Remote security work is not rare. Of the 3,033 open cybersecurity roles at 696 employers that we read on 15 November 2026, 1,240 (41%) are remote, posted by 532 different employers. That is a lot of choice, but it is not spread evenly: some specialties are close to half remote, others closer to a third, and most remote roles are still tied to one country.
Remote share by specialty
| Specialty | Remote roles | Of all its open roles | Share remote |
|---|---|---|---|
| Security architecture and consulting | 191 | 388 | 49% |
| Security operations and incident response | 185 | 394 | 47% |
| Penetration testing and red team | 86 | 189 | 46% |
| Application and product security | 140 | 311 | 45% |
| Security leadership | 137 | 316 | 43% |
| Cloud security | 49 | 119 | 41% |
| Threat intelligence and research | 35 | 86 | 41% |
| Identity and access management | 52 | 148 | 35% |
| Governance, risk and compliance | 127 | 370 | 34% |
| Security engineering | 238 | 712 | 33% |
Two things stand out. Consulting and incident response are the most remote, close to half their roles. And security engineering, the largest specialty by far, is the least remote, at one role in three.
Remote rarely means "from anywhere"
Going by the location each posting gives, 35% of remote roles are remote within the United States, 12% within Europe, 7% within the UK and 6% within Canada. Only about 14% say "Remote" with no country or say anywhere, and some of those can still restrict who can be hired, which only the full posting shows. If you live outside the US, filter on where a role is open to, not on the word "remote". The board keeps a separate list of remote security roles open in any country or across several.
Who hires remotely
The employers with the most remote security roles open today: Palo Alto Networks (38), GuidePoint Security (36), CrowdStrike (30), Sophos (22), AHEAD (20), Zscaler (19), Huntress (13), Chainguard (13), Workstreet (12), Dragos (11), Coinbase (11) and JustMarkets (11). Security vendors and consultancies lead the list.
Does remote pay less?
A little. Among postings that state a range in US dollars, the middle of remote roles' ranges is $195k, against $207k for on-site and hybrid roles (560 and 794 ranges). A $12k gap is small next to the differences between specialties, where the middle runs from $167k for GRC to $246k for leadership (see what each specialty pays).
Where this comes from
CyberJobs.cc reads the hiring pages of security vendors, cloud and AI companies, banks, defense contractors and software firms every hour and keeps the security roles. A role counts as remote when its posting says so. Every remote role, with its location and stated pay, is on the remote cybersecurity jobs page, and the open dataset (CC BY 4.0) is on Hugging Face and Kaggle.
