Top Cyber Security Jobs in Baltimore, MD

Build and lead Motive’s globally distributed SOC, owning detection engineering, 24/7 incident response, threat hunting, intelligence, security analytics, endpoint protection, cloud and workload monitoring, and AI-driven automation. Establish operating models, coverage strategies, runbooks, telemetry platforms, incident command processes, and measurable detection and response capabilities across corporate and production environments.

Leads the secure design, engineering, and evolution of enterprise network infrastructure supporting DISA and defense missions. Architects Cisco networks, Palo Alto firewalls, zero-trust boundaries, and cross-domain solutions; guides RMF, STIG, and ATO compliance; conducts threat modeling and vulnerability assessments; establishes configuration standards; mentors engineering teams; leads architecture reviews, site surveys, deployments, and migration planning. The role requires active Top Secret clearance with SCI eligibility and up to 10% travel.

Supports cybersecurity, compliance, authorization, continuous monitoring, and operational readiness for mission-critical classified information systems. Responsibilities include serving as an Information Systems Security Approval Authority, enforcing security policies, conducting vulnerability and risk assessments, managing security documentation and accreditation packages, evaluating classified-data security solutions, supporting incident response, and overseeing configuration and security impact assessments.

Strengthen application security and DevSecOps practices by deploying and tuning SAST, DAST, and IAST tools, conducting threat modeling, integrating security controls into CI/CD pipelines, prioritizing vulnerability remediation, developing security automation, and establishing application security metrics and documentation across engineering teams.

Manages information system security programs, multiple System Security Plans, security policies, authorization activities, configuration management, vulnerability and risk assessments, and daily security operations for classified systems. Maintains operational security posture, evaluates security solutions, administers authentication mechanisms, controls system changes, and prepares Certification and Accreditation documentation in compliance with ODNI, DoD, and NIST RMF requirements.

Designs and evaluates secure information systems, networks, servers, desktops, and applications. Provides information assurance, system administration, vulnerability assessments, security planning, risk analysis, and risk management. Develops solutions for complex multi-enclave environments with varying classification requirements, supports trusted relationships between systems, and assists government customers with security and systems administration needs. Requires extensive ISSE experience, active CISSP certification, shiftwork availability, and an active TS/SCI clearance with polygraph.

Provides information assurance, systems administration, vulnerability assessment, security planning, risk analysis, and secure system design for enterprise network, server, desktop, and application environments. Develops security solutions, enforces trusted relationships across systems, and supports government information security programs. Requires shift and weekend support as needed, an active CASP+, SecurityX, or CISSP certification, and an active TS/SCI clearance with polygraph.

Manage and enhance Azure and AWS cloud security environments, including Microsoft Sentinel, Log Analytics, Azure Monitor, KQL analytics, automation rules, data connectors, and security data pipelines. Design log collection, normalization, enrichment, and routing architectures; develop custom REST API connectors; administer Microsoft security services; resolve complex cloud operations issues; and mentor team members. A Secret clearance and high school diploma or GED are required.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.

Configure, manage, and troubleshoot F5 LTM, load balancing, routing, Azure networking, and cybersecurity solutions supporting critical national security infrastructure. The role develops secure network architectures, resolves complex connectivity issues, implements security policies, tests email security components, and produces technical documentation. Collaboration with operational and security teams is required, along with supporting resilient modernization efforts and potentially DoD environments.

Supports information assurance and cybersecurity compliance for classified information systems and enclaves. Maintains security posture, enforces policies, performs vulnerability and risk assessments, manages security-related configuration changes, administers identity and authentication controls, and prepares System Security Plans, risk reports, and certification and accreditation documentation. Provides ISSO and ISSM support while ensuring compliance with ODNI, DoD, and NIST RMF requirements.

Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Designs, implements, and administers F5 BIG-IP solutions within DoD cloud and on-premises environments. Supports enterprise architecture modernization, troubleshoots issues with DoD clients and stakeholders, and applies cryptography, PKI, TLS, mTLS, and federal compliance standards. The role supports national security missions and requires Secret clearance.

Directs security operations for a complex Department of State contract. Manages security teams, develops and implements compliance procedures, investigates violations, prepares incident reports, mitigates risks, coordinates with government agencies, and ensures adherence to federal regulations and company policies. Requires strong leadership, communication, organizational, reporting, and strategic assessment skills, along with a bachelor's degree, extensive federal program management experience, U.S. citizenship, and an active Secret clearance.

Lead enterprise security architecture across cloud, application, infrastructure, identity, data, and third-party environments. Develop security principles, standards, patterns, and controls; review designs; conduct threat modeling and risk assessments; guide secure-by-design implementations; and advise technical and business stakeholders. The role also supports regulatory compliance, evaluates security technologies, and strengthens organizational security practices.

Oversee and execute information systems security activities for national security systems, including Risk Management Framework implementation and Assessment and Authorization processes. The role requires extensive information systems security experience, a bachelor's degree or equivalent experience, DoD 8570 IAM Level 1 certification, and an active TS/SCI clearance with polygraph.

Manage cybersecurity for facility-related IT and OT control systems supporting U.S. Government operations on Diego Garcia. Responsibilities include system administration, network and access control, vulnerability and threat reviews, incident reporting, audit logging, certification and accreditation support, backups, recovery procedures, compliance, and system maintenance. The role advises leadership, coordinates with stakeholders, maintains security documentation, and ensures reliable operation of critical services in a remote overseas environment.

Leads and matures the organization’s 24x7 security operations and cyber defense capabilities. Oversees SOC personnel, incident response, threat hunting, detection engineering, security automation, cloud and identity security, budgets, vendors, and operational metrics. Develops response procedures, manages major incidents and exercises, improves SIEM/EDR/SOAR effectiveness, implements AI-assisted security operations, supports compliance requirements, and builds workforce capability through recruiting, coaching, and succession planning.

Own enterprise IAM and PAM engineering across Entra ID, hybrid Active Directory, Microsoft 365, and privileged-access platforms. Manage identity lifecycle, federation, access governance, endpoint and mobile security, vulnerability management, and security configurations. Support incident response as a Tier 3 escalation point, translate compliance requirements into technical controls, automate workflows and evidence collection, and partner with IT, GRC, and CSIRT teams. Provide documentation, standards, mentorship, and technical guidance across cloud, SaaS, endpoint, and infrastructure security.

Part-time remote cybersecurity internship supporting presales, client engagement, technical writing, labs, certifications, and vendor solution research. Interns shadow consultants, build networking and security skills, practice explaining technical concepts, and gain exposure to SIEM, vulnerability scanning, endpoint security, cloud, and CTF platforms. The role requires foundational cybersecurity knowledge, self-directed learning, communication skills, and availability for 20–29 hours weekly during Central Time business hours. It may lead to full-time employment near Tulsa, Oklahoma.

Manages cybersecurity compliance and authorization for Air Force NIPR systems. Responsibilities include developing and maintaining system security plans, supporting RMF accreditation, conducting audits and inspections, managing POA&Ms, STIGs, IAVM compliance, continuous monitoring, FISMA requirements, security testing, and ATO activities. The role also provides tactical security guidance, assesses technology risks, and coordinates cybersecurity activities across multi-contractor teams and cloud and on-premises environments.

The VP of Security will lead Engine’s security strategy, engineering, operations, AI security, corporate IT, and enterprise trust. Key priorities include building an AI security function, securing agent identities and AI gateways, leading AppSec, SecOps, and CloudSec, strengthening identity and access controls, managing corporate IT, supporting SOC 2 and PCI controls, and representing security to executives, the board, and enterprise customers.

Perform manual application and API penetration testing, validate SAST, SCA, and DAST findings, assess cloud security across AWS, Azure, and GCP, and identify vulnerabilities and misconfigurations. Integrate security into CI/CD pipelines, develop scripting and command-line tooling, support remediation and secure coding, participate in architecture reviews, and report security metrics. The role also uses CSPM capabilities and AI-enabled development and security assistants.

Configures and optimizes DAST and API security scanning across applications, APIs, and CI/CD pipelines. Performs manual application penetration testing, validates SAST/SCA/DAST findings, assesses cloud security across AWS, Azure, and GCP, and develops scripting and CLI tooling. Partners with development, DevOps, and cloud teams to remediate vulnerabilities, improve secure coding, conduct architecture reviews, and track security metrics.

Design and ship product security improvements covering authentication, authorization, session and token handling, secrets management, third-party access, abuse detection, fraud prevention, and account takeover defense. Threat-model systems, remediate vulnerabilities, build secure developer tooling, and partner with Product, Engineering, and Trust & Safety. Mentor engineers and use AI-assisted development while balancing security controls with user experience.