Open Baltimore Cybersecurity jobs

Summary

A hands-on technical lead for the Huntress SIEM platform, setting the technical vision and leading feature delivery for automated detection and human-powered threat hunting. The stack is Ruby on Rails with heavy AI-assisted development, and the role spans cross-team architecture and mentoring while staying in the code. A senior individual-contributor lead, remote.

Summary

A senior leadership role that owns the strategy, vision, and roadmap for Huntress's Detection Engineering and Threat Hunting function and manages other managers, so it is organizational rather than hands-on. You set 12-18 month priorities, own budgeting and capacity models, and advise the Sr. Director of Threat Detection and Response. Remote US; compensation listed at 220,000 to 240,000 base plus bonus and equity.

Summary

An executive role owning Huntress's entire Threat Detection and Response organization, spanning the SOC, security triage, tactical response, detection engineering and threat hunting, and adversary tactics. The focus is multi-year strategy, organizational design, and leading the shift to an agentic SOC operating model through directors and managers, not daily queue management. Wants 10+ years leading security operations, including 5+ years leading through other managers.

Summary

A senior threat-intelligence role on the Adversary Tactics team that is research-and-communication heavy rather than software, with some team leadership: you research and hunt threats, aggregate monthly threat data into customer and marketing reports, write blogs, and speak publicly. Wants experience leading researchers across the threat-intelligence cycle. Remote US; compensation listed at 190,000 to 210,000 base plus bonus and equity.

Summary

A red-and-purple-team role testing Huntress's own defenses rather than building product, including penetration tests of web apps, endpoint agents, internal systems, and staff, plus social-engineering campaigns. You weaponize real adversary tactics and partner with the SOC and incident-response teams. Remote; compensation listed at 170,000 to 185,000 base plus bonus and equity.

Summary

A client-facing OT/ICS security consultant on the Professional Services team, not a product-engineering role. You lead advisory engagements (architecture reviews, threat assessments, tabletop exercises) for industrial sectors like oil and gas, electric, water, and manufacturing, and mentor teammates. Wants 7+ years hands-on ICS/OT security with deep protocol and asset knowledge (PLCs, Modbus, DNP3) and about 30% travel; base salary listed at 150,000.

Summary

A hands-on staff product-security engineer securing the cloud-native AWS, Azure, and PaaS infrastructure behind Huntress's SaaS platform, covering secure architecture, DevSecOps and infrastructure-as-code review, threat modeling, and vulnerability management. Prior experience at a B2B SaaS company running cloud-hosted services is a stated requirement. Fully remote.

Summary

A threat-intelligence analyst role that is research-and-communication heavy rather than software: you research adversary tradecraft, aggregate monthly threat data into customer and marketing reports, write blog posts, and do public speaking. Familiarity with SIEM, detection engineering, incident response, and malware analysis differentiates candidates. Wants 7-10+ years in threat intelligence within cybersecurity.

Summary

A principal-level individual-contributor role in digital forensics and incident response — independently managing investigations of varying size and complexity (business email compromise, ransomware), performing advanced forensic analysis including malware reverse engineering, and mentoring a small team of 3-4 consultants. It is fully remote in the USA with $100K-$160K plus a 20% bonus, suiting a deeply hands-on senior DFIR expert.

Summary

A hands-on mid-to-senior digital-forensics and incident-response consultant role on client-facing engagements — analyzing intrusions, leading small-to-medium investigations such as business email compromise and ransomware, and providing after-hours support. It is fully remote in the USA with $90K-$120K plus a 20% bonus, so it fits a forensic analyst ready to own investigations with some guidance.

Summary

A people-management and client-facing leadership role in digital forensics and incident response, leading a 3-5 person forensic team through full incident-response engagements (ransomware, business email compromise, malware) and coordinating with insurance carriers and legal counsel. It reports to the Chief Delivery Officer, is fully remote in the USA, and lists $185K-$200K compensation, so the fit is a seasoned DFIR practitioner ready to lead a team.

Summary

A product-management role, not engineering, driving the vision, roadmap, pricing, and go-to-market for Huntress's SIEM product aimed at SMB and mid-market customers rather than large enterprises. You work closely with founders, do market and competitor analysis, and translate customer needs into requirements. Wants combined business acumen and technical depth in the threat landscape.

Summary

A DoD SkillBridge program (for transitioning active-duty service members) blending systems administration and security work at a Maryland cyber startup — vulnerability scanning and patching, network and device monitoring, user/server administration across Windows, Linux, and macOS, and firewall/antivirus configuration plus phishing-prevention training. It asks for 5+ years in cybersecurity or sysadmin work and requires US citizenship.