Top Cyber Security Jobs in Baltimore, MD

Support IC missions by implementing and enforcing information systems security policies and NIST RMF controls. Prepare and maintain SSPs, SRTMs, C&A packages; perform vulnerability and risk assessments; manage configuration and day-to-day security operations; evaluate security solutions for classified processing; administer authentication mechanisms and maintain operational IA posture.

Perform technical security assessments, design and integrate IA architectures and secure networking/enclave environments, support security planning, risk analysis, and trusted relationships. Work with HPC systems (Red Hat/CentOS/SUSE), parallel file systems (Lustre, GPFS), high-speed interconnects (Infiniband, Slingshot), transition systems to operations, and support HPC/ABS SRE sustainment activities for IC missions.

Support and manage information system security posture: implement/enforce policies, perform vulnerability and risk assessments, manage configuration and changes, prepare SSPs/C&A/SRTMs, support NIST RMF authorization, evaluate security solutions for classified processing, oversee contractor ISSOs, and liaise with stakeholders.

Support and manage information assurance for systems/enclaves: implement and enforce security policies, perform RMF-based authorization activities, conduct vulnerability/risk assessments, manage configuration and changes, prepare SSP/C&A/SRTM documentation, evaluate security solutions for classified processing, and provide day-to-day security operations and oversight.

Support DoD network modernization by monitoring networks, collecting and analyzing CND/IA tool data, performing vulnerability assessments, incident response, risk analysis, and generating certification/accreditation reports. Ensure compliance using STIG/eMASS and communicate findings to stakeholders.

Manage and enforce information security for assigned systems: maintain operational security posture, support RMF authorization activities, prepare and maintain security documentation (SSPs, SRTMs, authorization packages), conduct vulnerability and risk assessments, manage configuration changes, evaluate security solutions, and collaborate with engineering teams to remediate findings and ensure compliance.

Designs and maintains enterprise security architecture aligned with NIST RMF and DoD STIGs. Performs security engineering across the SDLC, vulnerability management with Nessus/ACAS/Qualys, incident response and threat detection using Splunk, endpoint protection and PAM (CyberArk), automation with PowerShell/Python/Bash/Ansible, cloud and container security (AWS/Azure/Kubernetes), documentation, training, and technical leadership for accreditation and continuous monitoring.

Support and coordinate IT security programs and policies. Provide information assurance and security guidance to developers, administrators, and owners. Assess security impacts of changes, maintain SSPs, conduct security assessments for A&A, support AO/DAO/SCA/ISSM to obtain and maintain ATOs, respond to security tickets daily, and use COTS/GOTS tools to report system status and compliance.

Serve as security engineering representative on teams to design, implement, evaluate, and integrate IA architectures, secure networking, computing, and enclave environments. Apply IA policy and procedures, support security planning, assessment, risk analysis/management, identify data handling requirements, and enforce trusted relationships with external systems while interacting with customers and project teams.

Serve as the program Information Systems Security Manager (ISSM) overseeing daily security operations, risk and vulnerability assessments, configuration and change management, RMF/DIACAP processes, and contractor ISSO oversight. Collaborate with engineers and program managers to design and implement security programs, perform requirements and functional analysis, and enable government planning and oversight of multi-level security systems.

Support and maintain an information system's security posture, implement and enforce security policies, perform vulnerability and risk assessments, manage configuration and changes, and prepare documentation (SSPs, C&A packages, SRTMs) while supporting security authorization processes (NISCAP/DIACAP).

Perform TEMPEST/EMSEC testing and signal analysis on cryptographic and COTS equipment, record and report results, identify and mitigate emanation vulnerabilities, work with vendors and project teams to verify test requirements (CTTA/NSITSSAM), and validate IASRD application while supporting onsite customer mission needs.

Provide advanced network security engineering for a U.S. Government customer: procure, deploy, configure, and maintain hardware and network devices (firewalls, proxies, VPNs, load balancers); perform site surveys, create technical design packages, lead teams, plan hardware projects, perform security planning, risk analysis, and design trusted inter-system relationships. Support SIGINT-focused complex systems and validate hardware in coordination with systems and test engineering.

Support and enforce information systems security policies and RMF activities. Maintain operational security posture, develop and update SSPs/SRTMs, perform vulnerability assessments, support ATO/C&A, and collaborate with administrators and engineers to ensure compliance for mission-critical systems.

Perform ISSO duties supporting system and enclave security: evaluate and implement security solutions, manage configuration and authorization, maintain security documentation per ODNI/DoD, track authentication mechanisms, support ISSM/ISSO activities, manage changes and day-to-day cybersecurity operations, and interface with stakeholders to meet security objectives.

Perform security engineering for design, implementation, and assessment of secure networks/enclaves. Conduct technical security assessments, risk analysis, and recommend mitigations. Validate security requirements, integrate cybersecurity components, and support trusted relationships among systems.

Serve as the program's ISSO to implement and enforce information systems security policies, maintain operational security posture, perform day-to-day security operations, evaluate security solutions for classified processing, conduct vulnerability/risk assessments, manage configuration and changes, and prepare SSPs, C&A packages, SRTMs, and RMF-aligned authorization documentation.

Provides technical leadership for enterprise AI security, designing secure AI platform architectures, vetting frameworks, identity and posture management for AI agents, and preventative security guardrails. The role requires building scalable security systems with Python, Go, or Java, managing infrastructure as code, addressing cloud and container security, mentoring engineers, and advising leadership on AI security risks.

Perform full life-cycle RMF/DIACAP A&A management to support Department of Commerce systems and achieve ATOs: conduct security assessments per NIST 800.53, manage risk registries, maintain vulnerability scanning and patch compliance (HBSS/ACAS/IAVM), produce A&A documentation (eMASS, STIGs, IAVAs), advise on configuration management and mitigation strategies, and provide subject-matter expertise for security engineering and policy.

Serve as the primary ISSO for enterprise infrastructure across classified domains: manage security lifecycle, maintain ATOs, update authorization packages, run continuous monitoring, develop POA&Ms and waivers, ensure STIG and NIST/FISMA compliance, audit logs, coordinate remediation and secure decommissioning, and collaborate with engineering and system owners to sustain secure operations.

Monitor IDS sensors and SIEM platforms, perform intrusion protection, vulnerability assessments and ad-hoc scanning, evaluate risk models, remediate incidents, provide senior advisement, and develop scripts to analyze network traffic and anomalies.

Maintain and enhance legacy enterprise applications: troubleshoot and fix bugs, implement security upgrades, review software design documents, apply SDLC/DevSecOps practices, and advise clients on modernization and hardening.

Designs, implements, and manages policies and procedures for database and software security. Writes and audits Configuration Management (CM) plans and software change procedures; performs design reviews, configuration audits, and baseline status accounting. Implements CM processes in DevSecOps/Agile environments using tools like JIRA, Puppet, Confluence, and GitHub. Mentors team members. TS/SCI required.

Design, implement, and operate F5 LTM load-balancing and secure networking solutions (BGP, IPv6, HA). Troubleshoot using tmsh/bash/imish, manage upgrades/patching, support Azure virtual networking, partner with security teams, produce technical documentation, and secure email components to support DoD mission-critical infrastructure.

Lead and grow an Application Security practice: define standards, assess application security posture, advise on secure-by-design architectures, integrate AI scanning, lead teams of engineers/architects, drive remediation, and support business development and sales for application security services.