Top Cyber Security Jobs in Baltimore, MD

Lead embedded systems security for sensor and mission solutions: ensure compliance with government policies (JSIG, DAAPM), develop/validate cybersecurity requirements, support ST&E, perform reverse engineering/anti-tamper analysis, manage A&A documentation and POA&Ms, guide exportability and international requirements, and drive secure architecture, testing, and policy alignment across hardware and software lifecycles.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Support RMF processes and system security engineering for government systems. Collaborate with stakeholders to complete security documentation, perform audits, apply NIST 800-53 Rev.5 controls, implement defense-in-depth strategies, ensure STE/STN compliance, and assist in system authorization and assessments.

Maintain and strengthen the security posture of mission systems using RMF and NIST SP 800-53. Manage 8–10 System Security Plans, support continuous monitoring, perform audits, assess controls, assist with reaccreditation, and ensure compliance with STE/STN requirements.

Support RMF lifecycle for classified systems: develop A&A/ATO packages, implement and validate security controls, perform vulnerability and compliance scanning, manage STIG implementation and patch validation, produce RMF artifacts, and participate in continuous monitoring and risk analysis.

Support the full RMF lifecycle for classified systems: develop and maintain authorization packages, conduct security control assessments, track vulnerabilities and remediation, support continuous monitoring, review configurations and scans, collaborate with system owners and administrators, and participate in audits to maintain ATOs and system security.

Perform verification and validation of security compliance for low-to-moderately complex information systems. Analyze design and configuration documentation, identify non-compliance and mitigations, conduct on-site evaluations, perform vulnerability assessments and coordinate penetration testing, and produce comprehensive certification/verification reports.

Lead and enforce information assurance for mission-critical systems: monitor IDS/IPS, perform audits and vulnerability assessments, maintain SSP and configuration management, support accreditation, develop and operate security tools, communicate incidents, and deliver security training.

Support and enforce information systems security policies and procedures. Monitor IDS, conduct audits and vulnerability assessments, develop and operate firewalls/antivirus/deployment tools, research and implement security solutions, communicate intrusion alerts, and run security awareness programs.

Design, integrate, test, operate, and maintain LAN/WAN network security for SIGINT systems. Configure switches, routers, firewalls, encryption devices, and authentication systems; troubleshoot complex network/security issues; support UNIX/Linux/Windows environments and connectivity (copper/fiber). Provide occasional after-hours operational support.

Manage and maintain information system security posture for classified systems. Support implementation and enforcement of security policies, perform vulnerability/risk assessments, manage configuration and changes, prepare SSPs/C&A packages and SRTMs, and support NIST RMF authorization activities for systems processing classified information.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Design, evaluate, and secure complex LAN/WAN and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model and test solutions, perform MTBF/MTTR analyses, analyze vulnerabilities, evaluate architectures, research COTS/GOTS, optimize wired and wireless networks, develop security documentation, and ensure compliance with government security requirements.

Support IC missions by implementing and enforcing information systems security policies and NIST RMF controls. Prepare and maintain SSPs, SRTMs, C&A packages; perform vulnerability and risk assessments; manage configuration and day-to-day security operations; evaluate security solutions for classified processing; administer authentication mechanisms and maintain operational IA posture.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Support and manage information system security posture: implement/enforce policies, perform vulnerability and risk assessments, manage configuration and changes, prepare SSPs/C&A/SRTMs, support NIST RMF authorization, evaluate security solutions for classified processing, oversee contractor ISSOs, and liaise with stakeholders.

Support and manage information assurance for systems/enclaves: implement and enforce security policies, perform RMF-based authorization activities, conduct vulnerability/risk assessments, manage configuration and changes, prepare SSP/C&A/SRTM documentation, evaluate security solutions for classified processing, and provide day-to-day security operations and oversight.

Support DoD network modernization by monitoring networks, collecting and analyzing CND/IA tool data, performing vulnerability assessments, incident response, risk analysis, and generating certification/accreditation reports. Ensure compliance using STIG/eMASS and communicate findings to stakeholders.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Support and coordinate IT security programs and policies. Provide information assurance and security guidance to developers, administrators, and owners. Assess security impacts of changes, maintain SSPs, conduct security assessments for A&A, support AO/DAO/SCA/ISSM to obtain and maintain ATOs, respond to security tickets daily, and use COTS/GOTS tools to report system status and compliance.

Serve as security engineering representative on teams to design, implement, evaluate, and integrate IA architectures, secure networking, computing, and enclave environments. Apply IA policy and procedures, support security planning, assessment, risk analysis/management, identify data handling requirements, and enforce trusted relationships with external systems while interacting with customers and project teams.