Top Senior Cyber Security Jobs in Baltimore, MD

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Design, evaluate, and secure complex LAN/WAN and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model and test solutions, perform MTBF/MTTR analyses, analyze vulnerabilities, evaluate architectures, research COTS/GOTS, optimize wired and wireless networks, develop security documentation, and ensure compliance with government security requirements.

Support IC missions by implementing and enforcing information systems security policies and NIST RMF controls. Prepare and maintain SSPs, SRTMs, C&A packages; perform vulnerability and risk assessments; manage configuration and day-to-day security operations; evaluate security solutions for classified processing; administer authentication mechanisms and maintain operational IA posture.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Support and manage information system security posture: implement/enforce policies, perform vulnerability and risk assessments, manage configuration and changes, prepare SSPs/C&A/SRTMs, support NIST RMF authorization, evaluate security solutions for classified processing, oversee contractor ISSOs, and liaise with stakeholders.

Support and manage information assurance for systems/enclaves: implement and enforce security policies, perform RMF-based authorization activities, conduct vulnerability/risk assessments, manage configuration and changes, prepare SSP/C&A/SRTM documentation, evaluate security solutions for classified processing, and provide day-to-day security operations and oversight.

Support DoD network modernization by monitoring networks, collecting and analyzing CND/IA tool data, performing vulnerability assessments, incident response, risk analysis, and generating certification/accreditation reports. Ensure compliance using STIG/eMASS and communicate findings to stakeholders.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Support and coordinate IT security programs and policies. Provide information assurance and security guidance to developers, administrators, and owners. Assess security impacts of changes, maintain SSPs, conduct security assessments for A&A, support AO/DAO/SCA/ISSM to obtain and maintain ATOs, respond to security tickets daily, and use COTS/GOTS tools to report system status and compliance.

Serve as security engineering representative on teams to design, implement, evaluate, and integrate IA architectures, secure networking, computing, and enclave environments. Apply IA policy and procedures, support security planning, assessment, risk analysis/management, identify data handling requirements, and enforce trusted relationships with external systems while interacting with customers and project teams.

Perform ISSO duties supporting system and enclave security: evaluate and implement security solutions, manage configuration and authorization, maintain security documentation per ODNI/DoD, track authentication mechanisms, support ISSM/ISSO activities, manage changes and day-to-day cybersecurity operations, and interface with stakeholders to meet security objectives.

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.

Serves as the endpoint security subject-matter expert for support, Sales Engineering, and Customer Success. Diagnoses complex Windows and macOS endpoint issues, analyzes telemetry and logs, troubleshoots integrations with EDR, DLP, and MDM products, and provides prioritized customer recommendations. Partners with Engineering and QA on defect investigation and validation, maintains lab capabilities, and creates runbooks and documentation. The role also enables field teams to explain endpoint findings and improve customer outcomes.

Own Tribe’s corporate security, compliance, AI governance, and client-facing security programs. Lead SOC 2 and future certification efforts, enterprise security reviews, risk management, security controls, incident response, vendor risk, and Trust Center operations. Establish governance for AI agents, assistants, model providers, and subprocessors while partnering with engineering on architecture reviews, threat modeling, secure SDLC, data flows, and production readiness. Translate customer requirements into scalable security controls and operating processes.

Serve as the senior network-security subject-matter expert for support, sales engineering, and customer success. Review firewall rules, segmentation, controls, and product findings; troubleshoot integrations across enterprise network-security platforms; diagnose issues using packet captures, flow data, logs, and protocol behavior; and provide actionable root-cause guidance. Partner with Engineering and QA on defects and fixes, maintain network test capabilities, and author runbooks and documentation. Coach sales engineers and help harden the product through escalations and feedback.

Build and maintain cloud security improvements across AWS/GCP, Kubernetes, and CI/CD environments. Design detection and response capabilities using SIEM, EDR/MDR, cloud-native detections, and CNAPP tools. Investigate and respond to security incidents end to end, develop detection logic and playbooks, and create security tooling and automations using Python, Terraform, and infrastructure-as-code. The role also supports endpoint security and secure DevOps practices.

Own and mature Neumo’s Governance, Risk, and Compliance program, including SOC 1, SOC 2, and PCI DSS audits, risk registers, data governance, control automation, vendor assessments, and exception processes. Manage 1–2 direct reports, coordinate remediation, leverage AI/LLM tools, participate in incident management, and communicate compliance posture and risk trends to executives and the board.

Lead security assessments and controls across cloud-hosted applications, APIs, mobile (Flutter), CI/CD, and infrastructure. Implement and harden shared security tooling (dependency/secret/static/container scanning), review IAM and privileged access, support incident readiness and monitoring, evaluate SRE/recovery changes for security impact, and coordinate remediation with system owners. Establish security policies, automation, and review triggers to integrate practical controls into engineering workflows.

Own technical pre-sales for enterprise AI security: lead discovery, design demos, execute end-to-end POCs, partner with AEs, surface product feedback, and advise customers on complex technical decisions.

Lead product marketing for Keeper's cybersecurity products: define messaging, positioning and use cases; execute cross-functional launches; create content and SEO-optimized assets; coordinate webinars and partner co-marketing; gather customer feedback and conduct market and competitor research to drive awareness and pipeline.

The Senior Application Security Engineer ensures the security of systems and data by monitoring vulnerabilities, responding to incidents, and promoting security best practices within the organization.

Lead security initiatives by establishing secure development practices, conducting security reviews, as well as managing threat modeling and security assessments.

Lead Wikimedia Foundation’s product security strategy, prioritize security and privacy engineering initiatives, develop platform interventions against threats, strengthen organizational security culture, and communicate with Wikimedia communities. The role partners with cross-functional and departmental leaders on information security, represents the Foundation to volunteers, and applies AI-based tools to security analysis, code review, and software engineering. Prior product management experience is not required, but strong technical, security, communication, and online-community experience are important.

Supports client engagements focused on cryptographic risk, post-quantum readiness, encryption modernization, PKI, and key lifecycle management. Responsibilities include cryptographic asset discovery, inventory development, risk analysis, PKI and TLS assessments, PQC migration planning, remediation tracking, standards alignment, client workshops, documentation, and presenting findings to technical stakeholders.