Top Remote Cyber Security Jobs in Baltimore, MD

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

Designs and builds secure AWS infrastructure for a regulated SaaS platform. Responsibilities include cloud security architecture, IAM, networking, containers, encryption, logging, monitoring, automated guardrails, risk remediation, reference architectures, and engineering mentorship. The role partners with application security and infrastructure teams to secure AWS environments across design and production, supporting compliance for financial services customers.

Design and lead the application security program centered on Wiz. Automate security throughout the SDLC, including code, dependency, secrets, container, infrastructure-as-code, and release scanning. Establish threat modeling, secure design reviews, and guardrails for AI-assisted development. Improve developer adoption by delivering accurate findings within existing tools, while mentoring the AppSec team and partnering with cloud and AI security architects.

Lead enterprise security architecture across software procurement, on-premises data centers, networks, infrastructure, identity, encryption, privileged access, and zero-trust design. Establish security standards, conduct practical third-party software and SaaS reviews, support cloud and application security architects, identify cross-domain gaps, and advise executives and engineering teams. The role requires broad cybersecurity expertise, regulated-industry experience, and strong risk-based decision-making.

Design, administer, optimize, and support enterprise endpoint security platforms across a global environment. The role develops security baselines, hardening standards, automation workflows, and detection capabilities; investigates security events; supports incident response; evaluates security technologies; and partners with Cyber Operations, Infrastructure, Desktop Engineering, Identity, and DevOps/SecOps teams. Responsibilities include managing EDR, PAM, firewall, device control, API integrations, and security projects while improving overall endpoint security posture.

Supports Account Executives and senior engineers in qualifying, positioning, and solutioning Application Security and AI security opportunities. The role involves customer discovery, explaining security risks and architectural tradeoffs, demonstrating solutions, developing proposals and Statements of Work, researching emerging technologies, and participating in sales events. It focuses on DevSecOps, secure SDLC, AppSec, AI security, AI governance, and related technologies, with up to 25% travel.

Lead insider risk detection engineering and investigations using EDR/XDR, UEBA, SIEM, and SOAR tools. Refine detection rules, reduce alert noise, close coverage gaps, manage investigations, develop playbooks, document evidence, mentor analysts, and collaborate discreetly with HR, Legal, business leaders, and executives. The role also requires investigative workflow automation using Python or JavaScript and ownership of scalable security processes.

Lead product and application security strategy for the Endor Labs platform. Build scalable security tooling and automation, validate and remediate vulnerabilities, prevent insecure code merges, and apply LLMs and AI agents to security workflows. Conduct threat modeling and secure design reviews, secure CI/CD and build systems, influence product roadmaps, and collaborate with engineering, product, customers, and security stakeholders.

Own Playlist’s technical GRC architecture across multiple compliance frameworks, including PCI DSS, SOC, ISO 27001, HITRUST, and NIST. Design unified control mappings, maintain the Master Control List, manage control and evidence lifecycles, automate evidence collection, and translate requirements into engineering guidance. Build AI-powered GRC workflows for risk quantification, vendor assessment, and compliance monitoring while partnering with Engineering, Legal, Finance, and auditors.

Own Playlist’s technical GRC architecture, including a unified Master Control List, cross-framework mappings, control lifecycles, evidence requirements, and audit automation. Build scalable GRC tooling and AI-powered workflows for risk quantification, vendor assessments, evidence collection, and compliance monitoring. Partner with Security Engineering, Legal, Finance, and product teams to translate regulatory requirements into actionable controls and harmonize compliance across multiple brands.

Owns and strengthens the security posture of cloud-based SaaS and Microsoft 365 environments. Responsibilities include vulnerability management, incident response, cloud and endpoint hardening, identity and data protection, secure configuration, monitoring, compliance evidence, customer security reviews, and risk management aligned with HITRUST, HIPAA, NIST, and related frameworks.

Designs, implements, configures, and supports enterprise cybersecurity solutions across IAM, endpoint, network, email, application, cloud, and security awareness domains. Conducts vulnerability assessments, threat hunting, incident investigation, security tool tuning, policy development, and security architecture reviews. Serves as a security subject matter expert on technology projects, collaborates with an MSSP, provides incident escalation support, and maintains availability for critical security operations.

Monitors and responds to security alerts and incidents across SIEM, endpoint, cloud, email, and network security tools. Collaborates with IT teams and service providers, improves security policies and procedures, supports ISO 27001 and SOC compliance, assists with audits and security assessments, and provides regional IT security support, including occasional out-of-hours incident response.

Develop and evaluate backend security coding tasks for AI systems. Responsibilities include implementing backend features, fixing bugs, refactoring code, optimizing performance, identifying and remediating vulnerabilities, conducting security-focused code reviews, and creating deterministic automated tests and verifiers. The role requires strong backend engineering, application security, debugging, testing, algorithms, and software architecture skills. Work is remote, flexible, part-time, and contractor-based.

Lead and own the enterprise SSPM program: implement and manage SSPM platform, onboard SaaS apps, tune controls, integrate with SIEM/SOAR/ITSM/identity, perform threat modeling and risk assessments, drive remediation, support compliance mapping, report metrics, and partner across cyber, IT, risk, and business teams to reduce data exposure and improve SaaS security posture.

Leads enterprise security architecture for commercial banking and payments, developing secure, scalable strategies across cloud, infrastructure, applications, data, and security platforms. Establishes architecture standards and reference patterns, embeds security into software development and CI/CD, advises on regulatory and risk requirements, and guides cloud modernization, identity, API, container, and data security initiatives. Partners with architects, engineering, DevOps, SRE, security, business, and executive stakeholders to influence technology decisions in a highly matrixed organization.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Leads and matures the organization’s 24x7 security operations and cyber defense capabilities. Oversees SOC personnel, incident response, threat hunting, detection engineering, security automation, cloud and identity security, budgets, vendors, and operational metrics. Develops response procedures, manages major incidents and exercises, improves SIEM/EDR/SOAR effectiveness, implements AI-assisted security operations, supports compliance requirements, and builds workforce capability through recruiting, coaching, and succession planning.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Own the strategy, roadmap, delivery, and lifecycle of enterprise data security products. Lead data governance, discovery, classification, DLP, access governance, compliance, and secure-by-design capabilities. Manage backlogs, Agile delivery, KPIs, stakeholder communication, and risk reduction outcomes while integrating AI to improve security workflows and productivity.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Lead engineering for enterprise network security platforms, including firewall infrastructure, Infrastructure as Code, CI/CD pipelines, Ansible automation, APIs, and scripting. Troubleshoot complex network, cloud, and security issues; establish engineering standards; improve reliability and scalability; manage platform upgrades and vulnerability remediation; and provide technical leadership across engineering, networking, application, cloud, and security teams.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.