Top Cyber Security Jobs in Baltimore, MD

Leads OT/ICS and enterprise cybersecurity architecture for a federal critical-infrastructure modernization program. Responsibilities include requirements development, NERC CIP traceability, market research, RFI and vendor evaluation, lab testing, alternatives analysis, product recommendations, and executive briefings. The role bridges utility operational technology and IT security, covering access control, monitoring, asset management, vulnerability management, SCADA environments, and industrial systems. It is fully remote in the U.S. with up to 25% domestic travel and requires Public Trust eligibility.

Secure Wiz’s products, CI/CD systems, and production cloud infrastructure through threat modeling, security reviews, vulnerability management, detection and response, cloud and Kubernetes security baselines, policy-as-code, and automation. Partner with engineering, DevOps, operations, and Federal teams to implement scalable security controls, remediate risks, support FedRAMP requirements, and promote secure-by-design development practices.

Lead Zeta’s AI-native Application Security function by defining strategy, building the team, embedding security agents and policy-as-code into IDEs, pull requests, CI/CD, and AI/ML pipelines, and overseeing continuous threat modeling and validation. Own security for AI systems, models, prompts, and agents, including adversarial testing for prompt injection, model abuse, and data leakage. Mentor engineers and promote automated, secure software development practices.

Designs, implements, and manages AWS cloud security policies, architecture, and technologies. The role oversees firewalls, DLP, vulnerability scanning, monitoring, logging, IAM, incident response, compliance, and remediation. It provides security guidance for AWS solutions, supports migrations of mission-critical applications, researches new technologies, documents standards, presents to varied audiences, and mentors less experienced engineers. The position requires strong AWS expertise, infrastructure-as-code proficiency, knowledge of regulated healthcare environments, and experience securing highly available cloud and serverless architectures.

Lead the development of SailPoint’s cybersecurity architecture practice. Create holistic and reference architectures, define security domains, develop strategic roadmaps, identify security gaps, and translate architectural concepts into viable engineering solutions. Partner with leadership to prioritize initiatives, secure funding, and operationalize the practice. The role also includes hands-on security projects, cross-functional collaboration, stakeholder influence, and mentoring architects and engineers across cloud, application, identity, and network security.

Oversee application security scanning, vulnerability remediation, and security-related release readiness while developing and maintaining full-stack Java web applications. Coordinate with IRS personnel, create remediation milestones, lead technical meetings, troubleshoot environments, review code, perform testing, and document technical solutions. The role requires extensive J2EE development, security tooling, CI/CD, OpenShift, mainframe integration, and vulnerability management experience in a federal environment.

Supports cloud security operations across Azure and AWS, including posture management, identity and access controls, architecture reviews, network security, DevSecOps, infrastructure-as-code reviews, data protection, monitoring, incident response, compliance assessments, and leadership reporting. Coordinates remediation with infrastructure, application development, and information security teams while maintaining cloud security policies, dashboards, documentation, and audit evidence.

Implements and maintains security technologies across endpoint, network, cloud, server, and mobile environments. Monitors alerts, investigates incidents, performs vulnerability assessments, develops detection rules, hardens systems, supports identity and access controls, automates security tasks, and coordinates remediation. The role also supports audits, security reviews, documentation, reporting, and continuous improvement while collaborating with IT and security teams.

Supports cybersecurity risk management and authorization for the VA.gov Platform. Assesses NIST security controls, performs gap and risk analyses, maintains SSPs, POA&Ms, and authorization evidence, and translates deficiencies into engineering remediation. The role supports ATO/cATO readiness, OSCAL automation, threat modeling, secure design reviews, stakeholder coordination, incident response, and continuous synchronization between technical changes and security documentation.

Build and operate infrastructure security platforms centered on workload identity, service-to-service authentication, authorization, and short-lived credentials. Replace static secrets with identity-based systems, develop identity-authenticated proxies and APIs, and unify authorization policy management. Partner with platform and application teams to drive adoption, migrate legacy systems, and ensure reliable production infrastructure with strong developer experience.

Lead secure design and code reviews, conduct penetration testing and code audits, build secure-by-default systems, improve security tooling and vulnerability management, operate responsible disclosure programs, remediate production vulnerabilities, and address customer security concerns. The role partners closely with engineering teams and requires strong coding, risk assessment, offensive security, and security communication skills.

Provides senior cybersecurity and information assurance support for classified IC and DoD systems. Maintains security posture, conducts vulnerability and risk assessments, supports authorization activities, evaluates security controls, manages configuration changes, develops System Security Plans, and ensures compliance with applicable policies and frameworks. Requires extensive ISSO experience, collaboration with technical teams, DoD 8140.03 compliance, and an active TS/SCI clearance with appropriate polygraph.

Leads security engineering strategy, operations, and a team of information security professionals. Oversees security monitoring, detection, incident response, audits, penetration testing, risk management, compliance, and implementation of SIEM, endpoint protection, and threat intelligence technologies. Develops security policies and standards, manages major incident investigations, and partners with leadership to strengthen organizational resilience across cloud and hybrid environments.

Build and own the company’s enterprise risk management and information security functions. Lead SOC 2 and ISO 27001 compliance, security policies, ISMS development, incident response, business continuity and disaster recovery exercises, vendor and audit management, partner security due diligence, and security awareness training. Collaborate with engineering, product, legal, business development, and operations to maintain an audit-ready security posture.

Owns broad product and operational security responsibilities, including identity and access management, threat modeling, code review, fuzzing, bug bounty operations, AI security research, software supply chain monitoring, penetration test coordination, and compliance evidence. The role requires a strong software engineering background, product security expertise, security tooling development, systems programming experience, and familiarity with web3 or DeFi. It is remote-first and emphasizes autonomy, documentation, and high ownership.

Lead corporate endpoint security architecture with a focus on macOS, designing secure-by-default controls, automation, patching, software distribution, and security baselines across macOS, iOS, Windows, and Linux. Manage configurations through Terraform, GitOps, version control, CI pipelines, and automated rollouts. Partner with IT and security teams to improve telemetry, detection, response, auditability, and operational efficiency. Mentor engineers and serve as a senior escalation point for complex endpoint security issues in a fully remote environment.

Leads RapidFort’s cybersecurity, risk, compliance, and assurance programs. Owns the ISO 27001 ISMS, SOC 2 Type 2, FedRAMP authorization, and CMMC Level 2 programs; directs security monitoring, incident response, vulnerability management, identity governance, penetration testing, vendor risk, and security architecture. Reports risk to executive leadership and the Audit Committee, manages customer security assurance, oversees a compliance specialist, and serves as incident commander for declared security events.

Build backend services and distributed systems for a cybersecurity and software supply chain security platform. Develop scalable APIs, data pipelines, and platform components handling vulnerability, container, package, runtime, and SBOM data. Work across Linux, Kubernetes, containers, and cloud environments while solving concurrency, performance, reliability, and distributed processing challenges. Own projects from design through deployment, participate in architecture discussions, review code, and collaborate with security researchers and product teams.

Support program-level classified security: develop and administer industrial security programs (personnel, physical, OPSEC), ensure regulatory compliance (DoD/NISPOM/ICD), conduct training, investigate violations, and maintain customer relationships. Requires active Top Secret clearance and US citizenship; occasional travel (~10%).

Supports DIB cybersecurity operations through process engineering, technical research, data analysis, and leadership reporting. Develops responses to high-priority data calls, tracks operational plans and capability gaps, reviews systems engineering documentation, and guides process governance and improvement initiatives. The role also requires documenting processes, managing documentation in SharePoint and Confluence, assessing requirements, and collaborating with government and contractor technical teams.

Performs security assessments and engineering for AI/ML systems, large-scale compute clusters, AWS Cloud infrastructure, networks, and enclave environments. Designs and integrates information assurance architectures, identifies and mitigates security risks, validates security requirements, supports certification and accreditation, and enforces trusted relationships and government security policies. Collaborates with engineering teams and government customers on secure system development and operational deployment.

Designs and governs machine-readable cyber terrain baselines for USPACOM across the PACOM area of responsibility. Responsibilities include defining schemas and ontologies, integrating field and partner data, establishing governance and maintenance procedures, managing classified TS/SCI data ingestion, and transitioning baseline ownership to subordinate components.

Administers DoD and DC3 security programs, including personnel, information, physical, COMSEC, industrial, and classified-material security. Processes clearance actions through DISS and NBIS, manages visitor certifications, badges, access, document control, security briefings, facility inspections, and SCIF-related procedures. Supports compliance with DoD policies, classified information protection, foreign visitor registration, and security program improvements.

The Senior Information Systems Security Officer supports DoD programs by managing information security requirements, applying security frameworks and regulations, operating security tools and repositories, and ensuring compliance with organizational and federal standards. The role requires extensive ISSO experience, knowledge of server and information assurance technologies, networking protocols, DoD 8140.03 compliance, and an active TS/SCI clearance with polygraph.

Responsible for information systems security architecture, engineering, accreditation, and continuous monitoring for ICAM projects. Develops and maintains security plans and RMF artifacts, supports IATT and ATO processes, reviews vulnerabilities and audit logs, coordinates patching, enforces security policies, tracks authorization status, and supports PRIVAC requests. Requires extensive ISSO experience, TS/SCI with polygraph clearance, IAM Level 1 certification, a technical bachelor’s degree or equivalent experience, and relevant cybersecurity certifications.