Top Senior Cyber Security Jobs in Baltimore, MD

Lead customer security strategy and architecture using Microsoft security products. Assess security posture, design cloud-native solutions, remove technical blockers, author customer insights, and support complex enterprise deployments to accelerate adoption and secure cloud/hybrid environments.

Lead product security architecture and offensive testing initiatives. Responsibilities include threat modeling, architecture and design reviews, penetration testing across web applications, APIs, mobile clients, and cloud infrastructure, defining secure architecture patterns, reviewing code and trust boundaries, and providing actionable remediation guidance. The role partners with engineering teams, validates fixes, tracks emerging attack techniques, and communicates security risks to technical and non-technical stakeholders.

Leads ICAM network accreditation across unclassified and classified environments. Executes RMF activities in eMASS, manages security documentation, assesses compliance against NIST, DoD, DHA, STIG, and SRG requirements, and develops mitigation strategies. Supports penetration testing, audits, vulnerability management, incident response, contingency planning, system hardening, and continuous monitoring. Coordinates stakeholders, resolves compliance issues, and ensures security requirements are integrated throughout the system lifecycle.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Administers DoD and DC3 security programs covering personnel, information, system, COMSEC, physical, and industrial security. Manages classified material, clearance applications, DISS/NBIS/e-QIP processing, visitor certifications, facility inspections, access control, security briefings, document control, and SCIF-related procedures. Supports classified information protection, new-hire security packages, badges, foreign visitor registration, and compliance with federal and DoD security requirements.

Perform advanced threat hunting and deep analysis of attacker activity across on-premises and cloud environments, notify customers of imminent threats, build proof-of-concept hunting tools and automations, synthesize findings into mitigation recommendations, and drive product/tool improvements by transferring threat intelligence and investigation best practices to engineering and customer teams.

Leads day-to-day security operations for assigned systems, including security alert and log triage, vulnerability and compliance scanning, STIG validation, IAM access reviews, remediation coordination, and evidence maintenance. Validates corrective actions, tracks recurring findings and remediation aging, supports change-control assessments, and provides technical security posture inputs to ISSM and government reporting. The role requires TS/SCI with polygraph clearance and IAM Tier I certification within six months.

The Systems Engineer will identify, evaluate, triage, document, and support remediation of application-security vulnerabilities. Responsibilities include partnering with software-development teams, applying SAST, DAST, dependency and software-supply-chain security practices, integrating automated scanning into CI/CD workflows, and verifying remediation. The role may support GitLab, Artifactory, OpenShift, Kubernetes, containerized applications, and restricted or classified environments.

The Staff Security Engineer will lead technical security initiatives, own architectural security decisions, mentor engineers, and align teams on security strategy while ensuring system integrity and compliance.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

Leads AGS information security and data privacy strategy, governance, risk management, policy development, security certifications, incident response, customer security questionnaires, vendor and contract reviews, and regulatory compliance. Oversees security controls, audits, privacy initiatives, staff development, office security requirements, and coordination with parent-company information security teams. Advises executives and stakeholders on emerging threats, frameworks, business impact, and cost-effective security improvements.

Lead product security initiatives for cloud, AI, and enterprise platforms. Responsibilities include threat modeling, security architecture reviews, identifying systemic weaknesses, developing secure-by-design guidance and reference architectures, advising engineering and product leaders, leveraging AI and automation for scalable security assessments, investigating emerging attack paths, mentoring teams, and improving security review methodologies and tooling.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.

Own and evolve the application security program: embed secure SDLC practices, partner with engineering on design and code reviews, manage AppSec tooling (SAST/DAST/ASM/WAF/mobile), harden AWS deployments, integrate security into CI/CD, and lead vulnerability investigation and remediation efforts.

Lead security across applications, services, infrastructure, and developer workflows. Identify, assess, and mitigate risks; run secure code reviews, threat modeling, and architecture discussions; build automation and tooling to prevent issues; harden authentication and access control; investigate incidents and manage disclosures; partner with engineering teams to design secure-by-default APIs and deployments.

Own account-level security strategies for defense, aerospace, intelligence, and critical infrastructure customers. Lead security architecture, solution design, demonstrations, workshops, pilots, technical validations, and customer decision processes. Guide secure AI adoption and deployment of Microsoft security solutions, including Sentinel, Defender, Entra, Purview, Security Copilot, Microsoft 365, and Azure security services. Coordinate Microsoft and customer stakeholders, drive adoption, reduce risk, and deliver measurable security outcomes.

Lead a U.S.-based team of Security Operations Engineers and TPMs to design, build, and operationalize identity protections that reduce lateral-movement risk. Define strategy, apply AI and automation, partner with engineering and platform teams, deliver scalable controls, and drive measurable security outcomes, operational readiness, and executive reporting.

Administers Workday and multi-platform HR security, including role-based access, security configuration, access reviews, governance, audit support, and remediation. Evaluates routine and elevated access requests, enforces least-privilege standards, analyzes security and audit trends, maintains governance documentation, and recommends policy and process improvements. Collaborates with HR, IT, Legal, Compliance, and business stakeholders while protecting confidential employee data.

Lead RMF execution and authorization efforts for classified cloud and AI-integrated systems. Develop and maintain SSPs, SARs, POA&Ms, and continuous monitoring documentation; assess NIST, DoD, CNSS, FedRAMP, cloud, container, and AI security controls. Conduct architecture reviews, threat modeling, vulnerability assessments, risk analysis, and security control assessments while coordinating with architects, developers, DevSecOps teams, customers, and third-party assessors.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Designs and builds security orchestration and automation workflows for SOC processes, including alert triage, incident response, case management, integrations, scripting, error handling, and secure execution. The role translates client requirements into automation build plans, integrates SIEM, EDR/XDR, ticketing, threat intelligence, and email security tools, and may apply AI, cloud security, detection engineering, and automation-as-code practices.

Owns security operations and compliance for a multi-tenant GPUaaS platform. Maintains SOC 2 and SOC 3 programs, coordinates audits and penetration tests, manages IAM and security tooling, leads vulnerability management and incident response, supports customer security reviews and contracts, maintains policies, and drives security awareness and phishing programs.