Top Cyber Security Jobs in Baltimore, MD

Implements, supports, and optimizes SIEM, SOAR, security telemetry, and data pipelines. Responsibilities include log onboarding, parsing, normalization, detection rule development and tuning, data quality validation, troubleshooting, automation, architecture review support, documentation, and continuous improvement. The engineer works in a client-facing consulting environment under senior guidance and supports multiple security operations platforms and environments.

Maintain and improve cybersecurity across Azure Cloud and on-premises environments. Monitor and tune security alerts, manage vulnerability scanning and remediation, conduct threat intelligence analysis, support incident response, perform risk assessments and threat modeling, and implement security controls and configurations. The role also supports regulatory compliance, security documentation, cross-functional initiatives, and on-call response to security alerts.

Support program-level classified security: develop and administer industrial security programs (personnel, physical, OPSEC), ensure regulatory compliance (DoD/NISPOM/ICD), conduct training, investigate violations, and maintain customer relationships. Requires active Top Secret clearance and US citizenship; occasional travel (~10%).

Lead embedded systems security for sensor and mission solutions: ensure compliance with government policies (JSIG, DAAPM), develop/validate cybersecurity requirements, support ST&E, perform reverse engineering/anti-tamper analysis, manage A&A documentation and POA&Ms, guide exportability and international requirements, and drive secure architecture, testing, and policy alignment across hardware and software lifecycles.

Support DoD security operations by monitoring and analyzing logs, network traffic, and user behavior; using SIEM, IDS/IPS, and firewalls to detect incidents; conducting investigations and coordinating incident response; maintaining threat intelligence and documentation; and developing enterprise security policies and procedures to support full-spectrum cyber operations for Joint Staff/CNMF/CMT missions.

Lead adoption and implementation for enterprise customers, drive platform configuration and operationalization, act as customer advocate across teams, recommend security improvements, manage integrations, and ensure value realization while building trusted technical relationships.

Support RMF processes and system security engineering for government systems. Collaborate with stakeholders to complete security documentation, perform audits, apply NIST 800-53 Rev.5 controls, implement defense-in-depth strategies, ensure STE/STN compliance, and assist in system authorization and assessments.

Maintain and strengthen the security posture of mission systems using RMF and NIST SP 800-53. Manage 8–10 System Security Plans, support continuous monitoring, perform audits, assess controls, assist with reaccreditation, and ensure compliance with STE/STN requirements.

Lead SecOps functions including threat detection, alert triage, incident response, vulnerability and configuration management, endpoint and network security operations, threat hunting, malware analysis, vendor management, and mentoring a team of security analysts to improve detection and response capabilities.

Support RMF lifecycle for classified systems: develop A&A/ATO packages, implement and validate security controls, perform vulnerability and compliance scanning, manage STIG implementation and patch validation, produce RMF artifacts, and participate in continuous monitoring and risk analysis.

Support the full RMF lifecycle for classified systems: develop and maintain authorization packages, conduct security control assessments, track vulnerabilities and remediation, support continuous monitoring, review configurations and scans, collaborate with system owners and administrators, and participate in audits to maintain ATOs and system security.

Perform verification and validation of security compliance for low-to-moderately complex information systems. Analyze design and configuration documentation, identify non-compliance and mitigations, conduct on-site evaluations, perform vulnerability assessments and coordinate penetration testing, and produce comprehensive certification/verification reports.

Lead cybersecurity for DoD/IC systems across the full lifecycle: implement RMF, drive authorization, perform vulnerability and risk assessments, manage continuous monitoring, author security artifacts (SSPs, RARs, POA&Ms), and integrate controls and remediation in classified environments to maintain accreditation and operational readiness.

Lead and enforce information assurance for mission-critical systems: monitor IDS/IPS, perform audits and vulnerability assessments, maintain SSP and configuration management, support accreditation, develop and operate security tools, communicate incidents, and deliver security training.

Support and enforce information systems security policies and procedures. Monitor IDS, conduct audits and vulnerability assessments, develop and operate firewalls/antivirus/deployment tools, research and implement security solutions, communicate intrusion alerts, and run security awareness programs.

Design, integrate, test, operate, and maintain LAN/WAN network security for SIGINT systems. Configure switches, routers, firewalls, encryption devices, and authentication systems; troubleshoot complex network/security issues; support UNIX/Linux/Windows environments and connectivity (copper/fiber). Provide occasional after-hours operational support.

Senior ISSO responsible for implementing and enforcing information system security policies, maintaining operational IA posture, performing vulnerability and risk assessments, managing configuration and change control, preparing C&A/SSP/SRTM documentation, and supporting NIST RMF security authorization for systems processing classified information.

Manage and maintain information system security posture for classified systems. Support implementation and enforcement of security policies, perform vulnerability/risk assessments, manage configuration and changes, prepare SSPs/C&A packages and SRTMs, and support NIST RMF authorization activities for systems processing classified information.

Lead design, implementation, migration, and support of secure network environments. Configure, deploy, monitor, and troubleshoot firewalls, VPNs, routing, and security platforms. Produce design documentation, manage implementations, coordinate teams, perform threat remediation, and report project status.

Design and implement data-driven automation for security authorization and continuous RMF monitoring. Build ETL pipelines, process and validate security data, detect anomalies, develop predictive models and dashboards, and support data engineering for scalable security assessments.

Design, deploy, troubleshoot, and optimize LAN/WAN and secure network topologies. Configure VPNs, firewalls, NAT, load-balancing, and monitoring tools. Collaborate with systems engineers, resolve complex network issues, and support 24/7 operations including hardware deployment worldwide.

Perform technical security assessments and design secure networking, computing, and enclave environments. Serve as ISSE on engineering teams to implement IA architectures, support risk analysis and management, enforce trusted relationships, identify security requirements for government data, and recommend system-level mitigation strategies.

Design, evaluate, and secure complex LAN/WAN wired and wireless networks. Conduct site surveys and hardware installations, perform acceptance testing and throughput analyses, develop test harnesses, identify vulnerabilities, and produce system security documentation. Recommend hardware specifications, evaluate COTS/GOTS/GFE, and ensure systems meet government security requirements.

Design, evaluate, and secure complex network and SIGINT hardware systems. Conduct onsite assessments, lead hardware installations, model solutions, create test interfaces, perform MTBF/MTTR analyses, evaluate LAN/WAN and wired/wireless networks, research COTS/GOTS, produce security documentation, and deliver vulnerability assessments and actionable recommendations.

Lead architecture, integration, deployment, and optimization of enterprise EDR (MDE, Trellix HX) across hybrid environments. Develop engineering and deployment plans, optimize agent configurations, monitor endpoint health, convert threat intelligence into IOCs using KQL and YARA, advise stakeholders, support SOC forensics, and mentor junior engineers.