Top Senior Cyber Security Jobs in Portland, ME

Own and improve application security across applications, APIs, cloud services, and CI/CD pipelines. Manage penetration testing programs, vulnerability remediation, security scanning, WAF and API protections, threat modeling, secure design reviews, and security automation. Partner with development, cloud, compliance, and security teams to remediate critical findings, support audits, improve secure coding, and provide security guidance. The role also involves leveraging AI-enabled tools for vulnerability triage and remediation.

Defines and maintains security architecture for AI/ML systems across Azure, Databricks, and enterprise platforms. Leads AI threat modeling, model and agent security, prompt-injection mitigation, tool and integration security, MLSecOps, and security observability. Creates reusable architecture patterns, requirements, and implementation guidance while validating controls through testing. Advises technology, governance, privacy, compliance, and business teams on secure AI adoption and evolving risks.

Own security risk identification, quantification, prioritization, and remediation across third-party risk, assessments, and security findings. Maintain risk registers, reporting, metrics, and remediation tracking while partnering with technical and business stakeholders. Lead AI risk management for ISO 42001 certification and build automation, scripting, and AI-enabled tools to improve GRC workflows. Monitor emerging risks, frameworks, regulations, and threat trends, communicating business-relevant risk insights to leadership.

Build offensive red team agents that convert real-world adversary tradecraft into autonomous AI capabilities. Develop attack-chain workflows, payloads, command-and-control, evasion techniques, and post-exploitation skills across Windows, Active Directory, on-premises, cloud, and network environments. Design cyber ranges with production defenses, create measurable security benchmarks, validate attack paths in customer environments, and contribute research to the offensive security community.

Leads the design and implementation of security solutions for AI systems across data ingestion, model training, deployment, and runtime. Develops controls against prompt injection, data poisoning, model inversion, data leakage, and unauthorized access. Secures cloud infrastructure, APIs, identities, integrations, and third-party AI platforms; implements monitoring, automated security testing, and incident response. Partners with architecture, engineering, and governance teams to ensure resilient, compliant AI security practices.

Leads enterprise security strategy, staff, processes, technologies, compliance, risk assessment, incident remediation, and security operations. Oversees security solution configuration and integration, mentors analysts, develops policies and SOC procedures, supports vulnerability assessments, and collaborates with business stakeholders on information risk. The role also contributes to security project planning, budgeting, communications, and personnel management.

Lead messaging, positioning, and go-to-market for core AI-native security products. Drive product launches, sales enablement, demand generation content, customer research, and analyst/customer-facing evangelism to accelerate pipeline and revenue.

Leads the strategy, architecture, delivery, and lifecycle management of secure multi-cloud products across AWS, Azure, GCP, and Oracle Cloud. Oversees cloud engineering teams, sets technical standards, drives modernization and DevSecOps adoption, establishes reliability and security metrics, and ensures alignment with CIS Benchmarks and governance requirements. Partners with product, engineering, sales, and customer teams while managing cloud maintenance, marketplace publishing, and organizational growth.

Serves as an Information System Security Officer for an Azure-based federal system. Provides RMF documentation, security testing, vulnerability assessments, compliance analysis, continuous monitoring, incident response, secure architecture guidance, and remediation tracking. Collaborates with Agile development and engineering teams to implement cloud security controls, address findings, support audits, and maintain compliance with federal standards and DHS requirements.

The posting provides conflicting information: the title indicates a Senior Associate in Cyber Security, while the description identifies the role as a Senior Payroll Analyst. No specific responsibilities are provided.

Supports the information security program by monitoring and triaging alerts, investigating and documenting security events, assisting with incident response, identity and access management, vulnerability remediation, security awareness, and security tool configuration. Collaborates with IT teams and an MSSP, maintains security documentation, and provides escalation support, including 24/7 availability for access management and incident response.

Conduct offensive security research focused on software supply chain threats, zero-day vulnerabilities, malicious code, third-party libraries, and CI/CD systems. Develop exploit techniques, collaborate on detection and mitigation capabilities, publish research through blogs and security conferences, and contribute open-source tools and methodologies. The role requires deep expertise in vulnerability research, reverse engineering, application security, exploit development, and software supply chain security.

Leads client information security programs, advising executives on strategy, policies, threats, incidents, business continuity, and security solutions. Oversees risk assessments, vulnerability testing, audits, certifications, control mappings, regulated-data scoping, and remediation across frameworks including NIST, ISO 27001, HIPAA, SOC 2, and PCI DSS. Coordinates incident response and security teams while delivering security awareness training and secure cross-functional solutions. Requires substantial security leadership, consulting, compliance, and regulated-industry experience, plus CISSP certification.

Executes end-to-end red team and adversary emulation operations across cloud, identity, network, endpoint, hardware, and operational environments. Develops offensive tooling, implants, and evasion tradecraft; operates and improves AI-driven security agents; discovers and exploits vulnerabilities; and communicates findings to customers and internal security teams. The role also contributes to operational playbooks, product hardening, detection improvements, and scalable offensive security practices.

Leads investigations of critical vulnerabilities, zero-days, KEVs, and security exposures. Correlates technical data, determines scope and impact, coordinates remediation, commands incidents, escalates potential compromises, and maintains operational continuity across coverage periods. The role also mentors analysts and collaborates with SOC, incident response, technology, and security teams to reduce enterprise risk.

Leads security compliance assessments and audit readiness across cloud infrastructure and delivery services. Translates regulatory standards into technical guidance, evaluates architectures and controls, conducts risk assessments, directs remediation, and develops compliance playbooks and automated monitoring workflows. The role also mentors team members, coordinates audit evidence collection, and represents the organization during external certification assessments and audits.

Embeds security across the software development lifecycle by leading threat modeling, security design reviews, application security assessments, red-team exercises, and secure architecture guidance. The role drives adoption of SAST, DAST, and SCA tooling, strengthens CI/CD and cloud security, supports fintech regulatory compliance, and advises engineering and product leadership on prioritized security risks.

Assesses and mitigates security risks across applications, systems, networks, and cloud infrastructure. Conducts security assessments, identifies vulnerabilities and compromises, deploys mitigating controls, performs compliance investigations, and develops security guidance, policies, scripts, and tools. The role requires collaboration with IT, engineering, and business units, with emphasis on NIST frameworks, adversarial techniques, malware, intrusion management, FedRAMP, and CMMC environments.

Leads regional enterprise security sales by serving as a cloud security expert, shaping opportunities, advising account teams, managing executive relationships, and orchestrating technical teams and partners. Conducts architecture reviews, demos, proof-of-concepts, pilots, ROI/TCO analyses, and consultative engagements to promote Microsoft security solutions, Zero Trust adoption, and customer business outcomes.

Lead OT security monitoring and triage operations, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to incident responders and threat hunters. Produce customer-facing reports, support platform operations, mentor analysts, and collaborate across cybersecurity teams. The role requires shift-based coverage, remote coordination, and expertise in network security with a strong interest in ICS/OT environments.

Manage and lead cybersecurity advisory engagements: implement GRC programs, assess ITGC and IT risk, develop remediation roadmaps, run incident response tabletop exercises, manage GRC platforms, conduct vendor risk reviews, develop policies/SOPs, mentor staff, and support business development.

Lead product, cloud, application, infrastructure, and internal security across Hipp’s healthcare SaaS platform. Responsibilities include architecture reviews, threat modeling, vulnerability management, cloud and identity security, monitoring, incident response, AI-agent security, compliance controls, vendor risk, customer security reviews, and security mentorship.

Designs, operates, and improves cloud and infrastructure security across AWS and multi-cloud environments. Responsibilities include cloud governance, identity and access controls, network security, infrastructure as code, CI/CD and software supply-chain security, container and Kubernetes security, monitoring, threat modeling, incident response, and security automation. The role also contributes to AI security initiatives involving LLMs, AI agents, and MCP integrations, communicates risks across teams, leads complex initiatives, and mentors engineers.

Secure AI/ML models, data pipelines, and AI-enabled applications by conducting vulnerability assessments, threat modeling, incident response, and security reviews. Build guardrails, monitoring, detection, access controls, encryption, and data-segmentation measures. Partner with engineering and analytics teams throughout the AI development lifecycle, assess third-party AI tools, document remediation plans, and translate emerging threats such as prompt injection, data poisoning, jailbreaks, and model-supply-chain risks into practical mitigations.

Build ngrok’s foundational security engineering program, including security tooling, CI/CD guardrails, secrets scanning, vulnerability tracking, cloud security, risk assessments, AI security policies, detection capabilities, and incident response. Partner with engineering and leadership to establish security controls, automation, metrics, and reusable internal security platforms.