Security Engineer Remote Jobs in Vermont (US)
This page tracks remote security engineer openings that are location-eligible for Vermont.
This page tracks remote security engineer openings that are location-eligible for Vermont.
Open jobs
3,308
Hiring companies this week
10
Salary sample
$25 - $200,000
Jobs added last hour
0
3308 Jobs
1726 Companies
• Provide executive-level cybersecurity advisory services, including governance, risk management, and strategic planning • Establish and maintain cybersecurity governance structures, roadmaps, and reporting cadence • Lead enterprise risk management activities, including risk register development, tracking, and executive reporting • Support compliance and framework alignment (NIST CSF, NIST SP 800-171, CMMC, SOC 2, ISO 27001 as applicable) • Guide CMMC readiness efforts, including coordination of documentation, audit preparation, and assessment support • Provide executive reporting, dashboards, and strategic recommendations to support decision-making • Advise on security operations, vulnerability management, and incident response governance • Support cybersecurity investment planning, tool selection, and vendor evaluation • Facilitate communication across technical teams, leadership, and external stakeholders • Collaborate with delivery teams (e.g., Cyber Analysts, Project Managers) to ensure coordinated execution
• Provide comprehensive and diverse range of risk management expertise to business leaders • Lead and support the implementation of risk frameworks and management activities • Advise on execution strategy and lead the development of functional programs • Review and challenge risk assessments and control evaluations • Conduct thematic reviews into emerging risk areas and provide oversight
We partner with over 1,000 healthcare providers to maximize their complex claims reimbursements.
Role Description We are seeking a forward-thinking and deeply technical AI Security Architect to lead our efforts in securely harnessing the power of Artificial Intelligence. As the AI Security Architect, you will be responsible for designing, implementing, and managing the security posture for all AI and Machine Learning initiatives across the organization. This is a pivotal role designed for an expert who is passionate about building secure AI frameworks from the ground up. You will be the go-to authority for all matters related to AI security, working across departments to embed security into our AI strategy and operations. Key Responsibilities - Collaborate directly with the IT & Development teams to design and integrate advanced AI security tooling at the application level. - Take a leading role in enhancing the security capabilities of our flagship in-house application, "Enforcer," by leveraging cutting-edge AI technologies. - Partner with our Development teams to establish a secure AI development lifecycle. - Assist in the evaluation, selection, and secure configuration of AI/ML tools, libraries, and platforms to empower our developers while maintaining a robust security posture. - Act as the central point of contact for vetting and suggesting secure AI solutions for business units across the entire organization. - Develop and maintain a curated portfolio of approved AI tools and services that align with our security standards and business objectives. - Stay at the forefront of the rapidly evolving AI landscape, including new technologies, emerging threats, and changing regulatory requirements (e.g., GDPR, CCPA as they relate to AI). - Provide regular updates and strategic recommendations to leadership on AI-related security matters. - Manage and optimize our TPRM platform. - Leverage the platform to establish and streamline a comprehensive AI vendor assessment process, creating clear requirements for onboarding new AI partners and solutions. - Contribute to the daily operations and strategic initiatives of the broader Information Security team. - Assist in incident response, threat modeling, and security architecture reviews as needed. Qualifications - Bachelor’s degree in computer science, Information Security, or a related field. - 5-7+ years of experience in a senior information security role. - Demonstrable experience working within the Microsoft Azure ecosystem, including securing data services like Azure Data Lake Storage, Azure Databricks, and Azure Machine Learning. - Deep understanding of the security challenges and controls for Large Language Models (LLMs), including prompt injection, data poisoning, and model theft. - Proven experience working in a dynamic business environment, particularly within a company undergoing a significant technological transformation. - Strong understanding of secure software development lifecycle (SDLC) principles. Requirements - Practices and adheres to EnableComp’s Core Values, Vision and Mission. - Engineer, implement and monitor security measures for the protection of computer systems, networks and information. - Identify and define system security requirements. - Experience managing servers, particularly virtualized environments. - Ability to work well with team members to produce results. - Excellent communication skills, utilized to collaborate both within IT and across all functions of the company to drive IT security initiatives. - Excellent mentoring and coaching skills to assist in training staff on security directives. - Design computer security architecture and develop detailed cyber security designs. - Prepare and document standard operating procedures and protocols. - Problem solving skills and ability to work under pressure. - Advises senior management by identifying critical security issues; recommending risk-reduction solutions. - Solid understanding of HIPAA and applicable compliance frameworks (SOC2, HITRUST). - Strong project management and technical troubleshooting ability. - Strong writing/documentation skills necessary. - Ability to articulate security-related concepts to a broad range of technical and non-technical staff. - Ability to work on larger projects as well as balance day to day requirements. Benefits - EnableComp is an Equal Opportunity Employer M/F/D/V. - All applicants will be considered for this position based upon experience and knowledge, without regard to race, color, religion, national origin, sexual orientation, ancestry, marital, disabled or veteran status. - We are committed to creating and maintaining a workforce environment that is free from any form of discrimination or harassment. - EnableComp recruits, develops and retains the industry's top talent. - We believe that investing in our employees is the key to our success, and we are dedicated to providing them with the tools, resources, and support they need to thrive and grow their career here.
• Responsible for designing, implementing, and overseeing advanced security architectures that protect the organization’s systems, data, and infrastructure. • Works closely with SOC analysts, incident responders, engineering teams, and leadership to ensure the security operations environment is resilient, scalable, and aligned with business and compliance requirements.
C5MI is not your typical consulting firm. We are a high-performance team of SAP and supply chain experts who solve complex, mission-critical challenges for organizations that cannot afford failure. Our culture rewards initiative, accountability, and continuous growth.
Role Description The Personnel Security Coordinator is responsible for managing the end-to-end Common Access Card (CAC) credentialing lifecycle for C5MI’s government contractor workforce and maintaining accurate records of Government Furnished Equipment (GFE) assignments. This role owns the full CAC and GFE process across multiple DoD agencies, requiring strong organizational skills and meticulous attention to detail. Essential Functions & Responsibilities - Manages the full CAC credentialing lifecycle for new contractor resources, ensuring each onboard is initiated within 2 business days of notification. - Initiates and coordinates contractor sponsorship in the Trusted Associate Sponsorship System (TASS) and completes DEERS enrollment for all new CAC applicants. - Guides contractor resources through the SF86/eQIP process, including form completion instructions and error correction. - Coordinates FBI fingerprint scheduling and tracks submission status for all new resources pending Public Trust adjudication. - Tracks background investigation status for resources across all DoD agency sponsors and provides bi-weekly status updates. - Coordinates interim eligibility determinations and supports resources in understanding their status throughout the adjudication process. - Schedules RAPIDS site appointments and coordinates all logistics for CAC card issuance. - Proactively manages CAC renewals, initiating the renewal process no later than 60 days before expiration. - Maintains the GFE assignment tracker for approximately 190 resources with government-issued computers. - Delivers a monthly CAC and GFE status report to the Program Manager by the 3rd business day of each month. - Responds to resource inquiries regarding CAC status, GFE assignments, and credentialing processes within 4 business hours. - Stays current on DCSA Public Trust policy updates and agency-specific credentialing procedures. - Adheres to all certified processes to maintain high standards of quality and information security. - Performs other related tasks as assigned by direct supervisor. Qualifications - 2+ years of experience in government contractor personnel security or a related administrative role. - Working knowledge of the CAC credentialing process including TASS, DEERS, eQIP/SF86, and RAPIDS. - Familiarity with Public Trust / Tier 3 background investigation processes. - Demonstrated ability to manage a high-volume, multi-stage pipeline of personnel actions. - Strong organizational and recordkeeping skills; proficiency in Microsoft Excel or equivalent tools. - Excellent written and verbal communication skills. - S. citizenship required. - Ability to obtain and maintain TASS Trusted Agent designation. - High school diploma or equivalent required; associate’s or bachelor’s degree preferred. Nice to Have (Not Required) - Prior experience supporting DLA-sponsored programs. - Experience managing GFE or government property records. - Current or prior TASS Trusted Agent designation. - Experience supporting a large, distributed contractor workforce. - CDSE Security Fundamentals Professional Certification (SFPC) or equivalent training. - Proficiency with SharePoint, Teams, or similar platforms. Compensation In accordance with pay transparency law, the expected salary range for this position is $24.92 - $31.15 hourly. The actual compensation offered will be determined based on factors such as the candidate’s experience, qualifications, skills, and location. Benefits - Medical, dental, vision, life, and long-term disability coverage. - 401(k) plan. - Bonus opportunities. - Paid holidays and paid time off. How to Apply To apply for this position, use the application link provided in this job posting and complete the application and submit a resume. If you have accommodation needs, please call us toll free at 1 (904) 431-7922 or send us an email. Equal Opportunity Employer C5MI is an Equal Opportunity Employer that does not discriminate on the basis of any characteristic protected by applicable federal, state, or local laws and ordinances.
Role Description M9 Solutions is seeking a Vulnerability Management Cyber Managed Services Contractor to work remotely in support of a government contract for a client located in Boston, MA. - Develop rapport with others by demonstrating an understanding of their concerns, needs, and issues, and focusing on developing an internal network of relationships that can provide advice and support. - Monitor progress, manage risk, and ensure key stakeholders are kept informed about progress and expected outcomes. - Stay abreast of current business and industry trends relevant to the client's business and cybersecurity. - Assist engagement teams in evaluating client vulnerability management programs across people, process, and technology. - Work with engagement teams to own distinct portions of vulnerability management solutions tailored to client environments. - Perform and control vulnerability assessments to identify control weaknesses and assess the effectiveness of existing controls. Qualifications - Bachelor's degree in a related field. - 5 years of related work experience. - Experience with Tenable One. - Demonstrated experience in vulnerability management, including hands-on use of vulnerability management tools. - Prior experience in providing Vulnerability Management services to clients from various industries, demonstrating versatility and adaptability in addressing diverse Vulnerability Management challenges. - Strong written and verbal communication skills with demonstrated ability to interact with senior management, technical SMEs, business partners, and influence decisions. - Must be able to effectively communicate with business partners in non-technical terms. - A willingness to travel to meet client needs. - Familiarity with security and risk standards including ISO 27001-2, CIS, PCI DSS, NIST, ITIL, COBIT. - Knowledge of Windows, Linux, UNIX, and any other major on-prem and cloud-based operating systems. - Hands-on operational experience with vulnerability management tools, including Tenable One modules, including the ability to deploy, configure, and run these tools. - Ability to evaluate vulnerability management tools and assist with vendor selection. - Ability to conduct root cause analysis against vulnerabilities and determine feasible technical solutions. - Knowledge of general cybersecurity concepts and methods including, but not limited to, vulnerability management, privacy, incident response, governance, risk and compliance, enterprise security strategies and architecture. - Ability to help manage cybersecurity projects including development of project charters, plans and status updates. - Experience with scripting/programming skills (e.g., Python, PowerShell). - Experience with utilizing Microsoft Excel and/or PowerBi to develop vulnerability management program metrics. - Familiarity with latest security vulnerabilities and exploits, understanding of web-based application vulnerabilities (OWASP Top 10), cloud security and architecture. - Experience with using factors such as EPSS, CVSS, CISA KEV, and threat intelligence sources to identify and prioritize vulnerabilities. - Proficient knowledge of CVE (Common Vulnerabilities and Exposures) and CWE (Common Weakness Enumeration) frameworks. - Experience in developing and curating meaningful metrics for both executive and operational audiences, translating technical details into actionable insights. Preferred Skills and Qualifications - Strong interpersonal and communication skills to collaborate with clients and present solutions. - Ability to analyze issues both strategically and technically. - Proven ability to influence decisions and work across multiple simultaneous initiatives. - A cybersecurity certification such as the CISSP, CEH, or GSEC. Benefits - Salary Range: $60,000 — $180,000 USD - Competitive compensation package. - Valued diverse perspectives in driving the vision of the company.
Founded in 1974 and headquartered in Anchorage, Alaska, the Chenega Corporation provides clients in the construction, environmental, healthcare, IT, military op
Role Description The Information System Security Officer (ISSO) will be responsible for ensuring the security and compliance of the HHS ACL EITS systems. The ISSO will work closely with the program team to manage and maintain the security posture of information systems, ensuring compliance with federal guidelines such as FISMA, NIST, and other regulatory frameworks. The ISSO will be instrumental in identifying security risks, implementing mitigation strategies, and performing continuous monitoring to maintain a secure operational environment. Responsibilities - Ensure that all HHS ACL EITS systems are in compliance with federal security standards, including FISMA, NIST 800-53, and other relevant federal regulations. - Manage the development, review, and approval of security authorization packages in accordance with the Risk Management Framework (RMF). - Conduct regular security risk assessments and develop risk mitigation strategies. - Oversee and document the development and implementation of security measures across systems. - Track and manage system vulnerabilities and security risks using tools such as vulnerability scanners and other monitoring tools. - Develop, update, and maintain System Security Plans (SSPs). - Lead efforts in continuous monitoring of information systems, ensuring that security controls are operating effectively and adjusting as necessary based on findings from audits or assessments. - Lead the incident response efforts for any security breaches or incidents within the program. - Report security incidents in a timely manner to stakeholders and provide recommendations for resolving the issues. - Work closely with Authorizing Officials (AOs) to ensure that all systems within the program are properly accredited and authorized to operate. - Ensure the security authorization process follows NIST RMF requirements, including developing security documentation, performing security testing, and ensuring corrective actions are implemented. - Develop and deliver security training and awareness programs for staff to ensure compliance with security protocols and federal guidelines. - Work with the program's stakeholders to communicate security requirements and foster a security-conscious culture. - Other duties as assigned. Qualifications - Bachelor’s degree in information technology, Cybersecurity, or additional experience in lieu of a degree. - 5+ years of experience in cybersecurity, information assurance, or a related field, preferably within a federal environment. - Certified Information Systems Security Professional (CISSP), or equivalent experience and knowledge commiserate with certification requirements. - US Citizenship and ability to successfully pass Public Trust Background Investigation is required. Preferred Qualifications - 5+ years of experience in security architecture, security assessment, or a related cybersecurity role within a federal or government environment. - Successfully pass background and drug screening. Knowledge, Skills, and Abilities - Certified Information Security Manager (CISM) preferred. - Certified Information Systems Auditor (CISA) preferred. - Proven experience with FISMA, NIST RMF, and FedRAMP controls. - Strong understanding of security frameworks (NIST, FISMA, etc.). - Proficient with security tools, such as vulnerability scanners, security incident event management (SIEM) systems, and intrusion detection systems (IDS). Benefits - Broad range of benefits offered to team members. - Opportunities for professional development and skill sharpening. - Supportive culture that encourages team members to do their best work. - Well-being programs to maintain a healthy work-life balance. - Focus on corporate citizenship and positive social impact in communities. Teleworking Details - 100% remote. Estimated Salary/Wage - Up to USD $140,000.00/Yr.
Bloomreach is a computer software company that is on a mission to empower its clients to seamlessly personalize their customer experience and, in turn, successf
Role Description As Bloomreach pioneers the future of AI-driven e-commerce, driving safe, efficient, and rapid AI adoption across our entire global enterprise is paramount. We are seeking a Director, AI Enablement & Security to join our Global Information Security and Technology (GIST) leadership team. This is a high-visibility leadership role demanding a rare blend of strategic business acumen and deep engineering leadership. Your primary mandate is to maximize Bloomreach's organizational velocity through AI adoption, while ensuring the necessary security controls, financial oversight, and compliance guardrails remain firmly in place. You will directly manage and scale high-performing teams of AI, IT, and Security engineers who build the core infrastructure, making enterprise AI adoption possible. Serving as the central operational bridge across all departments - from Go-To-Market (GTM) and Product/R&D to HR, Finance, and Legal - you will work hand-in-hand with our GRC team, Legal, and the Data Protection Officer (DPO) to deliver frictionless, secure technical enablement. Key Responsibilities - Cross-Departmental AI Strategy & Enablement - Partner with leadership across all business units (Marketing, Sales, Customer Success, HR, Product) to identify, prioritize, and safely accelerate AI use cases that drive productivity and operational velocity. - Chair or co-lead a cross-functional AI Governance Committee to align product, corporate, legal, and financial stakeholders on global AI initiatives. - Design and champion a company-wide AI readiness and safety education strategy to raise the technical and risk-awareness baseline across Bloomreach. - Leadership & People Management - Lead, mentor, and resource teams across three distinct technical domains: Information Security, IT, and AI enablement. - Translate broad, cross-departmental business needs into concrete technical roadmaps for your teams, ensuring corporate infrastructure and production safety scale alongside company growth. - AI Governance, Risk & FinOps - Partner closely with the GRC team, Legal, and the DPO to integrate AI-specific vulnerabilities and compliance requirements (e.g., EU AI Act, NIST AI RMF) into the overarching Enterprise Risk Management framework without stalling business velocity. - Architect and own the enterprise AI FinOps framework alongside Finance. Direct your teams to build the technical tracking required to monitor, forecast, and optimize enterprise-wide AI spend, vendor costs, and LLM API consumption across all departments. - Oversee the technical evaluation and continuous risk profiling for all third-party AI platforms and integrated business tools used across the company. - AI Security & Infrastructure - Establish the technical security standards and risk-appetite frameworks for both internal corporate AI usage and production-grade AI features (e.g., Loomi AI). - Guide IT and Security engineers in deploying automated technical controls to prevent corporate data leakage and mitigate risks. Qualifications - 10+ years of experience in Information Security, IT, or Infrastructure Engineering, with 5+ years of experience managing and scaling multiple teams (IT, Security, and/or AI/Software Engineering). - A proven track record of driving rapid technology adoption and change management across diverse business units while successfully maintaining rigorous corporate guardrails. - Exceptional ability to build relationships and work seamlessly across all enterprise departments - from Go-To-Market and Product/R&D to Finance, GRC, Legal, and the DPO. - Deep conceptual and architectural understanding of modern AI systems (LLMs, MLOps, RAG, vector databases) and enterprise IT/Security infrastructure. - Elite communication skills - the ability to translate highly technical engineering concepts into business-impact narratives and clear, data-driven presentations for C-suite executives. Preferred Qualifications - Experience leading security or engineering initiatives in a global SaaS, B2B, or e-commerce personalization company. - Advanced credentials such as IAPP Certified Artificial Intelligence Governance Professional (AIGP), CISM, or similar executive-level certifications. Benefits - Health care including medical, dental, and vision insurance. - 401k Plan with employer contribution. - Restricted Stock Units or Stock Options depending on role, seniority, and location. - Participation in the company's success through the company performance bonus. - Employee referral bonus of up to $3,000 paid out immediately after the new hire starts. - Extended parental leave up to 26 calendar weeks for Primary Caregivers. - 5 paid days off to volunteer. - Access to the Employee Assistance Program with counselors for non-work-related challenges. - Subscription to Calm - sleep and meditation app. - ‘DisConnect’ days where Bloomreachers globally enjoy one additional day off each quarter. - Professional education budget of $1,500 annually for education products (books, courses, certifications, etc.).
• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production. • Systematically, consistently and automatically capture the risk exposure of Chainguards products. • Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign). • Proactively identify emerging customer security needs, and build solutions to meet these. • Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS. • Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimising attack surface across our product stack. • Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management. • Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.
• Conduct security control assessments for commercial and government customers to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing within a system boundary. • Develop, document and review System Rules of Engagement (ROE), Security Assessment Plans (SAPs) and Security Assessment Reports (SARs). • Conduct kick-off meetings, develop associated schedules and resource plans to complete the assessments. • Responsible for quality control on the assessment and associated deliverables. • Develop practical and risk-based approaches for security control implementation and vulnerability remediation. • Review and provide feedback system boundaries, common controls, the security categorization of information systems, applicable security control baseline based on system categorization. • Review cyber/system/network security body of evidence and documentation for accuracy and completeness. • Lead Post Assessment Meetings with the customer. • Provide Plan of Action and Milestones (POA&M) support to ensure mitigations are completed or the teams are working to mitigate all vulnerabilities in a timely fashion and within customer policy timelines. • Perform continuous monitoring to ensure implemented security controls remain functional throughout the lifecycle of the information system. • Perform other duties as assigned.
3,298more opportunities are still waiting for you.Log in now and take your next shot before someone else does.
Cyber Security, Cloud, AI, Azure, AWS, Google Cloud Platform