Top Remote Cyber Security Jobs in Portland, ME

Assess product and application architectures, develop threat models, identify security risks, and guide engineering teams on remediation. Promote security culture through training, mentoring, vulnerability management, and internal security initiatives. Build security tooling, automation, patterns, and workflows that embed secure-by-design practices across engineering. Partner with product managers, designers, and engineers to secure complex, large-scale cloud systems.

Monitor and investigate security alerts, logs, threats, vulnerabilities, and incidents. Conduct vulnerability assessments, support penetration testing and cloud security reviews, assist with incident response, recommend remediation, and prepare technical and executive reports. Collaborate with security consultants, engineers, red teamers, and client IT teams while supporting compliance, hardening, patch management, and security monitoring across cloud and enterprise environments.

Build and automate security infrastructure across AWS and Kubernetes, including cryptographic material lifecycle, telemetry pipelines, policy-as-code, compliance monitoring, and incident-response tooling. Develop agentic AI workflows using coding assistants, MCP integrations, and custom harnesses. Apply threat modeling and secure architecture review while partnering with engineering, risk, auditors, vendors, and clients. The role emphasizes production software, cloud-native automation, continuous control monitoring, and eliminating manual security toil.

Build and operate a reliable security platform across hundreds of AWS environments. Responsibilities include security telemetry and OpenSearch infrastructure, GitOps deployments, Kubernetes and AWS security controls, cross-account and multi-region architecture, Python automation, and agentic AI workflows. The role participates in on-call support, security incident enablement, audit evidence automation, and reliability improvements while collaborating with Security Operations, Risk, and SRE teams.

Manage enterprise and federal cybersecurity compliance programs, audit readiness, continuous monitoring, POA&M remediation, third-party risk, policy governance, documentation, and security training. Coordinate cross-functional stakeholders across Security, Engineering, DevOps, IT, GRC, Procurement, and Legal. Maintain compliance plans, evidence, risk registers, control documentation, and audit-ready materials while supporting FedRAMP High, DoD IL5, SOC 2, ISO 27001, and related requirements.

Lead Affirm’s enterprise AI security review program, threat model LLM and agentic systems, review code and configurations, and develop security guardrails, tooling, policies, and monitoring. Evaluate AI-enabled SaaS vendors, identify emerging vulnerabilities, support incident response, and lead cross-functional initiatives across Security, Engineering, Legal, Privacy, and Compliance. The role requires expertise in AI security architecture, threat modeling, IAM, cloud infrastructure, policy-as-code, and regulated enterprise environments.

Leads technical security engagements involving presentations, demonstrations, workshops, architecture design, and production-ready pilots. Designs and proves Microsoft and third-party cloud security, compliance, privacy, XDR, zero trust, and data protection solutions. Collaborates with sales, consulting, and partner teams, resolves technical and competitive blockers, influences strategy, and guides customer implementations. The role requires strong technical pre-sales or consulting experience and expertise in cloud, hybrid, and on-premises infrastructure.

Lead application security across the SDLC, partnering with engineering teams on secure architecture, coding, testing, deployment, and cloud services. Conduct manual web application and API testing, improve automated CI/CD security controls, establish secure coding standards, assess third-party risks, support vulnerability management and incident response, and ensure healthcare compliance. The role also develops enterprise-wide security policies and evaluates emerging security technologies.

Own application security across cloud services, APIs, data pipelines, and edge-deployed applications. Lead threat modeling, secure design reviews, code reviews, vulnerability assessments, and remediation. Build CI/CD security tooling, automation, and secure-by-default developer frameworks while maturing the SDLC, supply-chain security, vulnerability disclosure, and bug bounty processes. Partner with engineering and security operations, provide incident expertise, and deliver developer security training.

Designs and maintains cloud and application security controls across AWS and Azure. Leads IAM, network segmentation, PAM, workload protection, CI/CD, container security, incident response, threat modeling, code scanning, and penetration testing. Partners with engineering and product teams to improve security posture, secure development practices, compliance, and cyber resilience. Provides technical guidance, training, metrics, and hands-on architecture, code review, and validation support.

Implement and validate Oracle Cloud Infrastructure security controls for a federal health customer. Responsibilities include securing IAM, networks, encryption, monitoring, Cloud Guard, Security Zones, Security Advisor, threat intelligence, key management, SIEM integrations, and Infrastructure as Code automation. The engineer will collaborate with cloud operations, migration, application, and systems teams while establishing technical security standards for cloud and on-premises environments.

Establish and enforce security controls across Google Cloud and Oracle Cloud environments for a federal health customer. Manage IAM federation, least-privilege access, centralized monitoring, vulnerability remediation, and cloud security tooling. Validate deployments against FedRAMP High, FISMA, and NIST 800-53 requirements, support zero-trust architecture, and collaborate with governance, audit, security, and engineering teams. The role also provides technical leadership and develops cloud security standards.

Lead enterprise eDiscovery and insider-risk investigations by collecting, preserving, analyzing, and reviewing data from cloud infrastructure, endpoints, and repositories. Build AI-powered automation, correlate activity logs into investigative timelines, manage legal holds and governance policies, support digital forensics, and produce structured evidence packages for Security, Legal, HR, and investigative teams.

Build and scale the application security program by integrating SAST, DAST, and SCA tooling into CI/CD pipelines; define Secure SDLC processes and threat modeling practices; manage bug bounty triage and metrics; conduct Java and Python code reviews; deliver secure coding training; develop security champions; and support vulnerability disclosures and security communications.

Supports enterprise cybersecurity and GRC programs through third-party risk assessments, security testing coordination, corrective action tracking, policy development, compliance support, incident response planning, disaster recovery exercises, and enforcement of technical and administrative controls. Partners with engineering, operations, managed security providers, and internal stakeholders to strengthen security posture across cloud and hybrid environments.

Owns company-wide security operations, cloud and infrastructure security, incident response, zero-trust architecture, blockchain treasury controls, compliance, privacy, production reliability, Terraform, CI/CD, observability, disaster recovery, and on-call operations. This hands-on leadership role reports to the CTO, represents the company to auditors and customers, and builds security automation across GCP, Cloudflare, GitHub, Google Workspace, and Ethereum infrastructure.

Build and scale backend security platform services, including authentication, authorization, identity infrastructure, permission systems, and data models. Lead cross-team technical initiatives, standardize security solutions, collaborate with compliance and mission stakeholders, and influence architecture and engineering standards. The role requires strong system design, backend development, security expertise, technical leadership, and the ability to operate in sensitive environments.

Leads secure enterprise architecture design and GitLab Professional Services implementations across application security, cloud security, DevSecOps, identity, vulnerability management, and compliance. Guides SaaS, Self-Managed, and Dedicated deployment decisions; leads CI/CD, source control, and security-tool migrations; conducts risk assessments and threat modeling; supports pre-sales scoping and statements of work; coordinates cross-functional delivery; mentors consultants; and develops security enablement materials.

Lead Pomelo Care’s enterprise security governance, risk, and compliance program. Own SOC 2 Type II and HITRUST certification lifecycles, security policies, access governance, HIPAA risk assessments, awareness training, control monitoring, incident response, and third-party risk assessments. Partner with engineering leadership to align technical roadmaps with security strategy, represent the company during audits and partner due diligence, and report security posture and program maturity to executives.

Lead complex security investigations across endpoint, identity, cloud, email, SaaS, and network environments. Own incidents through containment, remediation coordination, documentation, and post-incident review. Tune detections, queries, dashboards, workflows, and SOAR playbooks; improve SOC metrics, threat coverage, alert fidelity, and response processes. Partner on vulnerability and cloud-risk remediation, participate in global on-call rotation, use approved AI capabilities responsibly, and mentor analysts.

Designs and delivers enterprise security solutions, including micro-segmentation and security platform deployments. Leads product installation, integration, configuration, optimization, and automation across diverse customer environments. Provides advanced professional services, customer training, and post-sales support while coordinating with cross-functional teams. The role requires expertise in web and API security, bot mitigation, DNS, SIEM integrations, DDoS protection, observability, CI/CD security, compliance standards, and AI application security.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Provides cybersecurity consulting for customers using the Akamai platform. Responsibilities include network integration, security architecture reviews, cloud security strategy, threat modeling, risk assessment, DevSecOps, vulnerability management, API security, security testing, and implementation of cloud and container solutions. The consultant collaborates with account teams, evaluates web architectures, develops long-term security strategies, and contributes to training, best practices, and service quality improvements.

The Senior Security Engineer architects, implements, and supports enterprise security capabilities across vulnerability management, cloud security, identity, endpoint, application security, and security architecture. The role leads security initiatives, resolves complex platform issues, develops automation and AI-assisted workflows, establishes documentation and reporting standards, and mentors security engineers and analysts while partnering across infrastructure, application, network, cloud, and security teams.

Leads the company’s information security operations and reports to the CISO. Oversees SIEM, threat detection, vulnerability management, penetration testing, incident response, SOC 2 Type II compliance, third-party risk, security awareness, cloud and endpoint security, and regulatory cybersecurity coordination. Manages security policies, breach readiness, tabletop exercises, KPIs, audits, and emerging technology evaluations while partnering with IT, infrastructure, compliance, regulators, and executive leadership.