Top Cyber Security Jobs in Baltimore, MD

Designs, implements, hardens, and manages secure AWS and Azure cloud environments for a Department of Defense customer. Responsibilities include applying RMF and STIG controls, supporting ATO activities, integrating vulnerability and security tools into CI/CD pipelines, securing Kubernetes, containers, networking, storage, IAM, and infrastructure as code, and maintaining logging, monitoring, observability, and alerting capabilities. The role also supports cloud migration, risk analysis, compliance documentation, and continuous security improvement.

Leads cybersecurity and mission-assurance activities for classified DoD environments. Owns RMF lifecycle management, eMASS artifacts, ATO sustainment, STIG validation, vulnerability scanning, POA&M remediation, IAVM compliance, and security-control evidence. Integrates cybersecurity into Agile and DevSecOps delivery across Azure IL6, Kubernetes, databases, APIs, and multi-enclave deployments. Advises technical and government stakeholders on security architecture, risks, metrics, and remediation priorities.

Designs and advances security architecture for Microsoft’s enterprise productivity environment. The role assesses evolving risk, analyzes systems and telemetry, develops reusable security patterns and tooling, partners with engineering teams on deployment, communicates risk and tradeoffs, and establishes priorities and roadmaps amid incomplete information.

Secure Microsoft Windows online services through offensive security, code and deployment reviews, penetration testing, vulnerability research, and scalable mitigation development. Build reusable security review tools and agents, demonstrate exploit impact, identify novel attack vectors, bypass security controls, and collaborate with product engineering teams to strengthen architecture and defenses.

Lead security reviews, code audits, penetration testing, vulnerability research, and mitigation efforts for Microsoft Windows services. Develop reusable security tools and agents, identify attack vectors and architectural risks, demonstrate exploit impact, and collaborate with product engineering teams to design scalable defenses and improve security investments.

Leads and develops Security Consultants while overseeing security submission triage, validation, escalations, and resolution. Provides application security expertise across web, network, cloud, or mobile domains; improves operations through metrics, automation, and process optimization; manages workloads; and partners with customers, leadership, and cross-functional teams. The role requires incident response and vulnerability management experience, technical mentorship, strong communication, and periodic travel for customer-facing and onsite events.

Lead application and infrastructure security for LiteLLM, focusing on Python code reviews, vulnerability remediation, threat modeling, secure development tooling, CI/CD and supply-chain security, cloud and IT controls, incident response, and LLM-specific attack testing. Partner closely with engineers to strengthen authentication, authorization, tenant isolation, secrets management, deployment security, monitoring, vulnerability management, and disclosure processes.

Leads Americas security architects in customer-facing engagements, enterprise security strategy, architecture reviews, escalations, and product feedback. Drives customer growth, security adoption, resilience, risk management, and AI transformation. Develops managers and technical leaders, builds high-performing teams, engages executive stakeholders, and provides technical thought leadership across Microsoft security solutions, cloud security, identity, data protection, SIEM, XDR, and security operations.

Lead architecture and hands-on development of Microsoft's AI Safety Platform, building observability, detection, investigation, threat-hunting, and distributed data-processing capabilities. Design attack detection infrastructure, correlate high-volume telemetry, apply AI security research, conduct security and privacy reviews, and partner across engineering, science, and incident response teams. Mentor engineers and provide technical leadership for complex AI security systems.

Analyzes exposure risks across databases and data platforms, including permissions, access models, configurations, storage, encryption, and service-to-service access. Investigates attack paths, validates risks using queries and logs, prioritizes issues by exploitability and business impact, and partners with database, cloud, platform, engineering, and cybersecurity teams on remediation and preventative controls.

Oversee internal IT infrastructure, cybersecurity operations, incident response, cloud systems, identity and access management, employee IT support, and technology vendors. Administer Microsoft 365, Azure, networking, firewalls, endpoints, backups, and SSO. Lead security assessments, vendor selection and negotiations, insurance compliance, documentation, infrastructure initiatives, and risk communication to leadership.

Leads enterprise SAP Basis, security, identity governance, platform operations, technical governance, and roadmap activities. Oversees S/4HANA, BTP, integrations, Cloud ALM, transport and release management, access controls, segregation of duties, audit compliance, analytics platforms, AMS providers, and production issue resolution. Partners with technical, cybersecurity, infrastructure, audit, implementation, and business stakeholders to maintain a secure, stable, scalable SAP environment.

The Senior Cloud Security Engineer identifies and mitigates cloud vulnerabilities, monitors environments for breaches, responds to incidents, assesses security weaknesses, and strengthens cloud security controls. The role develops risk management programs, conducts gap analyses, optimizes cloud security tools, improves monitoring and response capabilities, tracks emerging threats, and advises stakeholders on security policies and standards. The position supports the National Science Foundation and requires an active Public Trust clearance.

Hands-on senior security engineer responsible for building secure libraries, templates, guardrails, and developer tooling. Reviews architecture and code for authentication, authorization, and data exposure risks; conducts threat modeling; strengthens secrets, logging, and auditability; integrates security checks into CI/CD; supports vulnerability remediation, secure development practices, and incident reviews.

Develop and integrate network security software with firewalls, routers, switches, IPS, proxies, and other security devices. Responsibilities include gathering technical requirements, designing integrations, maintaining security-device test labs, assisting development and testing, creating test cases, troubleshooting complex integration issues, and documenting configurations. The role requires expertise in networking and security, packet analysis, major firewall vendors, virtualization, and regular expressions.

Analyze software and firmware code, design documents, and requirements to identify security vulnerabilities and risks. Support code reviews, testing, security assessments, documentation, and technical diagrams while helping maintain secure systems. The role requires foundational cybersecurity knowledge, programming experience, vulnerability identification skills, a STEM bachelor’s degree, and Secret clearance. Preferred experience includes high-assurance and NIST/RMF assessments, static or dynamic code scanning, secure coding, cryptography, networking protocols, Rust, TS/SCI clearance, and DoDI 8570 certification.

Leads cybersecurity governance, RMF implementation, authorization activities, continuous monitoring, vulnerability management, and DoD compliance for information systems and mission environments. Oversees SSPs, SARs, POA&Ms, security assessments, audits, risk mitigation, and authorization readiness. Coordinates with ISSOs, system owners, engineers, assessors, and government stakeholders while mentoring cybersecurity personnel. Evaluates security risks for cloud, AI, autonomous systems, prototypes, and emerging technologies.

Supports information systems security through the Risk Management Framework, compliance and configuration scanning, Authority to Operate processes, security controls, continuous monitoring, documentation, and privileged-user oversight. Collaborates with system administrators and system owners to maintain security compliance. Requires 10 years of experience with a bachelor’s degree or 14 years of experience, plus an active TS/SCI clearance with polygraph.

Designs and implements cloud security solutions for Microsoft Azure and Microsoft 365 customers. Leads security architecture discussions, Zero Trust adoption, technical evaluations, implementation planning, troubleshooting, and enterprise security strategy. Advises executives and technical stakeholders on identity and access management, threat protection, cloud security, information protection, and secure-by-design architectures. Collaborates with Microsoft engineering, product, and security teams to remove blockers and orchestrates technical resources to deliver customer outcomes.

Own Deepgram’s privacy operations, security compliance, audit evidence, control mapping, security questionnaires, policies, and public trust documentation. Lead DPIAs, data-flow mapping, DSAR and deletion workflows, vendor reviews, SOC 2, ISO 27001, and PCI DSS audits. Partner with Engineering, Legal, Research, and Sales Engineering to verify technical claims, automate evidence collection, maintain accurate documentation, and translate privacy and AI regulations into practical requirements and enablement.

Build and automate security controls across bare-metal Linux infrastructure and AWS. Responsibilities include host hardening, vulnerability and patch management, container and CI/CD security, penetration testing, detection and incident response, access and log reviews, compliance evidence automation, and software supply-chain security. The role also supports customer security work and applies AI tooling to security operations.

Conduct vulnerability research across operating systems, cloud platforms, and virtualization technologies through design and code review, fuzzing, variant analysis, and reverse engineering. Develop platform mitigations, security tooling, detection capabilities, and systemic protections. Partner with engineering teams to improve secure development practices, lead complex security initiatives, track emerging attack techniques, and mentor peers.

Conduct OT and ICS inventories at DoD facilities, assess network architecture and cybersecurity compliance, create topology and dataflow diagrams, oversee field teams, coordinate site visits, and recommend remediation aligned with RMF, DoD standards, and UFC requirements. The role requires extensive domestic and international travel, customer collaboration, project reporting, and technical assessment of critical building systems.

Conduct cybersecurity assessments and OT/ICS inventories at CONUS and OCONUS DoD facilities. Perform logical network scans, document topology and data flows, evaluate compliance with DoD cybersecurity standards and RMF requirements, identify vulnerabilities, and recommend remediation. The role also supports site-visit planning, stakeholder coordination, logistics, and closeout reporting.

Supports company IT and security operations in a fully remote environment. Responsibilities include helpdesk and endpoint support, authentication and access management, security and compliance automation, disaster recovery, vendor management, system migrations, security tooling, and cross-functional technical project planning. The role also helps maintain audit-ready processes and supports AWS security, identity providers, compliance platforms, scripting, and remote security tools.