Top Senior Cyber Security Jobs in Baltimore, MD

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.

Serve as the primary ISSO for enterprise infrastructure across classified domains: manage security lifecycle, maintain ATOs, update authorization packages, run continuous monitoring, develop POA&Ms and waivers, ensure STIG and NIST/FISMA compliance, audit logs, coordinate remediation and secure decommissioning, and collaborate with engineering and system owners to sustain secure operations.

Perform IA/security assessments and risk analysis for DoD cloud (MS Azure) systems, support Authorization/Accreditation, design and implement IA architecture and controls, conduct threat hunting and incident detection/response, analyze logs/traffic/telemetry, and brief senior leadership on findings and mitigations.

Lead technical PKI and cryptography engineering for DoD environments: provide Tier III PKI/PKE support, design and deploy CA architecture across NIPR/SIPR, drive migration to stronger algorithms and PQC, evaluate COTS PKI solutions, maintain STIG/RMF compliance, support Zero Trust, and provide escalation/resolution and stakeholder consultation.

Designs, implements, and manages policies and procedures for database and software security. Writes and audits Configuration Management (CM) plans and software change procedures; performs design reviews, configuration audits, and baseline status accounting. Implements CM processes in DevSecOps/Agile environments using tools like JIRA, Puppet, Confluence, and GitHub. Mentors team members. TS/SCI required.

Design, implement, and operate F5 LTM load-balancing and secure networking solutions (BGP, IPv6, HA). Troubleshoot using tmsh/bash/imish, manage upgrades/patching, support Azure virtual networking, partner with security teams, produce technical documentation, and secure email components to support DoD mission-critical infrastructure.

Lead and grow an Application Security practice: define standards, assess application security posture, advise on secure-by-design architectures, integrate AI scanning, lead teams of engineers/architects, drive remediation, and support business development and sales for application security services.

Design, build, and maintain defensive security architectures and automated controls. Administer Elastic Stack for detection, logging, and analytics; perform threat hunting, vulnerability assessments, incident response, and forensics; implement IAM, IDS/IPS, and enterprise security standards; collaborate across teams to improve detection, alerting, and event correlation.

Lead assessment and implementation of system security controls for national security systems. Manage enterprise cryptographic inventory compliance, engage stakeholders, produce leadership reports, and implement detection, vulnerability, and event-correlation controls. Mentor teammates and support CISO organization to improve security posture and compliance.

Serve as an ISSO performing RMF accreditation tasks, risk and vulnerability assessments, STIG mapping, POA&M development, ACAS/HBSS management, eMASS artifact uploads, incident reporting, and security briefings to leadership. Advise on mitigation, implement cybersecurity controls, and leverage analytics to detect advanced threats.

Lead design and implementation of data-centric security architecture and protection solutions. Conduct architecture reviews, threat modeling, risk assessments, and security control evaluations. Integrate and apply data security platforms, encryption, key management, and ELK-based monitoring while collaborating with analysts, engineers, and stakeholders to protect data across its lifecycle.

As a Security Architect, you will build secure agent runtimes and systems, ensuring robust security capabilities in agentic AI solutions while conducting security evaluations.

Owner of Vannevar's authentication and authorization platform: build tenant-isolated auth systems, self-service user/group/permission admin UI, tooling to visualize and validate access, feature-flag and platform management interfaces, and shared authorization capabilities across products.

Lead and mature Affirm's third-party security risk program by designing controls, automating GRC workflows, evaluating third-party/cloud security, building integrations and dashboards, and advising stakeholders. Drive automation using Python and agentic coding tools, operate orchestration across systems, manage a portfolio of risk reviews, and establish metrics, processes, and reporting to scale security risk management.

Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.

Lead and grow a Security Platform engineering team to design and operate centralized identity and access services (IdP integrations, SSO, authorization frameworks). Define roadmap, partner cross-functionally, and drive adoption of secure-by-default access controls across products.

This role involves owning the security architecture for AI platforms on GCP, designing guardrails, and integrating security into CI/CD pipelines. Candidates should have extensive experience in cloud security, specifically with GCP services, Kubernetes security, and AI/ML security practices.

Lead and mentor a small IT security engineering team to deploy and operate enterprise-grade Zero Trust security across networks, endpoints, applications, and cloud. Drive Customer Zero initiatives, manage cross-functional security projects, optimize policies (SSL decryption, segmentation, access control), and serve as an internal subject-matter expert.

Serve as a senior security solution architect advising enterprise customers on modern, cloud-native Microsoft security architectures. Design and validate solutions using Microsoft security products, remove technical blockers, act as SME on complex deployments, gather customer insights to influence product roadmap and map solutions to business outcomes, and support large-scale security and compliance projects.

Lead alliance and technical product marketing: build joint positioning and go-to-market enablement with strategic partners, own competitive intelligence and technical differentiation, create content and launch programs that drive pipeline and inform product and GTM strategy.

Lead design and implementation of security controls, drive audit readiness across multiple frameworks (FedRAMP, SOC2, ISO, CMMC), gather audit evidence, liaise with auditors and government officials, translate compliance into practical controls with engineering/product teams, draft policies, automate compliance processes, and represent the program in customer security reviews.

Lead design and governance of security architecture across cloud and on‑prem environments. Implement cloud and infrastructure controls, drive vulnerability management, perform risk assessments and threat modeling, support incident response and compliance, and provide security guidance to engineering teams to improve enterprise security posture.

Design and execute integration and security-focused test plans for PAM and Keeper Secrets Manager. Validate integrations across cloud providers, IAM, CI/CD, and OS/databases; perform reliability and security testing; analyze logs and defects; contribute to automation and collaborate with engineering, product, and security teams to ensure reliability and compliance.

Design and build secure native iOS applications using Swift/Objective-C and C/C++. Implement intuitive UIs with SwiftUI/UIKit, apply MVVM/Clean Architecture, and ensure secure networking, cryptography, Keychain use, and hardened release pipelines. Collaborate with security experts and integrate automated security scans into CI/CD.