Top Remote Cyber Security Jobs in Baltimore, MD

Leads and matures the organization’s 24x7 security operations and cyber defense capabilities. Oversees SOC personnel, incident response, threat hunting, detection engineering, security automation, cloud and identity security, budgets, vendors, and operational metrics. Develops response procedures, manages major incidents and exercises, improves SIEM/EDR/SOAR effectiveness, implements AI-assisted security operations, supports compliance requirements, and builds workforce capability through recruiting, coaching, and succession planning.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Own the strategy, roadmap, delivery, and lifecycle of enterprise data security products. Lead data governance, discovery, classification, DLP, access governance, compliance, and secure-by-design capabilities. Manage backlogs, Agile delivery, KPIs, stakeholder communication, and risk reduction outcomes while integrating AI to improve security workflows and productivity.

Leads architecture and implementation of Microsoft Red Team visibility, telemetry, monitoring, detection, alerting, deconfliction, and operational security capabilities. Designs scalable services and data pipelines, maintains authoritative operational asset inventories, identifies systemic security gaps, and drives durable engineering solutions. Provides hands-on technical leadership, architecture reviews, debugging, incident response, mentorship, and cross-organizational influence while enabling authentic Red Team operations with strong defensive visibility and control.

Own corporate detection and response, incident response, endpoint security, identity and SaaS security, Google Workspace governance, and corporate-to-production monitoring. Build LLM-driven security triage with measured evaluation, automate enforcement through vendor APIs, improve detection fidelity, and partner with engineering to ship security improvements. Manage Mac fleet security, phishing-resistant authentication, access reviews, DLP, OAuth governance, and containment playbooks.

Engineer and maintain enterprise network security platforms across on-premises and cloud environments. Design firewall and network security solutions, troubleshoot complex connectivity and security issues, and automate infrastructure operations using scripting, APIs, Infrastructure as Code, configuration management, and CI/CD pipelines. Support platform upgrades, vulnerability remediation, monitoring integrations, validation processes, and modernization initiatives while collaborating with network, cloud, application, and security teams.

Lead engineering for enterprise network security platforms, including firewall infrastructure, Infrastructure as Code, CI/CD pipelines, Ansible automation, APIs, and scripting. Troubleshoot complex network, cloud, and security issues; establish engineering standards; improve reliability and scalability; manage platform upgrades and vulnerability remediation; and provide technical leadership across engineering, networking, application, cloud, and security teams.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Maintain and mature Mozilla's ISMS and support ISO 27001 and SOC 2 Type 2 audit programs. Author system descriptions and policies, manage risk treatment plans, track remediation, support internal audits, and partner with Engineering, Legal, Privacy, and Product to drive control ownership and audit readiness.

Maintain and mature Mozilla's ISMS, support ISO 27001 and SOC 2 Type 2 audits, author compliance narratives, track remediation, lead policy program, scale compliance for products, and partner with cross-functional teams to drive control ownership and audit readiness.

Lead enterprise security operations, resilience, incident response, threat intelligence, cloud security, IAM, and risk management. Serve as deputy to the CISO and primary incident commander while advising executives on cyber risk. Build and scale multidisciplinary security teams, modernize cloud-native defenses, embed security-by-design across products and AI/ML systems, and establish metrics-driven governance, automation, regulatory alignment, and business-focused security strategies.

Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Supports the security and compliance program by assessing security controls, evaluating compliance with SOC 2, ISO 27001, PCI DSS, HIPAA, and other frameworks, collecting audit evidence, performing control testing, tracking remediation, and reviewing technical documentation. Partners with engineering, security, business teams, and system owners to identify and resolve compliance gaps across cloud and infrastructure environments.

Conduct penetration tests across infrastructure, networks, web and mobile applications, and cloud environments. Perform application and cloud security testing, simulate adversary techniques, develop custom security tools, document vulnerabilities, validate remediation, and support HIPAA, SOC 2, and PCI DSS compliance. Collaborate with engineering and product teams, track emerging threats, and contribute to purple-team exercises, tabletop events, and security training.

Lead enterprise security architecture across cloud, application, infrastructure, identity, data, and third-party environments. Develop security principles, standards, patterns, and controls; review designs; conduct threat modeling and risk assessments; guide secure-by-design implementations; and advise technical and business stakeholders. The role also supports regulatory compliance, evaluates security technologies, and strengthens organizational security practices.

Manages cybersecurity compliance and authorization for Air Force NIPR systems. Responsibilities include developing and maintaining system security plans, supporting RMF accreditation, conducting audits and inspections, managing POA&Ms, STIGs, IAVM compliance, continuous monitoring, FISMA requirements, security testing, and ATO activities. The role also provides tactical security guidance, assesses technology risks, and coordinates cybersecurity activities across multi-contractor teams and cloud and on-premises environments.

The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.

Assesses enterprise information security risks, performs vulnerability and security posture assessments, and coordinates remediation across networks, systems, applications, and vendors. Develops security policies and standards aligned with SOX, PCI, HIPAA, and NIST guidance; supports audits, incident response, training, access monitoring, and security projects. Communicates technical risks and corrective actions to technical and nontechnical stakeholders while mentoring teams and managing competing priorities.

Supports cybersecurity governance, risk, and compliance consulting engagements. Responsibilities include conducting discovery, gathering evidence, maintaining risk registers, mapping controls to frameworks, performing gap and maturity assessments, reviewing policies, evaluating third-party risk, drafting client deliverables, and supporting workshops and client communications. The role contributes to proposals, reusable consulting assets, and practice development while building foundational GRC expertise under senior consultant guidance.

The ISSO plans, implements, and maintains the Risk Management Framework for assigned systems; develops security documentation including SSPs, SARs, and POA&Ms; supports the ISSM; collaborates with system owners and security professionals; provides training and briefings; and ensures compliance with DoD and DoN cybersecurity policies.

Lead technical discovery, customized demonstrations, and proofs of value for enterprise CTEM customers. Map vulnerability, asset, ticketing, and remediation workflows; integrate customer tools; prove exposure-management outcomes using customer data; and communicate findings to engineers, CISOs, and executives. Maintain presales deal information, provide product feedback, create reusable demo and POV assets, and expand expertise into third-party risk management and cyber risk quantification.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.