Top Cyber Security Jobs in Baltimore, MD

Build and mature the application security program across the SDLC. Manage SAST, DAST, SCA, and IAST tooling; conduct penetration tests and vulnerability assessments; drive remediation; and embed Secure by Design practices. Partner with engineering on threat modeling, secure coding, architecture reviews, and CI/CD integration. Support HIPAA, NIST, and GDPR compliance through audits, reporting, documentation, policies, and cross-functional risk reduction initiatives.

Assesses and mitigates security risks across AI, machine learning, and Generative AI systems. Responsibilities include threat modeling, vulnerability assessment, security monitoring, incident response, governance, compliance, access controls, policy development, audit support, and advising engineering and business teams on secure AI development and responsible adoption.

Twelve-week summer internship supporting application, API, and AI security testing. Responsibilities include documenting findings, researching security technologies, improving metrics and dashboards, assisting with automation, preparing technical reports, and collaborating with security and technology teams. The role is open to students pursuing cybersecurity, information technology, computer science, or related degrees who graduate in December 2027 or later.

The role involves leading security initiatives, building security tools, conducting vulnerability assessments, and collaborating with teams to enhance cloud security and risk management.

Lead research to detect Windows threats and develop sensor/telemetry capabilities. Collaborate with engineering and product teams to implement detections, investigate false positives/negatives, apply AI to research workflows, produce technical documentation, and mentor others while promoting the company externally.

Leads cloud security architecture and implementation, focusing on data privacy, GDPR compliance, Kubernetes security, mTLS, RBAC, zero-trust networking, audit logging, threat modeling, and vulnerability assessments. Collaborates across teams, mentors junior engineers, documents security practices, monitors industry trends, and drives resilient, compliant cloud infrastructure.

Build Ent’s endpoint data-protection layer for classifying sensitive data, tracing provenance, and enforcing egress policies across devices, applications, networks, removable media, browsers, and AI tools. Develop cross-platform interception and content inspection capabilities, integrate on-device language models, optimize performance, produce forensic evidence, investigate compatibility issues, and improve detection precision for enterprise customers.

Deliver cybersecurity assessments, architecture reviews, maturity evaluations, security roadmaps, and implementation guidance for enterprise clients. Assess on-premises, cloud, hybrid, identity, OT, and ICS environments; identify risks and security gaps; produce reports; and present recommendations to technical and executive stakeholders. Support incident response and post-incident improvements, collaborate with engagement managers and specialists, contribute to consulting methodologies, and stay current on threats and security best practices. Travel is approximately 20%.

Leads day-to-day security operations for assigned systems, including security alert and log triage, vulnerability and compliance scanning, STIG validation, IAM access reviews, remediation coordination, and evidence maintenance. Validates corrective actions, tracks recurring findings and remediation aging, supports change-control assessments, and provides technical security posture inputs to ISSM and government reporting. The role requires TS/SCI with polygraph clearance and IAM Tier I certification within six months.

The Systems Engineer will identify, evaluate, triage, document, and support remediation of application-security vulnerabilities. Responsibilities include partnering with software-development teams, applying SAST, DAST, dependency and software-supply-chain security practices, integrating automated scanning into CI/CD workflows, and verifying remediation. The role may support GitLab, Artifactory, OpenShift, Kubernetes, containerized applications, and restricted or classified environments.

Analyzes software code and integrates security practices throughout the software development lifecycle. Develops software and scripts, performs testing, documents defects and security findings, reviews design documents and requirements, and applies secure development standards. The role uses static and dynamic assessment tools, supports DevSecOps and compliance processes, and may guide junior employees. A Secret clearance and high school diploma or GED are required.

Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.

AeroVironment is recruiting for upcoming five-year cybersecurity contract opportunities across database engineering, information systems security, software, systems, cloud, testing, administration, web development, and data science. Team members will support defensive cyber operations, critical infrastructure protection, threat detection, containment, mitigation, systems integration, analytics, information sharing, malware analysis, configuration management, and training development. Positions begin in late 2026 or early 2027 and may require U.S. person status or U.S. citizenship under ITAR and contract requirements.

Designs, implements, and maintains enterprise IAM solutions across hybrid on-premises and cloud environments. The role drives Zero Trust modernization, identity automation, access governance, privileged access controls, threat monitoring, and automated response. Responsibilities include evaluating security technologies, mitigating identity risks, supporting compliance and audit readiness, and establishing security standards. The engineer collaborates with infrastructure, application, and security teams and participates in rotational on-call, weekend, and holiday support.

Design and build cloud security tooling, automation, and AI-enabled threat-hunting capabilities. Perform threat modeling, incident response, security research, architecture reviews, and detection engineering. Develop SIEM and SOAR integrations, automate security processes, address AI-related threats using MITRE ATLAS, and contribute to multi-year security roadmaps. Collaborate across engineering and business teams, prioritize security improvements, support on-call operations, and mentor team members.

The Chief Information Security Officer leads DLA Piper’s enterprise cybersecurity strategy, governance, risk management, incident response, data protection, third-party security, security awareness, and operational resilience programs. The role advises executives and governance bodies, oversees security controls and emerging technology risk, translates technical risks into business and legal impacts, and builds a high-performing global information security organization. The CISO also manages security policies, audits, regulatory and client obligations, vendor oversight, budgets, talent development, and executive communications.

Own strategic post-sales relationships with enterprise customers, advising them on AI security and governance. Lead discovery, define measurable outcomes, drive adoption, support retention and expansion, and coordinate Product, Engineering, Security, Support, and operationalization teams. Translate CISO-level strategy, GRC concerns, business objectives, and technical requirements into practical solution strategies while identifying new AI security use cases and growth opportunities.

Provides information systems security engineering for complex, geographically distributed systems. Responsibilities include designing security architectures, validating requirements, assessing and mitigating risks, applying the Risk Management Framework, conducting vulnerability and security testing, auditing configurations, supporting certification and continuous monitoring, enforcing security policies, and collaborating with engineering, development, integration, test, program management, and customer teams.

Lead AWS GovCloud security engineering and accreditation for pre-production modernization environments. Design secure cloud architectures, landing zones, IAM controls, network segmentation, infrastructure automation, containers, and CI/CD deployments. Own DoD RMF, IATT-C, and ATO packages, security controls, POA&Ms, vulnerability remediation, continuous monitoring, and cybersecurity assessments. Provide cloud and cybersecurity guidance for modernization, migration, data transition, Zero Trust, and ICAM initiatives while advising program leadership.

Secure Temporal’s development pipeline, product, and customer execution environments. Partner with engineering teams on secure architecture, threat modeling, risk assessments, code and software supply-chain security, vulnerability triage, Kubernetes hardening, multi-tenant isolation, and responsible AI security. Participate in on-call rotations and help establish actionable security policies and practices across the organization.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Leads cybersecurity solutions engineering for government and education customers across managed security, network monitoring, cloud security, and related services. Provides technical discovery, solution design, demonstrations, proofs of concept, onboarding, deployment guidance, escalations, and post-sales support. Partners with sales and technical account teams, mentors engineers, develops enablement materials, informs product strategy, identifies expansion opportunities, and manages customer activity in Salesforce.

Leads Trace3’s Security Solutions practice, developing go-to-market strategy, security offerings, AI-enabled services, presales execution, partner relationships, and complex client engagements. Owns revenue, gross profit, forecasting, pipeline, and operating-plan performance. Advises executive leadership, supports assessments and proof-of-concepts, communicates with technical and executive audiences, and leads, coaches, and develops practice teams.

Build Tempo’s product security program from the ground up, including application, infrastructure, endpoint, and supply-chain security tooling. Identify and remediate production and development-pipeline risks, lead incident response through post-mortems, conduct secure design reviews, and establish scalable security practices. The role requires hands-on coding, deep incident-response expertise, strong infrastructure and application-security knowledge, and autonomous collaboration with engineering.

Supports senior ISSOs and the ISSM in implementing and enforcing information systems security policies for systems processing classified information. Evaluates security solutions, maintains operational information assurance posture, manages configuration records for hardware and software, and prepares security documentation. The role requires an active TS/SCI with Polygraph clearance, IAM Level 1 certification, ten years of ISSO experience, relevant technical knowledge, and a bachelor's degree or equivalent additional experience.