Top Cyber Security Jobs in Baltimore, MD

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.

Owns and strengthens the security posture of cloud-based SaaS and Microsoft 365 environments. Responsibilities include vulnerability management, incident response, cloud and endpoint hardening, identity and data protection, secure configuration, monitoring, compliance evidence, customer security reviews, and risk management aligned with HITRUST, HIPAA, NIST, and related frameworks.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Monitors and responds to security alerts and incidents across SIEM, endpoint, cloud, email, and network security tools. Collaborates with IT teams and service providers, improves security policies and procedures, supports ISO 27001 and SOC compliance, assists with audits and security assessments, and provides regional IT security support, including occasional out-of-hours incident response.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Leads enterprise security architecture for commercial banking and payments, developing secure, scalable strategies across cloud, infrastructure, applications, data, and security platforms. Establishes architecture standards and reference patterns, embeds security into software development and CI/CD, advises on regulatory and risk requirements, and guides cloud modernization, identity, API, container, and data security initiatives. Partners with architects, engineering, DevOps, SRE, security, business, and executive stakeholders to influence technology decisions in a highly matrixed organization.

Provides information assurance, systems administration, vulnerability assessment, security planning, risk analysis, and secure system design for enterprise network, server, desktop, and application environments. Develops security solutions, enforces trusted relationships across systems, and supports government information security programs. Requires shift and weekend support as needed, an active CASP+, SecurityX, or CISSP certification, and an active TS/SCI clearance with polygraph.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Leads and matures the organization’s 24x7 security operations and cyber defense capabilities. Oversees SOC personnel, incident response, threat hunting, detection engineering, security automation, cloud and identity security, budgets, vendors, and operational metrics. Develops response procedures, manages major incidents and exercises, improves SIEM/EDR/SOAR effectiveness, implements AI-assisted security operations, supports compliance requirements, and builds workforce capability through recruiting, coaching, and succession planning.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Own the strategy, roadmap, delivery, and lifecycle of enterprise data security products. Lead data governance, discovery, classification, DLP, access governance, compliance, and secure-by-design capabilities. Manage backlogs, Agile delivery, KPIs, stakeholder communication, and risk reduction outcomes while integrating AI to improve security workflows and productivity.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Lead engineering for enterprise network security platforms, including firewall infrastructure, Infrastructure as Code, CI/CD pipelines, Ansible automation, APIs, and scripting. Troubleshoot complex network, cloud, and security issues; establish engineering standards; improve reliability and scalability; manage platform upgrades and vulnerability remediation; and provide technical leadership across engineering, networking, application, cloud, and security teams.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Lead enterprise security operations, resilience, incident response, threat intelligence, cloud security, IAM, and risk management. Serve as deputy to the CISO and primary incident commander while advising executives on cyber risk. Build and scale multidisciplinary security teams, modernize cloud-native defenses, embed security-by-design across products and AI/ML systems, and establish metrics-driven governance, automation, regulatory alignment, and business-focused security strategies.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Supports the security and compliance program by assessing security controls, evaluating compliance with SOC 2, ISO 27001, PCI DSS, HIPAA, and other frameworks, collecting audit evidence, performing control testing, tracking remediation, and reviewing technical documentation. Partners with engineering, security, business teams, and system owners to identify and resolve compliance gaps across cloud and infrastructure environments.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Oversee and execute information systems security activities for national security systems, including Risk Management Framework implementation and Assessment and Authorization processes. The role requires extensive information systems security experience, a bachelor's degree or equivalent experience, DoD 8570 IAM Level 1 certification, and an active TS/SCI clearance with polygraph.