Open Baltimore Cybersecurity jobs

Summary

CNO Reverse Engineer role performing reverse engineering of hardware components, software applications and operating systems to determine functionality, code structure and circuit design in support of developing CNO tools and techniques. Programs in Assembly, C, C#, C++, Java, Perl or Python and delivers proof-of-concept code and demonstrations. Requires active TS/SCI with polygraph; positions available in Annapolis Junction MD, San Antonio TX, Aurora CO and Cary NC.

Summary

Performs reverse engineering of hardware components, software applications, and operating systems to determine functionality and structure in support of Computer Network Operations (CNO) tool development, including kernel-level programming, computer forensics, and proof-of-concept development in Assembly, C, C++, or Python. Leads reverse-engineering efforts and authors technical reports and demonstrations for the same TG cyber program (Annapolis Junction MD, San Antonio TX, Aurora CO, Cary NC). Requires an active TS/SCI clearance with polygraph.

Summary

Plans, builds, and manages cybersecurity for a Department of Defense customer's cloud environment, ensuring cloud deployments meet DoD hardening and compliance requirements across design, configuration, monitoring, logging, and networking. Builds and configures vulnerability-scanning and remediation tooling for CI/CD pipelines, applies Risk Management Framework/STIG controls, and supports the ATO process. Fully onsite role requiring an active Top Secret clearance with SCI eligibility and an IAT Level II (Security+) certification.

Summary

This is a mid-level cyber security audit role supporting federal, state, and local government customers, serving as liaison between external auditors and internal security systems. Duties include conducting FISMA/NIST compliance checks and vulnerability assessments, tracking POA&Ms and control deficiencies, and supporting FISMA-A123 and CFO audits within the Risk Management Framework. A CISA certification is preferred.

Summary

A senior system vulnerability analyst in Fort Meade, MD, identifying vulnerabilities and attack paths across system hardware, software, personnel, and procedures, developing countermeasures, and producing attack reports for the systems and missions studied. Requires an active TS/SCI clearance with polygraph and substantial experience in vulnerability analysis, penetration testing, or computer forensics, with relevant military cyber training counting toward experience.

Summary

Leads development of an enterprise-wide cybersecurity and technology governance framework aligned to the NIST Cybersecurity Framework, covering policy drafting, risk-and-controls management, and an automated GRC program across on-premise and cloud environments. Owns the annual enterprise cyber risk assessment, the NYDFS Part 500 self-assessment, and the SOC2 audit, and partners with security architects and engineering teams on access, cloud, and AI governance. Reports to the Director of Cybersecurity Governance and Risk at this consumer-lending company.

Summary

Cybersecurity systems engineer supporting a DoD Information Assurance program, developing systems-engineering and security-test documentation, leading requirements analysis, and performing high-assurance cybersecurity evaluations for devices undergoing DoD Certification and Accreditation. Requires an active TS/SCI clearance with polygraph.

Summary

This is a Cybersecurity Architect role leading architecture and design of cybersecurity solutions for federal networks, translating customer IT needs into secure, mission-aligned network and systems designs. The role covers Zero Trust architecture aligned to NIST 800-207, identity and access management, and IoT/cloud security, and requires a TS/SCI clearance.

Summary

Senior cybersecurity engineering role executing the tactical, hands-on elements of Constellation's security strategy, with a central focus on achieving North American Electric Reliability Corporation Critical Infrastructure Protection compliance across the utility's IT and power IT environments. The engineer implements system security measures for confidentiality, integrity, availability, authentication and non-repudiation, performs security reviews to identify gaps in security architecture, and helps develop security risk management plans. The role acts as a liaison to the security architect and to cloud and infrastructure operations teams, and works closely with physical security on new standards and remediation.

Summary

This is a Sr. Principal Information Security Engineer (ISSO) role translating federal security frameworks such as DoDI 8510.01, JSIG, and NIST SP 800-37 into requirements for development teams building a multi-tenant Kubernetes control plane. The role owns the entire Authorization to Operate package lifecycle, continuous monitoring and POA&M tracking, and compliance-to-engineering translation, and requires the ability to obtain a Top Secret clearance.

Summary

Principal CNO programmer role leading a team of developers who design, build and maintain Computer Network Operations capabilities, providing technical leadership across creation, testing, integration and deployment of mission-focused cyber tools. Requires deep expertise in low-level Unix/Windows internals, kernel-level programming and reverse-engineering tools such as IDA Pro and Ghidra, plus a TS/SCI clearance with polygraph.

Summary

Senior CNO programmer role performing reverse engineering, software analysis and vulnerability research on hardware, software and operating systems to uncover weaknesses and enable advanced access capabilities. Requires low-level programming (Assembly, C, C++), debugging, and source-code vulnerability analysis skills, plus a TS/SCI clearance with polygraph.

Summary

This is a junior Cybersecurity Specialist role supporting Army network monitoring, defensive cyber operations, and Risk Management Framework compliance across DEVCOM C5ISR mission spaces. Duties include monitoring network traffic for unauthorized activity, running vulnerability scans with DoD/Army tools, supporting patch management, and maintaining RMF accreditation documentation; requires an active Secret clearance and DoD 8570 IAT Level II certification.

Summary

This is a Defensive Cyber Operations Planner role supporting Navy cyber defense missions, coordinating and drafting plans and orders to manage risk across DoD intelligence, weapons, and control systems and cloud environments. The role standardizes tactics, techniques, and procedures for cyber risk mitigation and requires 8+ years of defensive cyber mission experience plus a TS/SCI clearance.

Summary

This is a mid-level Cybersecurity Engineer role designing secure DoD network solutions with a focus on email security, including zero-day threat detection, anti-spoofing, and encrypted email inspection. The role recommends and implements security policies, troubleshoots SMTP and network protocols, and requires a DoD 8140 IAT Level II certification with ability to obtain a Secret clearance.

Summary

Senior mobile malware engineer role analyzing sophisticated malware targeting Android and iOS devices, using reverse engineering and malware-analysis tooling (Ghidra, IDA Pro, Frida, MobSF, Corellium) to develop detection capabilities and strengthen cyber defense. Requires low-level ARM/ARM64 binary-analysis skills and a Top Secret/SCI-eligible clearance; background in offensive cyber operations or exploit development is a plus.

Summary

Associate Principal Incident Responder leading operational technology (OT) incident response investigations as Incident Commander, including triage, threat hunts, compromise assessments and on-call response for industrial control system customers. The role also delivers advisory services such as maturity assessments, tabletop exercises and playbook design. Requires 8+ years of hands-on incident response and digital forensics experience across at least two forensics domains.

Summary

Senior Information Systems Security Officer supporting a classified information-assurance program near Fort Meade, Maryland, implementing and enforcing security policies, performing vulnerability/risk assessments, and preparing System Security Plans and Certification and Accreditation packages under the NIST Risk Management Framework. Manages configuration management for security-relevant hardware and software and requires an active TS/SCI clearance with polygraph.

Summary

Classified Cybersecurity Analyst role conducting system audits and continuous monitoring of classified information systems, assessing security controls, configurations and operational processes against enclave policy and recommending additional safeguards. Supports Assessment and Authorization (A&A) processes, including security certification testing and documentation; onsite full-time at Linthicum, MD.

Summary

Cyber Security Fusion Analyst supporting DISA network operations and cyber defense for DODIN systems at Fort Meade, performing incident handling, threat detection and analysis of adversary TTPs using netflow, PCAP, SIEM and OSINT tooling (Wireshark, Splunk, ArcSight). Requires an active TS/SCI clearance eligible for polygraph and a Security+ certification or equivalent DoD 8570 Level II certification.

Summary

This is a senior manager role establishing and growing an Application Security practice, defining standards and leading teams of Application Security Engineers and Architects who assess development and operational systems. Responsibilities include SAST/DAST/IAST/SCA testing methodologies, integrating security into CI/CD pipelines, and business-development activities for application security services.

Summary

Serves as a senior Information Systems Security Officer supporting a classified federal enclave, overseeing daily security operations, vulnerability and risk assessments, and configuration management for security software, hardware and firmware. The role maintains System Security Plans and compliance documentation and requires DoD 8140.03 IAM Level II certification (such as CISSP) plus an active TS/SCI clearance with agency-appropriate polygraph.

Summary

Develops Computer Network Operations capabilities for an intelligence-community customer at Fort Meade, spanning vulnerability research, exploit development, CNO tool development and DevOps infrastructure support, with a focus on Android internals and reverse engineering. Requires an active TS/SCI clearance with polygraph and at least two years of cybersecurity/CNO-specific development experience.

Summary

Entry-level SOC analyst role monitoring, triaging, and responding to security alerts and incidents using SIEM, EDR, and IDS tooling. Responsibilities include incident detection and response, threat-intelligence monitoring, and support for vulnerability scanning and remediation. Baltimore-area program; candidates are expected to pursue certifications such as Security+ or CySA+.

Summary

Embedded Systems Security Engineer role leading development of hardware and software security solutions for sensor payloads and mission systems, ensuring compliance with government security policies (JSIG, DAAPM) and validating security requirements. Supports formal Security Test and Evaluation processes and documents Assessment and Authorization findings; fully onsite in Baltimore, MD.

Summary

Leads advanced incident-response investigations, including ransomware, APTs, insider threats, and cloud/on-prem compromises, covering the full lifecycle from detection through post-incident review. Performs forensic analysis and threat hunting across Windows/Linux, Active Directory, Entra ID, Azure, AWS, and SaaS environments using SIEM and EDR/XDR tooling mapped to MITRE ATT&CK, and mentors Tier 1/2 analysts as the Tier 3 escalation point. Requires expert-level SIEM/forensics knowledge plus at least two relevant certifications such as GCFA, GCFE, or GCIH.

Summary

This is a Network Security Engineer role designing and testing boundary security capabilities for DoD enterprise networks, covering firewall and enterprise security design, intrusion detection/prevention, SIEM, and Palo Alto/Cisco/Juniper firewall implementation. The role supports acquisition, installation, and maintenance of network components and requires 5+ years of network security experience.

Summary

This is an identity and access management specialty role: leading design and implementation of ICAM architectures and cryptographic and credential management solutions, spanning federation, PKI, and role-, attribute-, and policy-based authorization models across cloud, hybrid, and on-premises systems. Zero trust and post-quantum cryptography are named focus areas, alongside test strategy, integration planning, and mentoring responsibilities. The listing flags clearance requirements including a counterintelligence polygraph and TS/SCI eligibility, so government clearance eligibility is a gate.

Summary

An information system security officer role weighted heavily toward data compliance, specifically federal protections around U.S. persons data, PII, and commercially and publicly available data on a big data program. The work covers secure data schemas when shipping across classification boundaries and enclaves through cross domain solutions, writing data policy with the combatant command chief data officer, and keeping cloud, platform, and application infrastructure inside ATO and security policy. Expect encryption and key management, STIG and ACAS or Tenable vulnerability work, POA&M remediation, and RMF and eMASS continuous monitoring; the posted salary range is 100,000 to 270,000 dollars.

Summary

This is a senior technical advisor role supporting a DoD SIPRnet modernization effort, conducting technology assessments, engineering studies, and proof-of-concept work across cloud, Zero Trust Architecture, and enterprise data management. The engineer evaluates commercial and government cloud platforms (Azure Government, AWS GovCloud), SD-WAN interoperability, and Data Loss Prevention/Digital Rights Management technologies to protect classified information. Work occurs across classified DoD environments in the Baltimore area.

Summary

The posting opens with generic data architect language, but the actual requirements make this an enterprise data-protection security architecture role. It asks for 5 or more years in cybersecurity, hands-on work with data security platforms such as Virtru, PKWare, and Thales plus encryption and key management, the Elasticsearch, Logstash, and Kibana stack, and experience running architecture reviews, threat modeling, risk assessments, and security control evaluations. A Secret clearance is required and the stated education floor is a high school diploma or GED, with Zero Trust and federal data protection strategy experience preferred.

Summary

Custom software design and development of computer network operations tools for Mission Systems, including the end-to-end data flow and tasking into those tools, with programming in Assembly, C, C++, Java, Perl, or Python across Windows, UNIX, and embedded or mobile targets. The work follows government software development procedures, with authored documentation and participation in design, code, and software readiness reviews. An active TS/SCI with polygraph is required at start along with willingness to obtain another polygraph, and the listed places of performance are Annapolis Junction MD, Aurora CO, and Carey NC.

Summary

A junior binary analysis and reverse engineering position at Aberdeen Proving Ground, working hands-on with state-of-the-art electronics as part of an interdisciplinary team. Required skills are Linux, a programming language such as Python, Java, or C and C plus plus, basic cryptography knowledge, an understanding of software architecture, and experience with tools including Ghidra, Binary Ninja, IDA, JADX, x64dbg, or GDB; desired extras run to Android APK reverse engineering, oscilloscopes and micro-soldering, unmanned systems, and interfaces such as I2C, JTAG, UART, SPI, and USB. An active Secret clearance with the ability to obtain TS/SCI plus a BS and 2 or more years of directly related experience are required.

Summary

A compliance-oriented cybersecurity engineering role built around the Risk Management Framework: identifying NIST 800-53 revision 5 controls, driving vulnerability scans, analyzing policy, and implementing infrastructure security controls that enable multi-national mission partner connectivity. Named tooling is ACAS, eMASS, and Tenable Security Center Plus, with risk and vulnerability assessments across network, system, and application areas. A Secret clearance, a bachelor's degree, and a Security Plus certification are required, and prior Information System Security Officer experience is preferred.

Summary

A senior computer network operations capability development role, guiding an Agile team through reverse engineering and vulnerability analysis of software in a systems security research and development environment. Requirements are 6 or more years of object-oriented programming, 4 or more years building Windows applications in Visual Studio or .NET or UNIX applications with make-based builds, complex program development in C, C sharp, C plus plus, or Java, and embedded development experience through either a CS degree plus a year or four years in lieu of a degree. A TS/SCI clearance with polygraph is required.

Summary

A working-manager role over a product security team, split roughly half between leading and mentoring engineers and half as a practicing security engineer. The manager personally owns certification and accreditation programs such as DISA STIG hardening and authorization packages, SOC 2, and ISO 27001, and coordinates with Compliance, Legal, and Sales Engineering on customer security questionnaires and audits, while the individual contributors carry most day-to-day vulnerability hunting and patching, including novel zero-day findings in the company products rather than only dependency CVEs. It asks for five or more years of cybersecurity or product security experience plus one to two years leading a team of security engineers.

Summary

A mid-level offensive security role running grey and black box penetration testing and threat hunting against complex systems and physical electronics. The bar is a bachelor's degree with 5 years of relevant experience and 2 to 3 years of hands-on exploitation, extensive Linux knowledge, proficiency with nmap, Wireshark, Burp Suite, and Nessus, and expertise in techniques including buffer overflows, fuzzing, SQL injection, man-in-the-middle, XSS, privilege escalation, and lateral movement. An active Secret clearance with potential to obtain TS/SCI is required, and OSCP, OSCE, GPEN, GWAPT, GXPN, CEH, or CISSP certifications are preferred; note the body text still calls the position junior even though the qualifications are mid-level.

Summary

A junior offensive security role performing penetration testing and threat hunting against sophisticated systems and hands-on electronics, not just web or enterprise targets. Required background is a bachelor's degree with 3 years of relevant experience, 1 to 2 years of exploitation experience, Linux fundamentals, a grasp of networking, TCP/IP, virtualization, and containerization, and working knowledge of nmap, Wireshark, Burp Suite, and Nessus against OWASP Top 10 and DoD or NSA testing standards. An active Secret clearance with the potential to obtain TS/SCI is required, and embedded device, radio, and UAS or UXS familiarity is desirable.

Summary

Titled Security Engineer, but the requirements make this an Elastic Stack SIEM specialist role: 6 or more years administering Elasticsearch, Kibana, Logstash, Beats, and Fleet, managing index lifecycle policies, templates, and data streams at scale, and building detection rules, alerts, case workflows, and dashboards for security operations. It also expects log ingestion pipeline design across network, endpoint, identity, and cloud sources, Elastic Common Schema mapping, and ES QL or EQL threat hunting, in a DoD, intelligence community, or federal SOC context. A Secret clearance is required and the stated education floor is a high school diploma or GED.

Summary

An assessment and authorization focused cybersecurity role: auditing, configuring, and authorizing information systems under the Risk Management Framework using eMASS, ACAS, and NIST 800-53 revision 4 and 5 controls, with some guidance of junior staff. Unusually for this kind of work, the posting requires only the ability to obtain a Secret clearance rather than an active one, alongside a bachelor's degree. Preferred extras include multi-national environments and Authority to Connect processes plus SIEM familiarity with SolarWinds Security Event Manager, Tenable Security Manager, and Trellix Endpoint Security System.

Summary

Accreditation and authorization work sits at the center of this role: developing and maintaining the artifacts behind a continuous authority to operate, including SSPs, hardware and software lists, PPSM, and SCTM, and translating Risk Management Framework controls into technical requirements that software and platform engineers implement. The engineer also embeds security practices into Kubernetes clusters and CI/CD pipelines, performs vulnerability and security impact analysis, and engages directly with the security control assessor from the authorizing official office. It requires U.S. citizenship with an active TS clearance plus SCI and SAP eligibility, and a current DoD 8570 IAT Level II or III certification, with scanner experience such as ACAS, Nessus, and SonarQube.

Summary

This is a cyber range build-and-operate role rather than a development job: constructing virtual machines, virtual networks, accounts and roles, tooling, and exercise injects for military cyber training and mission rehearsal events, then supporting them live during execution windows. Day-to-day work is Windows and Linux host configuration and patching, VMware and virtual infrastructure, routing and switching, DNS and TCP/IP troubleshooting across range enclaves, and writing build notes, runbooks, and diagrams. It asks for a technical degree plus eight years of experience along with relevant networking, cloud or VMware, and Red Hat or Linux certifications.

Summary

A security engineering leadership post rather than a development role: owning end-to-end security architecture for a large, geographically distributed network, managing a team of information systems security officers and engineers, and keeping authorizations to operate and system security plans current against Secure the Enterprise and Secure the Network requirements. It also covers static and dynamic application security testing and penetration testing, and partnering with development teams on vulnerabilities and remediation. Requirements are steep: a masters plus 15 years of experience, at least 10 years leading security engineering teams, an active CISSP, a Certified Scrum Master certification, and a TS/SCI with polygraph.

Summary

Information system security officer work on a cleared program, maintaining the operational security posture of information systems and supporting the ISSM, with heavy documentation duties covering system security plans and certification and accreditation artifacts. Day-to-day tasks include threat analysis, incident detection and reporting, vulnerability remediation, Information Assurance Vulnerability Alert response and security scans, configuration management for security-relevant software, hardware, and firmware, and administering user identification and authentication mechanisms. The bar is a bachelor's degree plus at least 12 years of relevant experience, including ten or more years working as an ISSO, along with a TS/SCI with polygraph.

Summary

A junior security engineering role supporting a government customer onsite, designing and maintaining enterprise security architecture aligned with NIST RMF, DoD STIGs, and CIS benchmarks. Work includes vulnerability management with Nessus, ACAS, and Qualys, SIEM-based incident response in Splunk, endpoint hardening, and CyberArk privileged-access administration. The position is performed onsite.

Summary

A security engineering role supporting a government customer onsite, designing and maintaining enterprise security architecture aligned with NIST RMF, DoD STIGs, and CIS benchmarks. Work spans vulnerability management with Nessus, ACAS, and Qualys, SIEM-based incident response in Splunk, endpoint hardening, and CyberArk privileged-access administration. The position is performed onsite.

Summary

A security engineering role supporting a government customer onsite, designing and maintaining enterprise security architecture aligned with NIST RMF, DoD STIGs, and CIS benchmarks. Work spans vulnerability management with Nessus, ACAS, and Qualys, SIEM-based incident response in Splunk, endpoint hardening, and CyberArk privileged-access administration. The position is performed onsite.

Summary

Principal systems engineer providing technical leadership on large-scale Department of War systems, applying an offensive-security mindset to strengthen defensive posture. Leads cybersecurity and systems-resiliency vulnerability assessments, independent verification and validation, and Zero Trust implementation across complex environments, and requires an active TS/SCI clearance with polygraph.

Summary

Federal FISMA risk advisory work built around the Risk Management Framework: evaluating and communicating each system risk posture to executive leadership, reviewing proposed security and privacy artifacts, advising ISSOs on closing identified weaknesses, and acting as the authority to approve configuration deviations from the required baseline. Also covers security categorization and privacy impact work for systems holding PII and PHI. Expects 10 years building information security programs against FISMA, NIST SP 800 series, FIPS, HIPAA and the Privacy Act, with CISSP or CISM preferred; the work is governance and documentation rather than hands-on engineering.

Summary

Cybersecurity high-assurance evaluation role, reviewing security evaluation documents and other high-assurance artifacts for devices undergoing certification and assessment to confirm they meet security requirements, including information assurance and cryptographic work. Requires 20-plus years of systems engineering experience and an active TS/SCI with polygraph.

Summary

An embedded software and capability-development role for a cleared government mission, writing low-level software in C/C++ and assembler across Linux, Windows, and VxWorks, including device drivers and operating-system-internals work. The role also performs reverse engineering, protocol analysis, vulnerability assessment, and security research to rapidly prototype proof-of-concept capabilities. Requires extensive experience and a technical degree, and the work is classified.

Summary

A subject-matter-expert role in offensive cyber operations, conducting reverse engineering, vulnerability research, and low-level tool development across Windows, Linux, embedded, and IoT targets. The position applies advanced mathematics and AI/ML techniques to create novel offensive capabilities in support of the IC and DoD OCO community. Requires 15+ years of hands-on offensive cyber experience, an active TS/SCI, and on-site work.

Summary

Although titled software engineer, this is an identity, credential, and access management specialist role, engineering identity governance and identity-data solutions on SailPoint IdentityIQ and Radiant Logic, covering joiner/mover/leaver lifecycle, entitlement governance, identity correlation, and Zero Trust access controls. It is a hybrid position supporting a DoD ICAM mission, extending identity services to tactical and edge environments.

Summary

This is an enterprise solution-architecture role for defense and intelligence programs, producing solution architectures, roadmaps, and design artifacts and specializing in secure mobility, encryption, mobile device management, VPN, and CSfC-compliant components. Security and compliance frameworks such as DoD STIGs, RMF, and NIST 800-53/171 are baked into the designs, and a Secret clearance plus Security+ CE or INCOSE CSEP is required.

Summary

Information Systems Security Officer role overseeing security operations, vulnerability and risk assessments, configuration management, and System Security Plan lifecycle activities for classified IC/DoD information systems. Requires DoD 8140.03 IAM Level II certification (such as CASP+ or CISSP), US citizenship, and an active TS/SCI clearance with agency polygraph.

Summary

A cyber-defense analyst role at DoD Cyber Defense Command — enterprise defensive strategy, threat analysis, and situational-awareness work across cloud, network boundaries, cross-domain, and endpoint technologies, including briefings to general/flag-officer leadership. Requires an active TS/SCI clearance with CI-polygraph eligibility, DoD 8570 IAT II certification, and joint command experience.

Summary

Cyber defense analysis in a high-tempo operations center supporting DISA on the GSM-O II contract — developing enterprise defensive strategies across the DODIN including cloud, network boundaries, cross domains, and endpoints, and preparing briefings for general and flag officers. Requires an active DoD TS/SCI with eligibility for a counterintelligence polygraph, an IAT Level II certification (Security+ce), and familiarity with military orders and the military decision-making process.

Summary

Vulnerability management and accreditation support rather than offensive testing: configuring and running vulnerability scans, evaluating results against threat intelligence and vulnerability announcements, briefing leadership on risk posture, and building System Body of Evidence artifacts alongside information system security engineers and officers. Hands-on RMF work with eMASS, STIG checklists, POA&Ms and maintaining ATO status is central to the job. The entry bar is relatively low at 2 years of relevant experience, though at least a Basic or Intermediate 8140 certification is required.

Summary

Despite the generic Engineer title, this is an Identity, Credential, and Access Management (ICAM) engineering role supporting the DoD ICAM mission — designing, developing, and integrating identity governance (IGA) and identity data management on SailPoint IdentityIQ and Radiant Logic. Work covers Joiner/Mover/Leaver lifecycle, entitlement and role governance, Segregation of Duties, and extending Zero Trust identity services to tactical and edge environments. Requires an active Secret clearance and an 8570/8140 certification; hybrid.

Summary

Information System Security Officer supporting a mission-critical federal program, responsible for implementing and maintaining security controls, leading Risk Management Framework (RMF) activities, and driving Authorization to Operate (ATO) efforts across multiple systems. Also handles vulnerability management, System Security Plans/POA&Ms, and incident response support; hybrid role requiring an active Secret clearance.

Summary

Despite the AI/ML in the title, the body of this job is platform operations: automating deployments, administering dev/test/prod environments, maintaining CI/CD pipelines and Kubernetes infrastructure, monitoring, patching, and after-action reporting on outages. The AI/ML connection is the program it supports rather than the day-to-day work. Requires 8+ years of related experience on a SAFe/Scrum team.

Summary

Compliance-side cybersecurity work: shepherding DoD systems through Risk Management Framework assessment and authorization in eMASS, drafting SSPs, POA&Ms, SOPs, and FISMA documentation, and monitoring security-policy compliance alongside sysadmins and engineers. Requires an active DoD Secret clearance and a DoD 8140 IAT Level II certification such as Security+ before start; hiring at two-plus and four-plus year experience levels.

Summary

Cloud security engineering for one of the largest software factories in the DoD: operating, hardening, patching, and monitoring AWS GovCloud infrastructure, working Authority to Operate packages and CMMC authorizations, and building toward Zero Trust architecture. Requires a Secret clearance, an existing DoD 8570 IAT Level II or III certification, and up to 25% travel.

Summary

Hands-on penetration testing of systems and networks: planning threat-based assessments around MITRE ATT&CK, developing exploits and attack methodologies, and mentoring junior testers as needed. Requires a Secret clearance and 3+ years across penetration testing, attack methods, and network security analysis; OSCP-family certifications and source-code auditing are pluses, and the education floor is a high-school diploma.

Summary

Narrower than the title suggests: a network and application-delivery security role specialized in F5 BIG-IP and web-proxy infrastructure for DoD enterprise architecture - designing and administering in-line break-and-inspect solutions and troubleshooting TLS and mutual TLS. Requires a Secret clearance and 4+ years each with DoD enterprise architecture and F5 BIG-IP; the education floor is a high-school diploma.

Summary

Very senior security engineering role delivering threat-informed cybersecurity risk assessments, architecture reviews, and engineering guidance for intelligence mission systems. The bar is steep: an active TS/SCI with polygraph, a CISSP-ISSEP certification, and a minimum of twenty years of ISSE or systems engineering experience in the customer space, with briefings to senior DoD officials part of the job.

Summary

Security engineer (ISSE) baking information assurance into intelligence systems: technical security assessments, security architecture design across enclaves with differing classification levels, and reviews of C&A documentation. Requires an active TS/SCI with polygraph, a CASP+ or CISSP as a firm requirement, about seven years of ISSE or network engineering experience in the customer space, and comfort briefing senior DoD officials.

Summary

A data-security engineer deploying and operating Data Loss Prevention (DLP), sensitivity labels, and policies, responding to DLP alerts, and risk-assessing AI and SaaS applications for data-privacy impact. It also supports the cyber risk program (policy exceptions, risk registry, remediation) and end-user security training, and requires an IT/cyber degree plus about four years.

Summary

The defining task is a platform migration: leading the enterprise SIEM from Splunk to the Elastic Stack end to end, with a phased cutover roadmap and parallel operation of both platforms so detection and incident response coverage never lapses. Ongoing duties are Splunk operations and engineering, including forwarders, indexers and search heads, data source onboarding with correct parsing and field extraction, SPL query development, dashboards and alerts, license and access management, and holding uptime, performance and ingest SLAs. Scope covers all Army Intelligence security domains with ICS 500-27 audit compliance, and the position is full-time onsite at Ft. Meade MD with a TS/SCI clearance.

Summary

A technical lead seat inside the information system security office at the National Institute on Aging, protecting the systems behind aging research and administrative operations. The work is federal compliance heavy, spanning NIST RMF control design, FISMA and NIST SP 800-53 alignment, ATO support with SSP, POA&M, and SAR documentation, and Zero Trust roadmap advice, alongside vulnerability scanning, SIEM and endpoint tooling, incident response, and forensic support coordinated with NIH security operations. Ten or more years of cybersecurity experience is required, CISSP is preferred, and the arrangement is onsite or hybrid.

Summary

The title says information security, but the work described is deskside and site IT support — imaging and deploying desktops, repairing hardware, installing and hardening Cisco network switches, configuring VOIP phones, and planning user moves across classified and unclassified systems at multiple sites via remote support. Requires an active TS/SCI with full-scope polygraph and 10+ years of IT support experience.

Summary

This is an information assurance and accreditation job rather than hands-on security engineering: maintaining the operational security posture of a classified system, running vulnerability and risk assessments, and preparing System Security Plans, certification and accreditation packages, and requirements traceability matrices under DoD Risk Management Framework and NISCAP. It asks for at least seven years as an ISSO on IC or DoD programs plus DoD 8570 IAM Level II or IAT Level III certification such as CISSP or CASP. A current Top Secret/SCI clearance with polygraph and US citizenship are required.

Summary

A senior data-security engineering role on T. Rowe Price's Enterprise Security team specializing in Data Loss Prevention (DLP) and data-protection engineering — designing and tuning DLP controls across email, endpoint, cloud, web and collaboration platforms using regex, EDM and IDM, and reducing false positives. It emphasizes insider-risk investigation and translating regulatory requirements into scalable controls. Listed as a remote opportunity.

Summary

Identity governance and provisioning engineer modernizing DoD account lifecycle management: automating provisioning and de-provisioning, access certification, and entitlement management across platforms like SailPoint, Saviynt, Okta, Radiant Logic, Entra ID, and Active Directory, explicitly to replace manual access-request processes. Requires an active DoD Secret clearance or higher and roughly a bachelors plus 12 years.

Summary

Network security engineering for intelligence operations, blending assessment and hardware work, including onsite documentation of network architectures, leading hardware installations, LAN/WAN design evaluation, MTBF/MTTR reliability analysis, and COTS/GOTS technology assessments against government security requirements. Requires TS/SCI with polygraph.

Summary

A hands-on technical lead for the Huntress SIEM platform, setting the technical vision and leading feature delivery for automated detection and human-powered threat hunting. The stack is Ruby on Rails with heavy AI-assisted development, and the role spans cross-team architecture and mentoring while staying in the code. A senior individual-contributor lead, remote.

Summary

Mid-level SOC analyst doing hands-on network defense: threat hunting, incident triage and response, log and packet analysis, and detection content development using Splunk Enterprise Security and SOAR, CrowdStrike, and the MITRE ATT&CK framework. Expects about four years of IT experience with two in security operations, plus working knowledge of US-CERT federal incident notification guidelines and mentoring of junior staff.

Summary

Information System Security Officer keeping computer network operations mission systems compliant under the Risk Management Framework: owning six System Security Plans, running continuous monitoring and regular audits, and preparing systems for reaccreditation. Requires an active TS/SCI with polygraph and an IAM Tier 1 certification (CAP, Security+ CE, or GSLC) with about eight years of experience; up to a $25K sign-on bonus.

Summary

Senior technical advisory role on DoD cybersecurity modernization rather than a hands-on build job: assessing the enterprise cybersecurity tool portfolio and recommending what to sustain, consolidate, replace or retire, leading RMF and ATO modernization to shorten authorization timelines, and producing multi-year roadmaps and executive decision-support materials. Also includes leading a multidisciplinary team and independently vetting vendor technical claims. Calls for 15 years of experience including 5 as a chief architect, chief engineer, CTO or technical director, and working knowledge of NIST SP 800-37 and 800-53, CNSSI-1253 and DoDI 8500.01 and 8510.01.

Summary

Security compliance and accreditation work rather than hands-on engineering — writing System Security Plans, POA&Ms, contingency plans, and user guides, and shepherding systems through RMF/ICD 503 assessment and authorization to reach ATO, plus audit liaison support. Requires TS/SCI with polygraph; the position sits in Elkridge, MD and will relocate to another National Capital Region site in Summer 2026.

Summary

Hands-on information systems security work on a classified site — monitoring intrusion detection systems, running audits and vulnerability assessments, operating firewalls and enterprise antivirus, and enforcing security policies and plans. Requires TS/SCI with polygraph, U.S. citizenship, and DoD 8570 IAT Level I or higher; posted range is $107,744 to $138,000.

Summary

A network security engineer designing and hardening secure DoD networks -- firewalls (Palo Alto, Cisco, Juniper), IDS/IPS, SIEM, and boundary security in a lab-to-production workflow. Requires 5+ years of network security and 3+ years of firewall/enterprise-security design, plus a Secret clearance.

Summary

A hybrid systems engineering and information systems security officer role, serving as security coordinator for assigned products, handling system security plan reauthorization and 508 compliance, and supporting cloud migration with the cloud architecture team across ISO/IEC 15288 process areas. Requires an active TS/SCI with polygraph and 20+ years of systems engineering experience.

Summary

A cybersecurity engineer (titled solutions architect internally) hardening DoD email-security systems -- zero-day detection, anti-spoofing, encrypted email inspection, and cross-domain reporting. Requires a Secret clearance and a bachelor's degree, plus the ability to obtain a DoD 8140 IAT Level II certification within 6 months; Azure and RedHat/BIND administration are pluses.

Summary

F5 load-balancer specialist for DoD networks: configure and troubleshoot F5 LTM virtual servers, pools, and HA pairs, handle upgrades, patching, and licensing, and work BGP, IPv6, and Cisco VRF routing problems with some Azure virtual networking. Requires the ability to obtain a Secret clearance and an 8140 IAT Level II certification such as Security+ within 6 months of start.

Summary

This is accreditation and compliance work rather than hands-on defense: maintaining the operational security posture of a classified system, running vulnerability and risk assessments, assessing the security impact of configuration changes, and preparing system security plans, risk assessment reports, certification and accreditation packages, and requirements traceability matrices under the NIST Risk Management Framework and ODNI and DoD policy. Day to day duties include administering the system's user identification and authentication mechanisms and keeping records on workstations, servers, routers, firewalls, hubs, and switches. The position supports senior ISSOs and the information system security manager on an intelligence community program.

Summary

An executive role owning Huntress's entire Threat Detection and Response organization, spanning the SOC, security triage, tactical response, detection engineering and threat hunting, and adversary tactics. The focus is multi-year strategy, organizational design, and leading the shift to an agentic SOC operating model through directors and managers, not daily queue management. Wants 10+ years leading security operations, including 5+ years leading through other managers.

Summary

Security engineering embedded in system engineering teams: performing and reviewing technical security assessments of computing environments to find vulnerabilities and gaps against information assurance standards, recommending mitigations, and representing security in the design and integration of networks, computing platforms, and enclaves. The environment described is high performance computing - Red Hat, CentOS, and SUSE systems with Lustre and GPFS parallel storage and Infiniband or Slingshot interconnects - so the assessments cover clusters and parallel file systems rather than ordinary enterprise IT. Despite the Level 1 label, it requires DoD 8570 IASAE Level 2 certification, an active TS/SCI with a polygraph from the last seven years, and seven years of ISSE experience.

Summary

Red-team role aimed at machine learning systems: you build automated Python tests that stress LLMs and other models, hunt for failure modes and data leakage, and translate findings into exploitation-risk assessments for intelligence customers. Requires an active TS/SCI clearance with polygraph, plus hands-on experience with Linux, Docker, and red-team methodology.

Summary

Information systems security officer for large-scale collection systems at a customer site in Annapolis Junction, MD: maintaining System Security Plans, C&A packages, and configuration management, and running vulnerability and risk assessments under NISCAP and the DoD Risk Management Framework. Requires a bachelors plus 7 years with 4+ as an ISSO on IC or DoD programs, a DoD 8570 IAM Level II or IAT Level III certification (CASP or CISSP), and an active TS/SCI with polygraph.

Summary

Information systems security engineering — performing technical security assessments of computing environments, serving as the security representative on design and integration teams, and building secure network and enclave architectures that span differing classification levels. Requires twelve years of ISSE experience on programs of similar scope and a TS/SCI with polygraph to start.

Summary

The title says security, but the JD describes broad network engineering — design, implementation, maintenance, dataflow optimization, and support for many types of network devices — on a team that operates 24/7 with flexible shift options, so shift work is part of the job. An active TS/SCI with polygraph is required to start.

Summary

Network security engineering with a strong hardware focus — conducting site surveys, procuring and acceptance-testing equipment, directing multi-site hardware installations, producing reliability analyses such as MTBF and MTTR, and evaluating LAN/WAN systems for vulnerabilities. Requires TS/SCI with polygraph to start; the posting lists no travel.

Summary

Network and hardware security engineering for intelligence operations — onsite architecture assessments, hardware installation leadership, LAN/WAN design evaluation, reliability analyses (MTBF/MTTR), and COTS/GOTS technology evaluations against government security requirements. Requires TS/SCI with polygraph and up to 10 percent local travel.

Summary

Senior information systems security officer running day-to-day security operations of large information systems: IAVA vulnerability management, System Security Plans and C&A documentation, configuration management of security software and hardware, and administering user identification and authentication. Requires a bachelors plus 12 years including at least 10 as an ISSO, and an active TS/SCI with polygraph.

Summary

A senior security engineer role at an asset manager with a strong development background, focused on infrastructure automation, cloud governance, and secure-by-default guardrails. The hands-on work centers on Terraform (reusable modules, policy-as-code), Java and Python automations, GitLab IaC gates, and AWS IAM reviews, plus mentoring engineers on least-privilege and cloud identity. Requires a relevant degree and 5-plus years of engineering/security experience.

Summary

A DevSecOps-oriented Information Systems Security Officer (ISSO) role for a DoD/Air Force customer, implementing and maintaining security controls under RMF v5, managing ATO packages, and drafting security documentation (SSP, SSPP, Cybersecurity Strategy) per NIST SP 800-53 and Air Force policy. It expects broad hands-on knowledge of Windows/Unix/Linux, networking, and cloud (AWS/Azure a bonus), and is full-time onsite Monday-Friday in the Baltimore metro area.

Summary

A hands-on staff product-security engineer securing the cloud-native AWS, Azure, and PaaS infrastructure behind Huntress's SaaS platform, covering secure architecture, DevSecOps and infrastructure-as-code review, threat modeling, and vulnerability management. Prior experience at a B2B SaaS company running cloud-hosted services is a stated requirement. Fully remote.

Summary

A cybersecurity engineering role on Peraton's USCYBERCOM team, on-site at Fort Meade, MD. The work applies cyber-engineering and DoD Risk Management Framework concepts — independently researching and recommending security mechanisms, briefing stakeholders, and authoring cybersecurity documentation. This is a federal/defense engagement supporting U.S. Cyber Command, so expect the associated clearance and on-site requirements.

Summary

Hybrid security engineer and penetration tester: validating security requirements and designs for a large geographically distributed system, then leading security testing events - conducting penetration tests, publishing results, and researching new testing tools. Works alongside system, test, and integration engineering teams through the program lifecycle; the title specifies TS/SCI with polygraph.

Summary

An Information Systems Security Engineer (ISSE) role securing large-scale, multi-enclave cloud computing environments for a government customer — running vulnerability management with Tenable Security Center and Nessus, performing technical security assessments and risk analysis, and designing system-level security solutions. It requires an active TS/SCI with current polygraph, 14 years of ISSE experience, DoD 8570 IASAE Level 2, and a verified CISSP; the posting lists a target salary range of 146,000-234,000 USD.

Summary

Principal information systems security engineer producing cybersecurity risk assessments, architecture gap analyses, and engineering guidance for an intelligence customer, including briefing senior DoD officials - Risk Management Framework expertise and C&A documentation review are the core of the job. Requires a minimum of 20 years of ISSE or systems engineering experience in the customer space, a CISSP-ISSEP certification, and an active TS/SCI with polygraph.

Summary

Cybersecurity systems engineer on a high-assurance information assurance program: developing and evaluating systems engineering documentation and security requirements, supporting the DoD certification and accreditation process, and performing high-assurance evaluations of devices under certification. Requires 8 years of systems engineering with an information assurance or cryptographic background and an active TS/SCI with polygraph; space and weapons system experience is a plus.

Summary

Cybersecurity evaluator for high-assurance device certification: reviewing security evaluation documents and artifacts for devices undergoing certification, documenting deficiencies, and translating vulnerability knowledge into risk-prevention guidance - assessment and documentation work more than building. Requires 14 years of systems engineering experience, an information assurance or cryptographic background, and an active TS/SCI with polygraph. Posted pay range is $131,300 to $237,350.

Summary

Document-heavy security evaluation rather than hands-on engineering: reviewing high-assurance security evaluation artifacts for devices undergoing certification, documenting deficiencies, and recommending requirement and process improvements. Requires an active TS/SCI clearance with polygraph, eight years of systems engineering experience, and information assurance or cryptographic background. Leidos states a pay range of $107,900 to $195,050.

Summary

A DevSecOps and platform engineer building and hardening an integrated CI/CD and container environment (Kubernetes/Docker Swarm, Helm, Infrastructure as Code) that supports classified course delivery, with security scanning, IAM/secrets management, and observability built in. It requires about five years of development across Ruby/Rails, Python, C++, and JS/TS, plus an active TS/SCI with Polygraph and Security+/DoD 8570 IAT Level II.

Summary

The engineer title is misleading: the body describes a cross domain solutions governance and program support specialist who organizes DSAWG and CDTAB boards, briefs cross domain requests and annual reviews to senior DoD forums, manages ballots and meeting materials, and coordinates remediation of Cybersecurity Scorecard findings with ISSMs and program managers. Heavy technical writing and briefing load rather than hands-on engineering. Onsite at Fort Meade, and requires an active DoD Top Secret clearance with SCI eligibility plus DoD 8570 IAM or IAT Level II certification; stated compensation starts at 90,000 dollars.

Summary

Senior hands-on developer role architecting and implementing an end-to-end identity and access management framework for Maryland Benefits applications using Microsoft Entra ID. Covers Single Sign-On, Role-Based Access Control, privileged access management and Multi-Factor Authentication/adaptive authentication, requiring at least five years focused specifically on IAM.

Summary

Senior Information Systems Security Officer role overseeing security operations, risk and vulnerability assessments, and system authorization (ATO) for classified federal systems, maintaining System Security Plans and enforcing security controls. Requires TS/SCI with agency-appropriate polygraph and DoD 8140 IAM Level II certification such as CISSP or CASP+.

Summary

Umbrella posting collecting ISSO and ISSE openings across Leidos-led prime intelligence programs around Fort Meade, MD (work sites include Laurel, Columbia, Annapolis Junction, and Linthicum): ISSOs run day-to-day security operations, System Security Plans, and authorization packages under the DoD/NIST Risk Management Framework, while ISSEs design security into systems alongside architects and developers. Sits in the Cyber and Analytics Business Area spanning SIGINT, computer network operations, and cryptographic key management work.

Summary

Information System Security Officer role maintaining Risk Management Framework compliance and the security posture of Signals Analysis Division mission systems, responsible for eight to ten System Security Plans, continuous monitoring, audits, and periodic reaccreditation for a government client at Fort Meade. Applies NIST 800-53 and requires an IAM Tier 1 certification.

Summary

Despite the title, this Skyline Technology Solutions role (Baltimore area) is a PHYSICAL security-systems engineer - conducting site surveys and creating designs for CCTV and access-control systems, spec'ing equipment, drafting bills of materials, and supporting RFP responses, with travel and the ability to lift 50 lbs. It wants 5+ years with CCTV and access-control systems (Axis, Genetec, Wisenet), not information-security skills. It is a clear false positive on the cybersecurity board; a fit for a physical-security/CCTV design engineer.

Summary

Software development with a DevOps emphasis for defensive cyber capabilities — building applications, APIs, scripts, and data routing and enrichment services supporting Active Network Defense and continuous monitoring programs. Requires an active TS/SCI with polygraph and 14+ years of software engineering experience; the position is contingent on funding and may not be filled immediately.

Summary

AWS cloud engineering structured as a part-time, on-call, short-term assignment — rotating onto customer engagements lasting 3 to 12 months to prototype cloud workloads, automate infrastructure deployments with infrastructure as code, and build cloud-native and serverless solutions across multiple classification domains. Candidates must live within a 50-mile radius of the Hanover, MD office and hold an active TS/SCI clearance with polygraph.

Summary

AWS cloud prototyping and migration engineering — building cloud-native and serverless solutions with infrastructure-as-code and DevSecOps automation on customer engagements lasting 3 to 12 months across multiple classification domains. Notably, this is a part-time, on-call, short-term assignment; it requires a TS/SCI with polygraph and residence within 50 miles of the Hanover, MD office.

Summary

An identity and access management specialization rather than general application development: architecting single sign-on with SAML, OIDC and OAuth 2.0, role-based access control, privileged access management and multi-factor authentication for public-facing Maryland Benefits applications including the Consumer Portal and Unified Benefits Screener. Named platforms are Microsoft Entra ID, ForgeRock, SailPoint for identity governance and joiner-mover-leaver automation, and AWS IAM Identity Center. The posting asks for roughly seven years in systems engineering with at least five focused exclusively on IAM, and the framework must satisfy state, federal, PII and HIPAA requirements.

Summary

An Information Systems Security Officer (ISSO) opening at Interclypse; the description is largely recruiting boilerplate with the notable constraint that the role is on-site only, no remote work. Expect ISSO compliance and security-posture work on government systems, with skills to be developed on the job per the posting.

Summary

A Skill Level 3 Information Systems Security Manager (ISSM) leading a program or enclave's Information Assurance program, enforcing security policies, managing operational posture, and preparing authorization artifacts (SSPs, Risk Assessment Reports, C&A packages, SRTMs) under NSA/CSS RMF and DoD DIACAP. A more senior management/oversight role than the Level 2 ISSM, directing engineering staff and ISSOs; a cleared-government environment is implied.

Summary

A Skill Level 3 Information Systems Security Officer (ISSO) supporting a program or enclave's information assurance program, maintaining operational security posture, performing risk assessments and configuration management, and preparing authorization documentation (SSPs, RARs, C&A packages, SRTMs) under the NIST RMF. The most senior of the ISSO levels in this set, in a classified government environment.

Summary

A Skill Level 2 Information Systems Security Officer (ISSO) supporting a program or enclave's information assurance program — maintaining security posture, performing day-to-day security operations and risk assessments, providing configuration management, and preparing SSPs and C&A documentation under the NIST RMF. A mid-level security-compliance role in a classified government environment.

Summary

A Skill Level 2 Information Systems Security Engineer (ISSE) performing technical security assessments, designing and integrating cybersecurity into networking, computing, and enclave environments, and supporting authorization under NSA/CSS and NIST RMF processes. Despite the Level 2 label, it requires twelve years of ISSE experience, including recent work with access control, PKI, and enterprise security architecture; a cleared-government environment is implied.

Summary

A senior Information Systems Security Engineer (ISSE) role on a classified federal program, serving as the primary security-engineering representative across networking, computing, and multi-enclave environments with differing classification levels, and building cybersecurity into operationally deployed systems under NSA/CSS, DoD, and NIST RMF authorization processes. This Skill Level 3 posting demands a substantial 20 years of ISSE experience and an active clearance; Baltimore-based government work.

Summary

A Skill Level 2 Information Systems Security Manager (ISSM) providing management of a program or enclave's Information Assurance program — proposing and enforcing security policies, managing operational security posture, overseeing configuration management, and directing ISSEs and ISSOs. The work is governance and oversight aligned to NSA/CSS RMF and DoD DIACAP, including risk analysis and authorization documentation; a cleared-government environment is implied.

Summary

This is an Information Systems Security Engineer (ISSE) role on a classified federal contract — a cybersecurity engineering position centered on technical security assessments, designing secure networking/computing/enclave environments, and shepherding systems through certification and accreditation under NSA/CSS, DoD, and NIST Risk Management Framework processes. Despite being labeled Skill Level 1, it requires 7 years of ISSE experience and a relevant bachelor's (or 11 years without), plus an active TS/SCI clearance (per the program's standard); Baltimore-based.

Summary

A Skill Level 1 Information Systems Security Officer (ISSO) maintaining the operational security posture of assigned systems, performing configuration management and vulnerability/risk assessments, and preparing security documentation under the NIST Risk Management Framework. An entry/junior security-compliance role requiring 5 years of ISSO experience (or 9 without a degree); a cleared-government, classified environment is implied.

Summary

A Senior Cybersecurity Engineer at Skyline Technology Solutions (Baltimore area) supporting public-sector missions - implementing and modernizing SIEM, EDR, NGFW, and SOAR platforms, developing SIEM detection logic, integrating security telemetry, and leading vulnerability-management reviews. It is hands-on security engineering and detection work across internal and customer environments, acting as a force multiplier for the Cybersecurity Manager. A fit for a security engineer with SIEM/detection-engineering depth rather than an application developer.

Summary

Despite the security title, this is a network and computer hardware field-engineering role: procuring and acceptance-testing equipment, preparing hardware specifications and site technical design packages, conducting site surveys, and directing hardware installations of servers, networking devices, storage, and peripherals across CONUS and OCONUS sites. It also covers preventative and remedial hardware maintenance and reliability analyses such as MTBF and MTTR in support of LAN/WAN systems.

Summary

This is a cyber operational planning seat, not a monitoring or defensive analyst role: supporting the Joint Staff, CNMF and Combat Mission Teams with plans, orders and assessments for full spectrum cyber operations, developing measures of performance and effectiveness for CONPLAN and OPLAN work, and participating in joint and operational planning groups. Subject matter includes defensive and offensive operations plus managed attribution and persona management. Requires a BS and 5 years as an intelligence analyst or in a DoD or intelligence community cyber operations role, with an active TS/SCI.

Summary

The research engineer title covers malware analysis and incident handling: static and dynamic analysis and reverse engineering of intrusion artifacts from DoD compromises, extracting indicators, TTPs and heuristics for detection and mitigation, maintaining MD5 hash signature lists, and coordinating malware submissions with antivirus vendors. Also includes log and system analysis across routers, Windows and UNIX, correlation of incidents across reporting, and written analysis reports and leadership briefings. Drafting and implementing incident response policy is part of the scope.

Summary

Security operations center work for a DoD customer: monitoring system logs, network traffic and user behavior through SIEM, IDS and firewall tooling, investigating incidents to determine nature, scope and impact, and working with incident response teams on containment and remediation. It also includes developing enterprise security policies and procedures and maintaining the incident record. Requires 5 years managing a security operations center, familiarity with GovCloud providers and impact levels, DoD 8140 or 8570 IAM Level III certification, and an active TS/SCI.

Summary

Despite the engineer title the described work is cyber policy and governance for a DoD customer: evaluating policies and governance measures against cyber operational risk profiles, assessing infrastructure requests and advising on development, and drafting policy, guidance and procedures for the Global Malware Exploitation Center and its plans of action and milestones. Requires a technical degree, 5 years in cybersecurity and information assurance, DoD 8140 or 8570 IAM Level I certification, an active TS/SCI, and willingness to sit for a polygraph.

Summary

Despite the Applications Engineer title, this is a senior SIEM and security-tooling sustainment role on a classified federal contract: monitoring the health of an Enterprise IT/IC GovCloud security tool suite, performing database administration on those tools, analyzing vulnerabilities and gaps, and evaluating commercial products to remediate them. It is a hands-on government-services position requiring 12 years of experience (less with a degree) and an active TS/SCI clearance with polygraph; posted salary range is $178,000–$260,000 in Baltimore.

Summary

An Information Systems Security Engineer (ISSE) opening at Interclypse; the description is mostly recruiting boilerplate plus the key constraint that the role is on-site only with no remote work available. Expect ISSE security-engineering work on government systems, with specific skills to be learned on the job per the posting.

Summary

An Information Systems Security Officer (ISSO) role on a large Intelligence Community engineering contract, owning the information-assurance program for systems and enclaves — enforcing security policies, maintaining security posture, and preparing SSPs, Risk Assessment Reports, and Certification and Accreditation packages under NISCAP/DIACAP. It requires 15 years of experience, DoD 8570 IAM Level I+, and an active TS/SCI clearance with polygraph, performed onsite in Fort Meade, MD.

Summary

An Information Systems Security Engineer (ISSE) position performing technical security assessments and building information assurance into government systems under NSA/CSS NISCAP and DoD/NIST Risk Management Framework processes. The role is security engineering and accreditation work rather than software development, and it requires a CISSP or CASP plus DoD 8570 IASAE Level 2 compliance.

Summary

A DoD SkillBridge program (for transitioning active-duty service members) blending systems administration and security work at a Maryland cyber startup — vulnerability scanning and patching, network and device monitoring, user/server administration across Windows, Linux, and macOS, and firewall/antivirus configuration plus phishing-prevention training. It asks for 5+ years in cybersecurity or sysadmin work and requires US citizenship.

Summary

A Cybersecurity Engineer 3 supporting U.S. Cyber Command (USCYBERCOM), coordinating with the government to develop offensive and defensive cyber capabilities for full-spectrum military cyberspace operations. Requires an active TS/SCI clearance with CI polygraph (no exceptions), 15 years of experience with a relevant degree, and a DoD 8140/8570 IAM Level II certification; the work centers on cyber engineering, RMF documentation, and technical briefings.

Summary

A senior Information Systems Security Engineer (ISSE Level 3) role designing secure system architectures and leading certification and accreditation activities under NSA/CSS NISCAP and DoD/NIST Risk Management Frameworks. The position is deep information assurance and security engineering work, requiring roughly two decades of ISSE experience and CISSP-ISSEP certification.

Summary

An entry-to-junior SOC analyst role in a 24/7 managed security operations center, monitoring SIEM/EDR/email/cloud alerts across multiple client environments, triaging events, and escalating confirmed incidents per runbooks. It suits 0-2 years of experience with a Security+/CySA+/Network+ certification (or in progress), and requires willingness to work rotating shifts including nights, weekends and holidays. Remote-first with shift-differential pay.

Summary

A penetration tester role on an offensive-security team conducting authorized network, web-application, wireless, and social-engineering assessments for clients across healthcare, finance, and government. Requires 2+ years of hands-on pentesting, tools like Burp Suite, Metasploit, and BloodHound, Active Directory attack knowledge, and at least one cert such as OSCP or GPEN; remote-first with a certification budget.

Summary

A digital-forensics and incident-response (DFIR) role leading engagements from triage through remediation — endpoint/server/cloud/network forensics, malware and memory analysis, and containing ransomware, business email compromise and data exfiltration — plus writing executive-facing incident reports. It requires 3+ years and a certification like GCIH/GCFA/GREM, and includes a 24/7 on-call rotation with paid on-call compensation. Remote-first.

Summary

A senior cyberspace operations planning and site-lead role providing strategic planning and on-site project management for a cyber mission at Fort Meade, including managing cost, schedule, and personnel and serving as the primary customer point of contact. The position is tied to a pending contract award and requires an active TS/SCI with polygraph.

Summary

Despite the title, this is a senior cloud software architecture role designing, modeling, and prototyping data solutions on AWS and coding database interfaces, serving as the primary technical point of contact with customers. It is hybrid with occasional on-site customer interaction and requires 15+ years of systems/software engineering experience, U.S. citizenship, and an active TS/SCI clearance.

Summary

This is an internal audit and risk leadership post inside the Global Risk and Audit Management function reporting to the Chief Risk and Audit Officer, not a hands-on security engineering job. The mandate is dual: own coverage of the company technology risk universe spanning IT, cyber, data, cloud, AI, and third-party risk including Sarbanes-Oxley matters, while championing analytics and automation adoption inside the audit function itself. It is based at the Hunt Valley headquarters, hybrid eligible at about 50 percent onsite per month, and involves regular Audit Committee, CTO, and CISO exposure.

Summary

This role sits on McCormick's cybersecurity leadership team, acting as the connective link between the CISO, technical security teams and the wider business. It develops and tracks cybersecurity strategy, leads cross-functional security programs such as risk assessments, compliance readiness and data-protection initiatives, and builds executive-level dashboards and governance reporting. The position is hybrid (50/50) out of the Hunt Valley, Maryland headquarters.