ZipRecruiter

Log In

2

Remote Application Security Engineer Jobs in Illinois

Booz Allen Hamilton, Inc.

Data Security Engineer

IL · On-site +1

$86K - $198K/yr

Remote Work: Hybrid Job Number: R0246185 Location: Scott AFB,IL,US Share job via: Share Data Security Engineer The Opportunity: Architect, deploy, and configure data security solutions across various ...

Booz Allen Hamilton, Inc.

Virtru Security Engineer

IL · On-site +1

$99K - $225K/yr

Remote Work: Hybrid Job Number: R0243112 Location: Scott AFB,IL,US Share job via: Share Virtru Security Engineer The Opportunity: As a Virtru Security Engineer you'll play a critical role in the ...

Booz Allen Hamilton, Inc.

Virtru Security Engineer

IL · On-site +1

$99K - $225K/yr

Remote Work: Hybrid Job Number: R0243113 Location: Scott AFB,IL,US Share job via: Share Virtru Security Engineer The Opportunity: As a Virtru Security Engineer you'll play a critical role in the ...

Echo Global Logistics

Security Engineer

Chicago, IL · On-site +1

$97K - $142K/yr

We are seeking a Security Engineer with 4+ years of security operations experience to serve as a hands-on technical contributor within our 24/7 Security Operations Center (SOC). In this role you will ...

Booz Allen Hamilton, Inc.

Data Security Engineer, Senior

IL · On-site +1

$86K - $198K/yr

Remote Work: Hybrid Job Number: R0243062 Location: Scott AFB,IL,US Share job via: Share Data Security Engineer, Senior The Opportunity: Architect, deploy, and configure data security solutions across ...

DocuSign

Lead Security Engineer

Chicago, IL · On-site +1

Employee divides their time between in-office and remote work. Access to an office location is ... If you need such an accommodation, or a religious accommodation, during the application process ...

Booz Allen Hamilton, Inc.

Ping Identity Engineer

IL · On-site +1

$86K - $198K/yr

Remote Work: Hybrid Job Number: R0248850 Location: Scott AFB,IL,US Share job via: Share Ping ... Applicants selected will be subject to a security investigation and may need to meet eligibility ...

previous pagenext page

Showing results 21-40

All JobsApplication Security Engineer JobsRemote Application Security Engineer JobsRemote Application Security Engineer Jobs in Illinois

Remote Application Security Engineer information

What is a remote application security engineer?

A Remote Application Security Engineer is a cybersecurity professional who works from a location outside the traditional office environment to assess, design, and implement security measures for software applications. Their responsibilities include identifying vulnerabilities in code, conducting security testing, and recommending fixes to prevent cyberattacks. They collaborate with development teams remotely to ensure secure coding practices and compliance with industry standards. This role is critical for protecting sensitive data and maintaining trust in digital products, especially as remote work and cloud-based applications become more common.

How does a remote application security engineer typically collaborate with development teams to address security vulnerabilities?

As a Remote Application Security Engineer, you will regularly interact with development teams through virtual meetings, code reviews, and secure communication platforms. Collaboration involves identifying vulnerabilities through security assessments, then working closely with developers to explain risks and recommend remediation strategies. Effective communication skills and a proactive approach are essential, as you'll often need to bridge the gap between security requirements and development timelines. Embracing tools for remote collaboration, such as shared issue trackers and documentation platforms, is key to ensuring efficient teamwork and timely resolution of security issues.

What are the key skills and qualifications needed to thrive as a remote application security engineer, and why are they important?

To thrive as a Remote Application Security Engineer, you need a strong background in secure software development, vulnerability assessment, and a solid understanding of security frameworks, often supported by a degree in computer science and certifications like CISSP or OSCP. Familiarity with tools such as Burp Suite, OWASP ZAP, static and dynamic analysis tools, and secure code review systems is typically required. Excellent problem-solving, communication, and self-motivation are essential soft skills for collaborating remotely and articulating security risks to diverse stakeholders. These skills ensure robust application security, effective risk mitigation, and seamless cooperation in distributed work environments.

What is the difference between Remote Application Security Engineer vs Remote Security Analyst?

AspectRemote Application Security EngineerRemote Security Analyst
CertificationsCSSLP, CISSP, CEHCISSP, Security+, CEH
Work EnvironmentFocus on application security, code reviews, vulnerability assessmentsMonitor security alerts, analyze threats, incident response
Industry UsageSoftware development, tech companies, financeIT services, corporate security teams, government

The Remote Application Security Engineer primarily focuses on securing software applications through code analysis and vulnerability management, while the Remote Security Analyst monitors security systems and responds to threats. Both roles require similar certifications and are vital in cybersecurity teams, but they differ in daily tasks and focus areas.

What are the most commonly searched types of Application Security Engineer jobs in Illinois?

The most popular types of Application Security Engineer jobs in Illinois are:

What are popular job titles related to Remote Application Security Engineer jobs in Illinois?

For Remote Application Security Engineer jobs in Illinois, the most frequently searched job titles are:

What job categories do people searching Remote Application Security Engineer jobs in Illinois look for?

The top searched job categories for Remote Application Security Engineer jobs in Illinois are:

What cities in Illinois are hiring for Remote Application Security Engineer jobs?

Cities in Illinois with the most Remote Application Security Engineer job openings:

Remote Application Security Engineer jobs near you
Infographic showing various Remote Application Security Engineer job openings in Illinois as of September 2026, with employment types broken down into 73% Full Time, 22% Part Time, 4% Contract, and 1% Nights. Highlights an 87% Physical, 3% Hybrid, and 10% Remote job distribution.

Sr. Cloud Security Engineer (Remote)

Oak Brook, IL • On-site, Remote

Inspira Financial
Finance and Insurance • 1 - 5K employees
Learn more about Inspira Financialexternal

$115K - $158K/yr

Full-time

Re-posted 11 hours ago

Inspira Financial rating

7.8

Company rating: 7.8 out of 10

Based on 22 frontline employees who took The Breakroom Quiz

Job description

The Sr. Cloud Security Engineer (Sr. CSE) is a hybrid cloud and security engineering role responsible for the hands-on remediation of infrastructure and cloud vulnerabilities, ensuring cloud and infrastructure resources maintain compliance with established policies and Minimum-Security Baselines (MSBs), and reporting the organization's current compliance posture. The Sr. CSE will partner with the Security team to define, author, and maintain cloud security policies - keeping pace with evolving industry trends and regulatory requirements. This role will also actively participate in audit activities, including evidence gathering, reporting, and cross-functional collaboration with Compliance, Legal, and IT teams.
Duties & Responsibilities:
Vulnerability Remediation & Security Operations
  • Perform hands-on remediation of infrastructure and cloud vulnerabilities, driving issues to closure within established SLAs and policy requirements
  • Operate and administer vulnerability management and cloud security posture management (CSPM/DSPM) tooling - managing scan coverage, remediating findings, and reporting on SLA adherence
  • Identify, prioritize, and remediate cloud misconfigurations and security posture gaps across the organization's Azure subscriptions and infrastructure
  • Implement and validate security controls across cloud-native services, IaaS, PaaS, and container-based workloads
  • Maintain and enforce secure configurations across firewalls, network security components, application delivery infrastructure, and compute platforms in partnership with the Security Team
  • When needed, assist with privileged credential hygiene, certificate lifecycle, and secrets governance across the environment
  • Support the hardening of Windows and Linux server environments through configuration management and compliance-as-code practices
  • Maintain awareness of known and emerging vulnerabilities across the full technology stack - cloud services, OS platforms, network components, and application runtimes

Compliance, Policy & Reporting
  • Monitor and report the organization's compliance posture against established security policies, baselines, and regulatory frameworks
  • Partner with the Security team to define, author, and maintain cloud and infrastructure security policies - keeping pace with evolving industry trends and regulatory requirements
  • Review and update existing policies on a regular cadence to reflect changes in the cloud environment and threat landscape
  • Produce accurate, timely compliance posture reports for leadership - covering baseline adherence, vulnerability SLA performance, and remediation progress
  • Coordinate and assist in evidence collection and audit maintenance for internal and external organizational assessments, including regulatory audits and third-party risk reviews
  • Respond to findings from audits, security questionnaires, and internal/external scanning or penetration testing

CI/CD Pipeline & Infrastructure Security
  • Partner with Software Engineering and App Security teams to embed security into CI/CD pipelines and deployment workflows - including secret scanning, least-privilege deployment identities, and secrets management integration
  • Review and advise on Infrastructure-as-Code (IaC) implementations from a security perspective, ensuring patterns align with security baselines and organizational standards
  • Support secure configuration management across server and cloud environments
  • Ensure PKI and certificate management practices are maintained across the environment - including TLS/SSL lifecycle, renewal processes, and certificate inventory

Technical Leadership & Mentorship
  • Serve as an informal technical leader and security subject matter expert across Cloud Engineering, Platform Engineering, and adjacent teams
  • Mentor engineers on security best practices, secure design patterns, and compliance requirements - elevating security competency across the department without direct people management responsibilities
  • Contribute to architecture and design reviews, providing a security lens on cloud platform decisions in partnership with the Cloud Architect

Cross-Team Collaboration
  • Cloud Engineering & Platform Engineering - consult on secure architecture, container platform hardening, network segmentation, and pipeline security practices
  • Identity & Access Management (IAM) - partner on identity governance, privileged access management, and access control policy enforcement
  • Incident Response / Vulnerability Management - collaborate with the Security Detection & Response team on vulnerability prioritization, SLA tracking, remediation coordination, and incident response activities
  • Audits & Assessments - provide technical support for evidence gathering, compliance posture reporting, and audit response
  • Application Development Teams - consult on security requirements for cloud-native application platforms, ensuring developer environments are built securely from the ground up

Additional Requirements:
As part of the evaluation process, candidates who progress beyond the initial screening will be required to complete a formal technical assessment to validate coding proficiency and technical competency.
Education & Experience
  • 10+ years of experience in cloud engineering, infrastructure, or security engineering - with demonstrated hands-on security work, not just advisory
  • Bachelor's Degree in Computer Science, Software/Computing Engineering, Information Security, or related field - or equivalent experience
  • Technical certifications preferred: AZ-500, SC-100, SC-200, AZ-104, or equivalent cloud/security certifications
  • Experience working in regulated industries (Financial Services, Insurance, or Health-Tech preferred)
  • Familiarity with compliance frameworks: NIST, HIPAA, PCI and Minimum Security Baselines (MSBs)

Skills & Abilities
Hands-on experience or significant exposure to the following services and concepts:
Cloud Platform - Azure
  • Networking & Security: Virtual Networks (VNETs) and peering, NSGs, UDRs, Private Endpoints, Azure Firewall, Application Gateways (including WAF - OWASP ruleset configuration, Detection vs. Prevention mode), ExpressRoute, VPN Gateways, and Azure Bastion
  • Compute & Containers: Virtual Machines, VM Scale Sets, AKS (Kubernetes), and Container App Environments - including cluster hardening, network policy enforcement, workload identity, and Azure Policy for Kubernetes
  • Identity & Access: Active Directory (on-prem, hybrid Entra Connect sync), Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access policy design and enforcement, Azure RBAC (including custom role design), and Entra ID Protection
  • Security & Compliance Tooling: Microsoft Sentinel, Microsoft Defender for Cloud (Defender for Containers, Defender for Servers, Defender CSPM), and Azure Policy
  • Monitoring & Observability: Azure Monitor - KQL, alert rule configuration, log-based queries, and action group integrations; familiarity with Log Analytics Workspace architecture and log ingestion patterns at scale
  • Secrets & Certificates: Azure Key Vault and Key Vault CSI Secrets Store driver for AKS
  • Storage & Recovery: Storage Accounts, Backup Vault, and Azure Site Recovery
  • Virtual Desktop: Azure Virtual Desktop (AVD)

Security Tooling
  • Rapid7 - vulnerability management and scanning (InsightVM or InsightIDR); scan configuration, reporting, and SLA tracking
  • Wiz and/or Orca Security - CSPM/DSPM platform experience; cloud misconfiguration identification, prioritization, and remediation workflows
  • Microsoft Sentinel - SIEM administration, analytics rule management, and data connector configuration; familiarity with security log feeds from edge and email security platforms preferred
  • Microsoft Defender for Cloud - Defender plans (Servers, Containers, CSPM), agentless scanning, and security recommendation management
  • Datadog - log management, infrastructure monitoring, and security-adjacent alerting
  • Identity, Access & Privileged Access Management
  • Delinea Secret Server (Thycotic) - PAM administration, privileged credential vault management, and access policy configuration
  • Active Directory + Entra ID - hybrid identity, Entra Connect sync, group policy (GPO), DNS, and DHCP administration
  • Conditional Access, PIM, and RBAC - policy design, enforcement, and least-privilege access models at enterprise scale
  • Microsoft Intune - device compliance enforcement as part of a Zero Trust security posture
  • Certificate Management - PKI, TLS/SSL lifecycle management, certificate inventory, and renewal processes

Network & Perimeter Security
  • Cloudflare (Enterprise) - CDN, WAF, DDoS protection, and DNS proxy configuration and management
  • Network routing and VPN - hub-and-spoke topology, route tables, ExpressRoute, and VPN Gateway
  • Cisco ASAv - virtual firewall configuration and management
  • DNS, DHCP, and Group Policy - enterprise-scale administration in hybrid environments
  • DevOps, IaC & Pipeline Security
  • Azure DevOps (ADO) - CI/CD pipeline security, build agent management, and secure pipeline design
  • GitHub / GitLab - source control security, branch protection, secret scanning, and pipeline hardening
  • Infrastructure-as-Code (IaC) - Terraform, ARM templates, or Bicep - with a security-first approach to cloud deployments
  • CHEF - configuration management and compliance-as-code for server fleet hardening and baseline enforcement
  • Endpoint & Server Platforms
  • Windows Server - administration, hardening, security baseline enforcement, and Group Policy management
  • Linux Server - administration, hardening, and security baseline enforcement across enterprise server fleets
  • Microsoft 365 Suite - Exchange, SharePoint, Teams, and Intune - security configuration and administration

Frameworks & Compliance
  • Familiarity with NIST, HIPAA, and organizational Minimum Security Baselines (MSBs)
  • Understanding of Zero Trust architecture principles and how they apply across identity, network, and workload security
  • Familiarity with PCI-DSS scoped environment security requirements preferred
  • Experience operating in regulated industries (Financial Services, Insurance, or Health-Tech)

Experience with or exposure to the following developer runtimes and technologies is a plus, as this role will consult on security posture within environments built on:
  • ASP.NET, .NET, Java (JBoss / Hibernate / JMS), gRPC, Redis, SQL Server

What Inspira Financial employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply