Top Senior Cyber Security Jobs in Baltimore, MD

Design, implement, and manage corporate security controls across identity, endpoints, network, and data. Lead IAM/SSO/MFA, EDR/MDM, email/DLP, vulnerability management, vendor risk assessments, phishing simulations, and incident investigations. Support compliance, audits, pen-tests/red-team remediation, and security culture through training and cross-functional collaboration.

Design and manage cloud and product security for AWS, perform security assessments and pen-test remediation, integrate security into DevOps/IaC, mentor engineers, and advise on compliance and threat mitigation across mobile core, applications, and cloud environments.

Lead and scale a product security organization to define and execute SaaS, cloud, and product security strategy. Embed security into the SDLC/DevSecOps, influence architecture and roadmaps, manage customer security assurance and contract reviews, define secure development standards, oversee third-party/OSS risk, and measure program effectiveness while supporting sales and compliance needs.

Lead product security for PTC SaaS: assess and remediate vulnerabilities, drive automation for detection/remediation, consult on secure design and SSDLC, perform threat modeling and application security assessments, and guide engineering teams on cloud, API, mobile, and DevSecOps controls.

Lead assessment and remediation of IT security risks across network, systems, and applications. Perform vulnerability assessments, manage IDS/IPS, coordinate remediation with IT and vendors, develop policies and training, support audits (SOX/PCI/HIPAA), and report findings to stakeholders while mentoring teams and guiding security projects.

Senior UI developer responsible for designing and building responsive React-based UIs and dashboards for cybersecurity analytics. Develop backend services and APIs in Python, integrate security data sources, optimize SQL Server/PostgreSQL reporting, collaborate with stakeholders, influence architecture, and mentor junior developers.

Design, integrate, and maintain secure multi-enclave network architectures meeting NSA CSfC and DoD/Army requirements. Configure and troubleshoot firewalls, VPNs, routing, VRF, IDS/IPS, virtualization, Windows and RHEL systems, and SIEMs. Develop automation scripts, produce architecture and test documentation, perform vulnerability assessments, and support lab, integration, and field activities with up to 25% travel.

Lead Pinnacle's enterprise cybersecurity and network strategy, governance, and operations. Oversee security technologies (SIEM, EPP, DLP, firewalls, PKI, NAC), incident response, risk and compliance, and secure LAN/WAN/wireless architecture. Drive Microsoft cloud security (Azure, Microsoft 365, Conditional Access, MFA, RBAC, Intune), mentor engineering teams, manage vendors, and partner with executive leadership to modernize security across a multi-site healthcare environment.

Lead threat detection and incident response efforts: investigate security incidents, perform digital forensics, hunt for threats, build detection automation and models, collaborate with engineering and cross-functional teams, and mentor teammates to scale security capabilities across corporate and production environments.

Manage daily operations of Privileged Identity applications and monitor SIEM services within IAM infrastructure. Handle end-user escalations, update documentation, review and improve PI and SIEM processes, and evolve into global strategic IAM responsibilities.

Senior technical authority for security architecture, engineering design, and enterprise risk mitigation. Designs, implements, and configures security solutions across firewalls, endpoints, monitoring, vulnerability management, incident response, and forensics. Leads tactical implementation, performs assessments, product evaluations, project support, and supports the Information Security program and strategic objectives.

Lead and grow Kroll's CrowdStrike Falcon Cloud Security deployment practice: deploy, configure, integrate, tune CNAPP across AWS/Azure/GCP, build detections and SOAR playbooks, validate coverage, mentor consultants, and hand off runbooks to operations.

Lead and grow an offensive security team delivering web application pentests, Defense-in-Depth assessments, and Red Team operations. Drive an automation-first, AI-enabled program, own tooling and vendor contracts, define methodologies and KPIs, coordinate with detection/IR and product teams, and ensure prioritized remediation and continuous validation across IT, cloud, OT, and AI/ML environments.

Lead Triplemoon's information security and compliance program, ensuring HIPAA compliance and SOC 2 readiness. Oversee IT operations via MSP/MSSP, manage vendor risk, coordinate incident response and audits, maintain security policies and documentation, and advise leadership on cloud-first, remote workforce security.

Owner of security, infrastructure ops, and reliability across GCP, application, and on-chain surfaces. Lead incident response, secrets and IAM governance, vulnerability management, detection/alerting, compliance (SOC2), CI/CD and IaC, Cloud Run/BigQuery/MySQL/Cloudflare hardening, disaster recovery, and secure Ethereum wallet/key and smart-contract operations.

Design and build agentic AI-driven security testing systems and automation frameworks. Integrate static/dynamic analysis, reverse engineering, network analysis, and custom tooling to enable autonomous and human-in-the-loop workflows that scale security testing across mobile, desktop, IoT, and APIs. Prototype, evaluate, and productionize agent orchestration, evaluation, and MLOps infrastructure.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Design and scale secure AWS environments, build and maintain Terraform IaC and pipelines, lead security assessments and incident response, integrate security into CI/CD, define IAM/encryption/network controls, monitor and investigate cloud threats, and coach teams on cloud security best practices.

Lead security architecture and design reviews, run penetration tests and threat modeling, build CI/CD security automation, secure AWS cloud and containerized workloads, develop security observability and incident response, manage bug bounty and vulnerability workflows, and create security standards, training, and roadmap.

Lead end-to-end incident investigations, perform threat hunting across cloud and on-prem environments, translate threat intelligence into defenses, improve SIEM/EDR detections, automate response, and develop IR and hunting playbooks while collaborating with engineering and DevSecOps teams.

Analyze large-scale SaaS security data to identify attack vectors and vulnerabilities, investigate incidents, reduce false positives, and develop detection strategies. Collaborate with security researchers, data scientists, and customers; ingest and correlate SaaS logs via APIs; produce thought leadership and improve platform detection capabilities.

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Build, test, and maintain SQL-based behavioral detections and anomaly scoring on petabyte-scale network/security telemetry. Own dataset and demo environment creation, probe/data-collection strategy, SIEM/EDR integration, and hands-on delivery during customer pilots. Document detection logic, runbooks, and playbooks for reuse across industries.

Lead and own the end-to-end cybersecurity program: achieve and maintain DoD ATO (RMF), embed security automation into CI/CD, run vulnerability scanning and remediation, harden microservices and containers, produce eMASS artifacts, and report risk and progress to leadership.

Design and assess secure systems for Microsoft business operations: perform threat modeling and security design assessments, drive risk-based architecture decisions, communicate risk, mentor teammates, and ensure compliance with security policies and screenings.