[All remote jobs](https://jobicy.com/jobs.md)[![dscout logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2022/03/f81f478b71cf9399121a6f91aafc0bd3.jpeg)](https://jobicy.com/company/dscout.md)[dscout](https://jobicy.com/company/dscout.md)

# Cybersecurity Engineer

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

[Apply for this job](#job-application)[View company](https://jobicy.com/company/dscout.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished23 Oct 2026Apply before22 Nov 2026Listing views52Application actions3Application toolkit

## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

## The role, at a glance.

Dscout is seeking a Cybersecurity Engineer to reduce risk across its SaaS platform and internal IT environment. The role focuses on embedding security into the SDLC, securing AWS infrastructure, improving SIEM monitoring and logging, and coordinating incident response and vulnerability remediation. The engineer will partner closely with software engineering teams while also contributing to threat intelligence, security policies, third-party risk reviews, and security-awareness programs. Strong experience with AWS, Terraform, OWASP guidance, CI/CD security, Datadog, and common security frameworks is expected. This is a remote-first role, although Dscout cannot hire in Montana, Hawaii, Alaska, or Washington, DC.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

4/5EasyHard

### Pace & Pressure

4/5RelaxedFast-paced

### Autonomy Level

4/5GuidedFull ownership

### Communication Load

4/5IndependentCollaborative

AI insightThe position spans cloud security engineering, application security, detection and response, governance, and threat intelligence in a production SaaS environment. It requires independent technical judgment and the ability to influence engineering teams on risk remediation.

## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate$120,000US market range (per year)$105k–$145k0$159.50k

AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer salary range is disclosed. The annual USD figures are AI estimates for a cybersecurity engineer with 3+ years of cloud, application-security, and incident-response experience in the US market; yearly cadence is inferred from the full-time professional role.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[AWS security](https://jobicy.com/jobs?search_keywords=AWS%20security.md)[Terraform](https://jobicy.com/jobs?search_keywords=Terraform.md)[Infrastructure as Code](https://jobicy.com/jobs?search_keywords=Infrastructure%20as%20Code.md)[OWASP Top 10](https://jobicy.com/jobs?search_keywords=OWASP%20Top%2010.md)[Application security](https://jobicy.com/jobs?search_keywords=Application%20security.md)[SIEM](https://jobicy.com/jobs?search_keywords=SIEM.md)[Datadog](https://jobicy.com/jobs?search_keywords=Datadog.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[Vulnerability management](https://jobicy.com/jobs?search_keywords=Vulnerability%20management.md)[CI/CD security](https://jobicy.com/jobs?search_keywords=CICD%20security.md)[Threat intelligence](https://jobicy.com/jobs?search_keywords=Threat%20intelligence.md)[Security monitoring](https://jobicy.com/jobs?search_keywords=Security%20monitoring.md)[ISO 27001](https://jobicy.com/jobs?search_keywords=ISO%2027001.md)[NIST](https://jobicy.com/jobs?search_keywords=NIST.md)[SOC 2](https://jobicy.com/jobs?search_keywords=SOC%202.md)

Sample interview questionsHow would you embed security controls into Dscout's software development lifecycle?I would begin with threat modeling and risk-based security requirements during design, then add secure coding guidance, infrastructure-as-code scanning, dependency checks, secrets detection, and automated security tests into CI/CD. I would define remediation ownership and severity-based SLAs, while partnering with engineers to make the controls useful and low-friction.

What approach would you take to secure an AWS SaaS environment managed with Terraform?

I would establish secure Terraform modules and guardrails for IAM least privilege, network segmentation, encryption, centralized logging, key management, and approved resource configurations. I would enforce policy-as-code and review Terraform changes in pull requests, while continuously validating deployed configurations through AWS security services and cloud-security monitoring.

How would you improve SIEM monitoring and auditability for a SaaS application?

I would first identify high-value assets, critical user journeys, and threat scenarios such as account takeover, privilege escalation, data exfiltration, and suspicious API activity. I would ensure application, cloud, identity, and infrastructure logs are complete, normalized, retained appropriately, and connected to actionable detections with documented triage procedures.

Describe how you would handle a suspected account-compromise incident.

I would validate the alert, assess affected identities and systems, and rapidly contain the issue through session revocation, credential resets, access restrictions, or targeted blocks. I would preserve evidence, investigate the entry path and scope, coordinate communications with relevant teams, remediate root causes, and conduct a post-incident review to improve controls and detections.

How do ISO 27001, NIST, SOC 2, and HITRUST influence your security work?

I use these frameworks to structure risk management and demonstrate that controls are designed and operating effectively. I map technical controls and evidence to relevant requirements, prioritize gaps according to risk, and keep documentation current so security improvements also support customer assurance and audit readiness.

Opportunity details

## About this role.

At Dscout, we’re building the most flexible and powerful UX research platform on the market—trusted by the world’s top brands in finance (JP Morgan Chase, Intuit, Charles Schwab, PayPal), healthcare (Aya, Headspace), consumer goods (Keen, Verizon, Target, Northface), and tech (Google, Amazon, Facebook, Meta, Spotify, AirBnB). Our tools help teams deeply understand the humans behind their products, so they can build better ones. We are expanding our smart and driven team and would love for you to join us.

We are looking for a Cybersecurity Engineer to become a part of the Cybersecurity team reporting to the VP, Compliance and Information.

The Cybersecurity Engineer will contribute to reducing risk within the Dscout SaaS environment and internal IT systems. This includes planning and implementing cybersecurity controls, supporting cybersecurity operations, and monitoring the threat landscape. This role will ensure Dscout controls operate effectively over time.

What You Will Do:

* Lead the process to build security into the Dscout SaaS environment. This includes applying security throughout the software development lifecycle.
* Collaborate with Engineering to plan and implement cybersecurity controls to protect the SaaS environment. This includes applying leading practices to secure AWS resources (e.g., VPCs, EC2 instances, and containers).
* Continually enhance security monitoring of the SaaS environment and internal IT services by implementing SIEM and working with Engineering to continuously improve logging and auditability.
* Assess evolving threats and develop recommendations to mitigate risk to Dscout. You will provide weekly threat intelligence reports highlighting potential risk to the organization.
* Work side-by-side with Engineering to analyze, contain, and mitigate cyber attacks and other related incidents.
* Perform vulnerability monitoring and, where appropriate, ensure remediation.
* Participate in the development of security policies and processes.
* Assist third party risk reviews.
* Provide recommendations to continually improve security controls.
* Assist in development of security programs and efforts to promote security awareness.

What You Will Need To Have (we can call them Desired Skills and Background):

* Experience working with developers to conduct security reviews and provide strong recommendations to manage risk. This includes a strong understanding and practical use of OWASP Top 10 (web and AI).
* Experience securing AWS cloud environments and infrastructure as code solutions such as Terraform.
* Proven ability to implement security monitoring tools such as Datadog. This includes the ability to identify relevant scenarios and ensure proper logging.
* Experience responding to cyber attacks such as bots and account compromise as well as threats like data leakage and infected computers.
* Strong knowledge of cloud computing environments.
* Working knowledge of security in software development and continuous integration/continuous delivery (CI/CD).
* Experience documenting and implementing security policies and processes.
* Knowledge of security frameworks and standards: ISO 27001, NIST, or SANS preferred.
* Experience with HITRUST and/or SOC 2 certification is preferred.
* Good communication, documentation and presentation skills.
* Limitless curiosity and insatiable appetite to understand human behavior and relevant technologies.

Background

* Bachelor’s degree is preferred
* CISSP, CCSP, or GIAC security certification preferred
* A minimum of 3 years of security experience

Of course, what is outlined above is an ideal set of expectations; however, business needs and other projects and tasks may shift, and additional tasks could be assigned at the discretion of your manager.

About Dscout

Dscout is a team of passionate, empathetic, and curious professionals. As a recognized leader in the Forrester Wave, we’re at the cutting edge of experience research technology. The power of research drives us – how in-context insights from real people can build more enjoyable products and services.

We prioritize learning, sharing, and building. We also deeply value being a diverse and inclusive team and company and look for team members who align with that belief. Join our dynamic team and help shape product roadmaps and business strategies for the world’s most loved brands.

It doesn’t stop there. When you join the Dscout team, you will get:

* A strong and competitive compensation package with a built-in bonus and equity program.
* An incredible and progressive benefits package (for both you and your dependents) to support work/life balance, including flexible PTO, 15 company holidays, 12 weeks of paid parental leave, 401k match, and much more.
* An education stipend to support your growth & development, and a remote work stipend.
* A company that is open and transparent with our team. You will know what is happening and why it matters.

Dscout is an equal-opportunity employer that values diversity. We do not discriminate based on identity, including race, color, religion, national origin or ancestry, sex, gender identity and expression, age, physical or mental disability, pregnancy, veteran or military status, unfavorable discharge from military service, genetic information, sexual orientation, marital status, order of protection status, citizenship status, arrest record or expunged or sealed convictions, or any other legally recognized protected basis under federal, state, or local law.

If you need reasonable accommodations for any part of the employment process, please email us at accommodations@dscout.com with the nature of your request and your contact information. We’ll do everything possible to ensure you’re well-prepared for success during our interview process, while also upholding your privacy, including accommodating any special requests. Please note that only inquiries regarding requests for reasonable accommodation will be responded to from this email address.

When you apply at Dscout, we will process your job applicant data, including your employment and education history, transcript, writing samples, and references, as necessary to consider your job application for open positions. For more information about our privacy practices, please visit our [Privacy Policy](https://www.dscout.com/legal/master-access-agreement).

Dscout participates in the E-Verify program in certain locations, as required by law.

Location Flexibility: Dscout is proud to support a remote-first workforce and enable employees to work from almost anywhere. At this time, however, we are unable to hire in the following locations: Montana, Hawaii, Alaska, and Washington DC.

NOTE: DSCOUT NEVER CONTACTS JOB APPLICANTS VIA TEXT, MESSENGER, OR OTHER SIMILAR APPLICATIONS. BE AWARE OF PHISHING AND SPOOFING SCAMS, BOTH VIA TEXT AND EMAIL. ONLY RESPOND TO EMAILS FROM DSCOUT.COM

Show more

[Apply now >](https://jobicy.com/jobs/156647-cybersecurity-engineer.md)

>  Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ›](https://jobicy.com/salaries.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

*
![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png)
Zscaler Oct 23  New

### [Senior Information Security Engineer](https://jobicy.com/jobs/156672-senior-information-security-engineer-2.md)

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data…

*
![Zapier logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210317121153-967239.png)
Zapier Oct 23  New

### [Sr. Engineer, Infrastructure Security](https://jobicy.com/jobs/156567-sr-engineer-infrastructure-security.md)

AI at Zapier At Zapier, we build and use automation every day to make work more efficient, creative, and human. So if you’re using AI tools while applying here –…

*
![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp)
Nebius Oct 23  New

### [Security Solutions Engineer](https://jobicy.com/jobs/156529-security-solutions-engineer.md)

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from…

*
![Fastly logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/10/127f9e4bbbdb8767bef358a23bf7f73d.jpeg)
Fastly Oct 23  New

### [Threat Detection Analyst (Japanese & English speaking)](https://jobicy.com/jobs/153871-threat-detection-analyst-japanese-english-speaking.md)

Fastly helps people stay better connected with the things they love. Fastly’s edge cloud platform enables customers to create great digital experiences quickly, securely, and reliably by processing, serving, and…

*
![Goodleap logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/482c4fb7-221.png)
Goodleap Oct 23  New

### [Senior Security Engineer, Product Security](https://jobicy.com/jobs/153887-senior-security-engineer-product-security.md)

About GoodLeap: GoodLeap is a technology company delivering best-in-class financing and software products for sustainable solutions, from solar panels and batteries to energy-efficient HVAC, heat pumps, roofing, windows, and more….

*
![Phantom logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/3d0a3a49-221.png)
Phantom Oct 23  New

### [Staff Product Security Engineer (Security)](https://jobicy.com/jobs/153861-staff-product-security-engineer-security.md)

Phantom is on a mission to connect the world to the freedom of open markets. Tens of millions of people all over the world use Phantom to access global markets…

*
![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp)
Nebius Oct 22  New

### [Offensive Security Engineer](https://jobicy.com/jobs/156386-offensive-security-engineer-2.md)

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from…

*
![Nebius logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/06/d90c0566-221.webp)
Nebius Oct 22  New

### [Network Security Engineer](https://jobicy.com/jobs/156385-network-security-engineer.md)

About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from…

*
![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png)
TRM Labs Oct 22  New

### [Global Investigator (Triage)](https://jobicy.com/jobs/156364-global-investigator-triage.md)

Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build…

*
![Semperis logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01cb24ea-221.png)
Semperis Oct 22  New

### [Associate Vice President, Pre-Sales, EMEA](https://jobicy.com/jobs/156352-associate-vice-president-pre-sales-emea.md)

At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they…

[Browse all jobs](https://jobicy.com/jobs.md)