with fresh hourly updates. Open to US candidates.

Updated hourlyLast updated: 12:10 AM EDT

Total jobs today

Added in last hour

Companies hiring now

391 jobs found

Strict location onlyShow closed jobs

Post Date

Minimum Salary

Experience

391 Jobs

293 Companies

IT & Security Operations Analyst

UpGuard

We're on a mission to protect the world's data.

Security Operations8 hours ago

Full Time Remote SeniorTeam 51-200Since 2012H1B No Sponsor

Company Site LinkedIn

• Run daily, weekly, and periodic IT and security checklists, with a focus on Google SecOps/Chronicle monitoring • Perform health checks across GCP infrastructure, SaaS applications, and security tooling (alerts, compliance, CI/CD pipelines) • Troubleshoot security or infrastructure issues, document fixes, and raise follow-up actions • Collaborate with DevOps and InfraOps on platform-level and security-related issues • Identify and propose security and platform improvements as you gain business context • Implement automation, security tooling, and platform enhancements to strengthen cloud and SaaS environments • Contribute to scripts, dashboards, and operational improvements with a focus on security and compliance • Feed insights from day-to-day work into long-term IT security and operational strategy • Occasionally assist with IT support tasks across systems, hardware, and software • Prioritize tasks effectively and align timelines with stakeholders

Cloud Google Cloud Platform MacOS Python Terraform

View details: IT & Security Operations Analyst

California + 11 more

Apply

IT & Security Operations Analyst

UpGuard Inc.

Security Operations12 hours ago

Full Time Remote Mid Level

Role Description We’re looking for a smart, curious, and resourceful human to join our IT and Security Operations team at UpGuard. You’ll enjoy daily interactions with our globally distributed workforce, solving problems, improving systems, and helping to scale how we support and secure our environment. While our broader team spans enterprise technology operations, support, cybersecurity, and risk, this role focuses on core IT operations—with hands-on support, break/fix work, and meaningful contributions to enterprise and departmental IT enhancements. Our IT and Security Operations team also plays an active role in DevOps and InfraOps initiatives, contributing to tooling, automation, and the foundations that enable engineering velocity and operational excellence. You won’t just keep the lights on. You’ll help shape how we evolve. UpGuard is in the midst of a company-wide transformation, powered by cutting-edge data analytics, automation, and AI. You’ll be right at the heart of it, helping to drive the systems and support that make it all possible. Qualifications - Practical experience in IT and security operations across cloud infrastructure (GCP) and SaaS environments - Hands-on knowledge of Google SecOps/Chronicle for threat detection and incident response - Strong understanding of identity and access management (Okta), including SSO/MFA, SCIM, and RBAC concepts - Familiarity with automation platforms (Zapier, N8N) and scripting (Bash, PowerShell, Python) to streamline tasks and improve security operations - Experience managing and integrating enterprise SaaS applications in a security-conscious environment - Exposure to infrastructure-as-code tools like Terraform or similar, or willingness to learn - Thoughtful, empathetic approach to end-user support across globally distributed teams - Hands-on experience managing laptop fleets (macOS and ChromeOS) Requirements - Run daily, weekly, and periodic IT and security checklists, with a focus on Google SecOps/Chronicle monitoring - Perform health checks across GCP infrastructure, SaaS applications, and security tooling (alerts, compliance, CI/CD pipelines) - Troubleshoot security or infrastructure issues, document fixes, and raise follow-up actions - Collaborate with DevOps and InfraOps on platform-level and security-related issues - Identify and propose security and platform improvements as you gain business context - Implement automation, security tooling, and platform enhancements to strengthen cloud and SaaS environments - Contribute to scripts, dashboards, and operational improvements with a focus on security and compliance - Feed insights from day-to-day work into long-term IT security and operational strategy - Occasionally assist with IT support tasks across systems, hardware, and software - Prioritize tasks effectively and align timelines with stakeholders Benefits - Monthly Lifestyle subsidy: Use this for financial, physical, and mental well-being - WFH set-up allowance: To ensure you have the right environment to work in, we will help you get set up within your first 3 months at UpGuard - $1500 USD annual Learning & Development allowance: To support your career development, all team members will be able to expense development opportunities against this allowance - Annual leave: PTO plus two additional UpGuardian leave days to give you time to recharge your batteries - 18 weeks paid Parental Leave: Irrespective of parenting role - Personal Leave Allowance: This includes sick & carer’s leave - Fully remote working environment: While we have physical offices in Sydney & Hobart, we do not mandate compulsory attendance - Top-spec hardware: All team members will be provided with top-spec laptops for their role - Generative AI subsidy: UpGuard provides paid subscriptions for all team members to access generative AI tools to support their work - Health Insurance: Health, dental, and vision insurance

View details: IT & Security Operations Analyst

United States + 1 more

Apply

Cybersecurity Incident Response Triage Analyst

Accenture Federal Services

We believe in the power of change, harnessed in ways that matter for our country and communities.

Security Operations17 hours ago

Full Time Remote JuniorTeam 10,001+Since 2017H1B No Sponsor

Company Site LinkedIn

• Actively monitor and respond to cybersecurity incidents related to alerted policy violations • Analyze and investigate incidents to determine their nature and scope. • Coordinate with the lead and other Cybersecurity Incident Response Teams for effective incident resolution. • Document incidents and response activities in detail. • Stay updated with the latest cybersecurity threats and trends. • Assist in developing and refining incident response strategies and procedures. • Collaborate with operations teams, legal, human resources and management to investigate security issues and interview investigation subjects to determine true and false positives.

Cyber Security Firewalls Linux TCP/IP

View details: Cybersecurity Incident Response Triage Analyst

Virginia

$53.9K - $120.1K / year

Apply

Manager, Security Operations

Bugcrowd

See Security Differently™

Security Operations21 hours ago

Full Time Remote SeniorTeam 201-500Since 2012H1B No Sponsor

Company Site LinkedIn

• Lead, coach, and develop a team of Security Consultants through regular feedback, career development, and performance management • Serve as a subject matter expert in at least one security specialty (web, network, cloud, or mobile) and provide technical guidance to internal and external stakeholders • Demonstrate expertise across all vulnerability submission types and support complex escalations and appeals, partnering with other business units as needed • Drive operational excellence by measuring team performance, identifying opportunities for automation, and implementing process improvements • Plan, prioritize, and manage team workloads while adapting to changing business needs and customer priorities • Mentor team members and contribute to the growth of the broader security organization through knowledge sharing and technical leadership • Build strong cross-functional partnerships to improve workflows and deliver high-quality customer outcomes • Lead effective meetings, clearly communicate priorities, and ensure timely execution of action items • Act as a trusted advisor to leadership and customers by providing sound technical judgment and operational insight • Stay current on security industry standards, emerging threats, and best practices to continuously improve team capabilities.

Cloud

View details: Manager, Security Operations

United States

$129.3K - $161.6K / year

Apply

Engineer - Security Operations and Incident Response

Pearl Consulting Group

Security Operations1 day ago

Full Time Remote Mid Level

Role Description This role is a critical function responsible for the ongoing transformation of the organization’s Security Operations & Incident Response program. With a focus on maintaining resilience and protecting the global enterprise from cybersecurity threats, the team operates an advanced security operations and incident response program focused on the identification, analysis, and eradication of cybersecurity threats and incidents across the global enterprise. In support of the rapid growth of this critical program, we are looking for an experienced, passionate, and highly organized engineer who will drive operational delivery excellence and continuous advancement across processes and technologies. Primary Responsibilities - Expert-level support for deep dive investigations, including digital forensics (memory, network, and malware analysis). - Author and refine IR playbooks and operational guidelines to ensure the team remains agile in an evolving threat landscape. - Develop and maintain threat models, incorporating findings from penetration tests into detection strategies. - Design, implement, and refine complex detection rules and automated remediation workflows to identify adversarial behavior. - Utilize threat intelligence and the MITRE ATT&CK framework to identify gaps in visibility and proactively mitigate emerging risks. - Maintain comprehensive documentation of detection strategies, active investigations, and incident timelines. - Work with the SIEM team to continuously tune SIEM rules to maximize detection fidelity while minimizing alert fatigue. - Review and tune threat intelligence systems, including brand protection and dark web monitoring. - Proficiency in scripting and query building using Python, XQL, PowerShell, or Bash, and experience with automation and/or orchestration (SOAR) tools. - Support IR leadership as backup on IR-related activities. Qualifications - Bachelor’s degree and 5+ years of relevant experience in incident response and SOC tooling. - In-depth knowledge of SIEM/SOAR platforms (e.g., Microsoft Sentinel, Palo Alto Cortex XSIAM/XSOAR) and incident response processes in hybrid cloud environments (GCP, Azure). - Experience leading incident response as incident commander, performing root cause analysis and continuous optimization for SOC tools and processes. - Familiarity with scripting languages (Python, PowerShell, Bash, XQL) is highly preferred. - Understanding of regulatory compliance and frameworks such as MITRE ATT&CK, NIST, or ISO. - Ability to prioritize tasks effectively, manage multiple priorities, and work both independently and as part of a team. - Strong communication skills, with the ability to translate sophisticated technical issues or concepts to non-technical audiences in a clear and concise manner that focuses on business value.

View details: Engineer - Security Operations and Incident Response

United States + 1 more

Apply

SecOps Analyst

CACI International Inc

Expertise and Technology for National Security

Security Operations1 day ago

Full Time Remote SeniorTeam 10,001+Since 1962H1B No Sponsor

Company Site LinkedIn

• Monitor and analyze security events and alerts using Elastic Security SIEM • Conduct vulnerability scans with Tenable SC and assess cloud workloads via Tenable Cloud Security • Manage and enforce endpoint security policies using Trellix ePO or Microsoft Defender for Endpoint (MDE) • Monitor network security activity across Palo Alto Next-Generation Firewalls • Analyze secure access traffic through Zscaler Private Access and Internet Access • Detect, document, and escalate security incidents following established response procedures • Develop continuous monitoring reports and contribute to security posture dashboards • Track and present security KPIs to program leadership

Cloud Firewalls

View details: SecOps Analyst

Illinois

$75.2K - $158.1K / year

Apply

Forward Deployed Engineer – AI SOC

Thinkahead Consultant Psychologist Pty Ltd

We get to the heart of the matter.....real people......real solutions

Security Operations1 day ago

Full Time Remote SeniorTeam 1-10H1B No Sponsor

Company Site LinkedIn

• Serve as the technical lead for deploying and operationalizing security and AI solutions in customer or enterprise environments • Translate business, operational, and security requirements into deployable architectures and implementation plans • Partner with internal and external stakeholders to ensure solutions are aligned to operational goals, compliance requirements, and long-term platform strategy • Act as a trusted advisor during onboarding, implementation, rollout, and optimization phases • Design and implement integrations across SIEM, XDR, SOAR, case management, data platforms, and AI-enabled tooling • Build and configure cloud-native data ingestion, normalization, and enrichment pipelines for security telemetry • Integrate APIs, webhooks, message queues, and automation workflows across identity, endpoint, cloud, network, and application ecosystems • Develop reusable deployment patterns, templates, and technical assets to accelerate future implementations • Operationalize AI and automation use cases within security workflows, including alert enrichment, triage support, summarization, clustering, playbook selection, and analyst copilots • Work with detection engineering and data teams to support the implementation of behavioral analytics, anomaly detection, risk scoring, and other AI-assisted security use cases • Help define data requirements, feedback loops, and operational guardrails needed to support effective AI outcomes in production environments • Ensure deployed solutions are practical, measurable, and aligned to analyst workflows and response objectives • Implement secure and governed automation for investigation and response use cases across heterogeneous environments • Support resiliency, observability, performance, and scale requirements for deployed solutions • Troubleshoot integration issues, deployment blockers, and production challenges in partnership with platform, cloud, and security teams • Improve reliability and maintainability through documentation, testing, monitoring, and standardized engineering practices • Collaborate across Security Operations, Security Engineering, Detection Engineering, Data Science, Infrastructure, and product or customer teams • Communicate technical concepts clearly to both technical and non-technical stakeholders • Mentor engineers and contribute to best practices for implementation, delivery, and technical solution design • Provide field feedback to influence platform roadmap, product direction, and architectural standards.

AWS Azure Cloud Google Cloud Platform

View details: Forward Deployed Engineer – AI SOC

United States

$160K - $200K / year

Apply

Security Incident Response Analyst

Box Inc Deutschland

Der clevere Karton-Marktplatz

Security Operations1 day ago

Full Time Remote SeniorTeam 11-50Since 2004H1B No Sponsor

Company Site LinkedIn

• Monitor security alerts and events across Box’s environment using SIEM and other detection tools. • Lead and coordinate the end-to-end response to security incidents. • Conduct in-depth forensic analysis of endpoints, logs, and network traffic. • Develop and refine incident response playbooks, runbooks, and procedures. • Collaborate with Engineering, Legal, and Compliance teams. • Identify trends and patterns in security data to proactively surface emerging threats. • Contribute to threat intelligence programs by researching adversary tactics, techniques, and procedures (TTPs).

Cyber Security Splunk

View details: Security Incident Response Analyst

California

$78.5K - $95K / year

Apply

Director of IT – Security Operations

RealTime eClinical Solutions

Better research. Better business. Better outcomes.

Security Operations1 day ago

Full Time Remote LeadTeam 51-200Since 2011H1B No Sponsor

Company Site LinkedIn

• Owns the security, availability, and compliance of the systems. • Operate and evidence the controls required for SOC 2 Type 2 and HIPAA. • Maintain the risk register and run an annual risk assessment. • Enforce least privilege access across corporate and production systems. • Manage cloud hosting vendors and environment changes. • Monitor the security of corporate and cloud environments. • Manage the team providing technical support to employees. • Design and manage the disaster-recovery and business-continuity process.

Cloud Terraform

View details: Director of IT – Security Operations

Texas

$150K - $160K / year

Apply

Security Operations Engineer

Paxos

Paxos is a regulated blockchain infrastructure company building transparent and transformative financial solutions.

Security Operations2 days ago

Full Time Remote SeniorTeam 201-500Since 2012H1B Sponsor

Company Site LinkedIn

• Triage, investigate, and respond to security alerts across endpoints, cloud infrastructure, and network telemetry. • Take a builder’s mindset to the role by automating repetitive workflows and using AI to increase speed, scale, and effectiveness. • Execute containment and remediation actions for confirmed incidents, while following and continuously improving established runbooks. • Tune and maintain SIEM and EDR detections to reduce false positives, strengthen signal quality, and close coverage gaps. • Apply threat intelligence, including IOCs and TTPs, to active investigations and ongoing monitoring. • Participate in the on-call rotation and contribute clear, actionable post-incident documentation.

Cloud

View details: Security Operations Engineer

United States

$169K - $194.0K / year

Apply

381more opportunities are still waiting for you.Log in now and take your next shot before someone else does.

How To Use This Page Effectively

This landing page is tuned for remote security operations jobs in the us and refreshed hourly. Start with the title and seniority filters, then narrow by salary and tech stack to surface the most relevant matches quickly.

If you are actively applying, prioritize listings posted in the last 24 hours and track opportunities with applied/saved actions to avoid duplicate submissions.

Quick Strategy For Higher Match Quality

Lead with specific role intent

Use one precise role phrase and keep location fixed to United States for cleaner, intent-aligned results.

Prioritize fresh postings first

Open newly posted listings early to increase response rates and reduce duplicate application effort.

Refine with salary and seniority

Add compensation and seniority constraints only after you confirm category fit. This keeps filtering stable.

Related Remote Job Pages

US Remote Jobs All Remote Jobs Remote Entry-Level Jobs Remote Full-time Jobs US Remote Salary Guide Remote Interview Prep Remote Resume Tips US Remote Jobs by State (2026)US Remote Tech Stack Trends (2026)US Remote Job Market Weekly Snapshot Security Operations Jobs Security Operations Jobs in California Security Operations Jobs in Texas Security Operations Jobs in New York Security Operations Jobs in Florida