Top Cyber Security Jobs in Portland, ME

Design, build, and operate firewall, segmentation, and zero-trust controls across data center, corporate, and cloud networks. Implement infrastructure-as-code for policy and CI/CD deployment, manage lifecycle and rule hygiene, build network detection capabilities, operate VPN/remote access patterns, and document architecture and runbooks while partnering with Network Engineering and Security Operations.

Lead product security across application, CI/CD/supply-chain, and Kubernetes-based infrastructure. Own PKI and mTLS, vulnerability management, product incident response, infra hardening, and partner with hardware/firmware teams on secure boot, key storage, and supply-chain integrity. Drive secure SDLC, SAST/DAST/SCA, SLSA-aligned controls, and mentor engineering teams while building security programmatic controls.

Provide technical and functional security support for Oracle Fusion Cloud and related applications. Manage access provisioning/deprovisioning, troubleshoot roles and data security issues, maintain role and service-account documentation, support BI permissions, assist projects and consultants, and ensure SOX compliance for Oracle access controls.

Company-wide recruiting bucket for Trace3's Security team. No specific role duties listed; applicants are encouraged to apply for a specific security opening. Describes company culture, perks (benefits, 401(k), PTO), and commitment to diversity and inclusion.

Design, review, and verify security architecture across infrastructure, applications, blockchain, and AI projects; conduct security assessments and audits; advise blockchain teams on secure operations; stay current on security threats and mitigations.

Lead offensive application security work across the core product: hunt and remediate vulnerabilities, harden systems, safeguard PHI, scale AI-driven vulnerability discovery, mentor engineers, and partner with SRE and security teams to improve resilience and disaster recovery.

Lead IAM consulting engagements: deliver assessments, architecture design, and implementations across IGA, PAM, access management, and cloud identity. Serve as technical SME for pursuits, scope and price engagements, produce client-ready deliverables, facilitate executive workshops, mentor consultants, and grow the IAM practice through reusable assets and thought leadership.

Lead and grow WWT's micro-segmentation practice, driving revenue and client engagements across Illumio, Guardicore, and Cisco Secure Workload. Manage a team of consultants, author SOWs, deliver end-to-end segmentation and zero-trust solutions, oversee project delivery, and advise clients on compliance and optimization. Partner with sales, OEMs, and executives to position offerings and ensure successful outcomes.

Build reliable, scalable data pipelines and data products to surface security, fraud, and infrastructure risks. Use big-data technologies (Spark, Presto, Flink, Kafka) and advanced SQL to ETL, model, maintain datasets, and enable analytics for security teams. Partner cross-functionally and lead complex system design and implementation.

Lead technical IAM delivery tasks: conduct current-state discovery, configure and validate IGA/PAM/Access Management platforms, perform gap analyses against frameworks, produce client deliverables (assessments, diagrams, maturity scores), facilitate workshops, and support pre-sales and practice development while growing toward workstream ownership.

Build and maintain scalable data pipelines and data products to enable security and fraud detection. Implement ETL, data models, and distributed processing (Spark/Presto/Flink/Kafka) to centralize signals, support analytics and machine learning, and partner with security teams to improve detection and mitigation of fraud and account compromise.

Manage customer-facing security reviews end-to-end: complete questionnaires/RFPs, act as security contact during sales, build reusable answer libraries and AI-assisted workflows, address AI-governance and compliance questions, and collaborate with Security, Product, and Legal to close gaps and scale processes.

Develop, implement, and maintain the banks enterprise information security program. Independently assess first-line security risk management, regulatory compliance, incident response, and control effectiveness. Oversee security governance, policy, KRIs, business continuity, and third-line coordination. Provide unfiltered reporting and challenge to executive management and the Board and lead post-incident reviews and resilience testing.

Provide engineering-first customer support for security, privacy, and assurance tooling. Triage and resolve authentication and access issues, build automation and runbooks, maintain support tooling, and improve developer experience. Use Generative AI responsibly to accelerate triage, documentation, and automation while advocating for customers and collaborating with product and engineering partners.

Architect and implement system-level security for Open Connect edge and gaming appliances across hardware (FPGA, BMC, BIOS/UEFI), kernels and dual OS (FreeBSD/Linux). Improve platform integrity (measured/secure boot, BMC controls), triage system-level vulnerabilities, build low-level tooling and automation, and partner cross-functionally and with vendors to harden binary ingestion and execution.

Own protocol and cryptographic foundations for Netflix Open Connect edge appliances. Design and implement security primitives, optimize crypto/transport for performance, build DoS mitigations, conduct vulnerability research, and partner cross-functionally to deploy end-to-end security controls across delivery infrastructure.

Serve as a public-facing Web3 security researcher: engage the community via social media, speak at conferences, give interviews, collaborate cross-functionally with CertiK teams, and support marketing and product feedback while performing technical Web3 security work.

Lead and perform application and network penetration tests, source code and cloud security reviews, and produce clear pentest reports. Research and develop pentesting tools/methods for blockchain and Web3, contribute to community content, and support client security engagements.

Perform smart contract and protocol audits, consult with external blockchain teams on remediation, conduct security research, and build internal security tools and methodologies to protect Web3 projects and clients.

Perform end-to-end blockchain security services including consulting, manual code reviews and audits of smart contracts and protocols (Solidity, Go, Rust), threat modeling, property-based and gas-related testing, penetration testing, and deliver detailed security assessments to clients.

Develop and optimize LLM-driven AI agents to automate smart contract security audits. Collaborate with blockchain security teams to research, prototype, and productionize threat detection, risk assessment, and automated vulnerability analysis for blockchain environments.

Perform guided audits of smart contracts, blockchain protocols, and dApps to identify and remediate vulnerabilities. Contribute to security tooling and research, explore attack vectors, and support process and methodology improvements under senior guidance.

Perform smart contract and blockchain audits to find and analyze vulnerabilities, define attack models, extract exploit characteristics to build feature-analysis tooling, and research/adopt analysis tools and emerging blockchain security technologies.

Own outbound field motion for Identity Threat Protection launch, validate messaging in live deals, synthesize field intelligence into product recommendations, run adoption diagnostics, and provide technical escalation support for complex identity situations.

Lead messaging, positioning, and go-to-market for core AI-native security products. Drive product launches, sales enablement, demand generation content, customer research, and analyst/customer-facing evangelism to accelerate pipeline and revenue.