Security Engineer

• TSTC is looking for a security engineer lead with depth of knowledge in the nuances of government security engineering requirements and policies.
• Self-motivated, able to work in a geographically dispersed team of highly technical security personnel, and who loves problem solving.
• Combine hand’s on security engineering with the ability to translate that and help manage tasks for more junior level staff and is discussing complex topics with senior leadership.
• Candidates must meet or exceed the stated requirements; be excited to join our team and willing to sign a binding letter of commitment; and can start 2 to 3 weeks after notification of contract award.

Security Engineer – Lead

• TSTC is looking for a security compliance lead with depth of knowledge in nuance of government security compliance requirements and policies.
• We need someone who is self-motivated, able to work in a geographically dispersed team of highly technical security personnel, and who loves problem solving.
• The ideal candidate combines hand’s on security compliance with the ability to translate that and help manage tasks for more junior level staff and is discussing complex topics with senior leadership.
• TSTC is looking for candidates for this Key Personnel position that meet or exceed the stated requirements; are excited to join our team and willing to sign a binding letter of commitment; and can start 2 to 3 weeks after notification of contract award.

Security Compliance Lead

• Execute complete Risk Management Framework (RMF) activities for Authority to Operate (ATO) decisions
• Lead a team of 13 ISSO
• Develop and maintain System Security Plans (SSPs)
• Create and maintain Configuration Management Plans
• Conduct Security Impact Analyses and approve Change Requests
• Develop and test Contingency Plans and Incident Response Plans
• Conduct Risk Assessments, annual security assessments, and vulnerability assessments
• Develop security architecture designs, requirement traceability matrices, and authorization boundary diagrams
• Maintain Hardware and Software Inventory Lists and conduct FISMA Scorecard Analysis

Lead Senior Information System Security Officer

• Provide support to the Test Resource Management Center’s (TRMC) All Domain Test Range (ADTR)
• Evaluate customer requirements pertaining to complex technical challenges
• Collaborate with other distributed team members to discuss current system status and plan desired future enhancements
• Develop, implement, and maintain security policies, procedures, and standards to safeguard organizational information systems

Information System Security Officer – ISSO

• Design and implement cybersecurity solutions
• Provide technical expertise and support for cybersecurity solutions
• Lead technical assessments of systems and applications to ensure compliance
• Develop project scope requirements and support model creation
• Collaborate closely with cross functional IT teams

Cybersecurity Engineer II

• Support secure operations, compliance, risk management, and continuous monitoring for a mission-critical federal grants platform.
• Emphasize federal security requirements, ATO support, POA&M management, incident response, security documentation, and vulnerability coordination.
• Contribute to secure operations through security documentation, continuous monitoring, vulnerability tracking, POA&M coordination, incident response support, ATO activities, and security oversight.
• Support implementation, monitoring, and documentation of federal cybersecurity, privacy, and compliance requirements for Grants.gov applications and platform services.
• Manage and support POA&M activities by tracking findings, coordinating remediation owners, documenting milestones, validating closure evidence, and communicating risk status to program and security leadership.
• Coordinate vulnerability management activities, including scan review, issue triage, remediation planning, exception tracking, patch coordination, and verification of resolved findings.
• Coordinate with development, operations, cloud, database, network, and application platform teams to ensure security considerations are incorporated into releases, configuration changes, deployments, maintenance activities, and enhancements.
• Maintain and update security-related artifacts, including system security documentation, control implementation details, risk registers, incident reports, remediation plans, operating procedures, and compliance evidence.
• Support transition-in and transition-out activities by helping validate security documentation, accounts, certificates, licenses, support systems, inventories, controls, and operational security responsibilities.
• Prepare and communicate security status, risks, issues, remediation progress, incident impacts, control gaps, and compliance recommendations in formats appropriate for executive, federal, technical, and non-technical audiences.

Cybersecurity Specialist

• Develop and maintain Premonition, Comcast’s internal platform for managing, deploying, and composing agentic pipelines.
• Build a robust, scalable platform for LLM and agent driven workflows.
• Optimize the high-performance data layer supporting workflows, including storage formats, compression, latency, and query performance across large datasets.
• Work with large language models, orchestration frameworks, and cyber focused agentic pipelines.
• Partner closely with security operations, incident response, and threat hunting teams to translate real-world workflows into secure, composable, and observable agentic systems.

Cyber Security Engineer – AI & Agentic Platforms

• Monitors relevant Information Sharing and Analysis Centers (ISACs), Security Operations Centers (SOCs), vendor news, and the media reports for any vulnerabilities that could impact a USM organization.
• Selects, implements, and operates the USM vulnerability and threat management tools and systems.
• Assists institutions with addressing any relevant vulnerabilities across all networks, servers, and endpoints.
• Advises institutions on video surveillance and physical security solutions.
• Drafts notices, makes presentations, and ensures that all institutions are aware of any relevant threats and vulnerabilities to their environment.
• Assists in the development, implementation, and operation of a systemwide ISAC/SOC function.
• Researches and assists institutions with implementing any technical best practices in their environments.
• Identifies technical solutions that could address security and privacy requirements.
• Provides project management expertise to USM cybersecurity and privacy projects.
• Establishes and maintains relevant cybersecurity and privacy vendor relationships.
• Assists in the selection, implementation and operation of systemwide cybersecurity and privacy tools.
• Attends meetings and assists with the activities of the USM Privacy Council and USM Security Council.
• Provides technical and forensic assistance with incident and breach response.
• Performs cybersecurity and privacy reviews of 3rd party solutions.

Cybersecurity & Privacy Technology Manager

• Serve as a trusted security advisor to system owners, business owners, and technical teams
• Guide systems through the Risk Management Framework (RMF) and support their Authority to Operate (ATO)
• Develop and maintain authorization documentation, continuous monitoring strategies, contingency planning, and security guidance
• Ensure client systems remain compliant with federal cybersecurity requirements
• Support authorization package development while maintaining appropriate independence from formal Security Control Assessment (SCA) and Final Assessment Report (SAR) validation activities
• Create foundational system documentation, including Boundary Scope Memorandums (BSM), System Architecture diagrams, and Authorization Boundary and Network Diagrams (ABND)
• Validate technical evidence, including configuration artifacts, scan reports, and system documentation, to ensure compliance
• Develop and maintain system-level Contingency Plans (CP), Incident Response Plans (IRP), and Continuous Monitoring (ConMon) Plans
• Facilitate RMF training sessions, office hours, and user guidance

Mid-Level Information System Security Officer – System Owner Support

• Serve as the organization’s primary security leader and trusted advisor, performing many of the responsibilities typically associated with a CISO while partnering with executive leadership on security strategy and execution.
• Develop, implement, and maintain pragmatic, right-sized security policies, standards, and best practices working with the developers as customers.
• Manage relationships with external vendors, consultants, and auditors.
• Lead all Corporate IT functions supporting a fully remote global workforce.
• Manage identity and access management, endpoint management, collaboration platforms, SaaS applications, and the employee technology lifecycle (onboarding, offboarding, provisioning).
• Establish scalable IT processes that support employee productivity and business continuity, and drive continuous improvement of IT service delivery and employee experience.
• Drive pending infrastructure decisions, including VPN strategy, password management, tooling platform consolidation, and certificate lifecycle automation.
• Partner closely with Engineering and Platform teams to remove technical blockers and improve operational effectiveness, including CI/CD, automation, and cloud platform reliability.
• Identify opportunities to leverage AI and automation to eliminate manual processes and operational toil across the organization.
• Evaluate and implement AI-enabled tools that improve productivity, support operations, engineering workflows, security monitoring, and business processes.
• Establish governance and best practices for responsible AI usage within the company.
• Partner with the COO and leadership team to manage IT, infrastructure, security, and cloud-related budgets, including AI tooling spend.
• Monitor and optimize spending across cloud providers, SaaS platforms, security tools, and technology vendors.

Director, IT Security – Compliance

• Owning our compliance program end to end: driving our annual SOC 2 Type 2 audits from evidence collection through auditor walkthroughs, and running Vanta as our governance home base year-round.
• Completing security questionnaires, addendums, and AI risk assessments for the IT and security teams at our hospital clients — and making sure they understand we're doing the right thing. (Health systems ask great, hard questions. You'll have great answers.)
• Running real BCDR tests and treating them like live incidents to find the gaps before the gaps find us.
• Coordinating annual pen tests and driving remediation of findings within SLA.
• Managing security across our stack: AWS, Heroku, Cloudflare, Google Workspace, GitHub, and our communication tools.
• Administering our laptop fleet for a fully remote team — imaging, shipping, MDM enrollment, inventory, and end-of-life — so every machine is encrypted, managed, and remotely wipeable.
• Running access reviews and enforcing least privilege: pruning admin lists, enforcing SSO and 2FA, and tuning password policies.
• Ensuring new employees get access to everything they need on day one, and departing ones are locked out the same day — partnering with HR and Finance on a tight onboarding/offboarding loop through Rippling and Google.
• Evaluating and securing AI tooling — from how our team uses Claude and MCP servers to partnering with engineering on customer questions about AI risk, bias testing, and model governance.
• Doing vendor management and procurement reviews, and finding savings while you're at it.
• Staying on top of the rapidly evolving AI threat landscape and adapting our defenses and team training as fast as the attackers adapt theirs.
• Playing professor and educating our team on everything security.
• Advising leadership on security matters during project planning, and working with our full stack engineers to ship improvements you identify.
• Being the savior in the event of a security incident — leading response, analysis, and the write-up afterward.
• Supporting co-workers when they manage to put their computers in a bad place. (They should enjoy talking to you, and you to them!)

Senior IT/Security Engineer – AI-native

• Lead customer focused workstreams and virtual teams with a clear focus on driving success for our government customers and industry partners
• Serve as the central connector internally between Solution Architects, Project Managers, Forward Deployed Engineers, and other Customer Success Managers
• Orchestrate partnerships and technology collaborations within the NSA industry sphere to accelerate customer adoption and scaling of Virtru solutions
• Manage the customer lifecycle: agreement, commitments, rhythm of business, leadership engagement, value creation
• Identify issues proactively and connect the right people and resources for rapid problem resolution and mission success
• Keep constant pulse on customer and partner health, satisfaction levels, and expansion opportunities
• Be part of the innovative discussions with our strategic customers learning about cutting edge technology in data sharing, data protection, and the AI space

Global Public Sector Customer Success Manager – National Security Ecosystem

• Help define and evolve the vision for NinjaOne’s endpoint management and security capabilities.
• Contribute to and own key parts of the endpoint management and security roadmap.
• Drive product direction for features to identify security gaps, and remediate or protect against them.
• Work closely with engineering, design, support, and other stakeholders to bring new capabilities from concept to delivery.
• Engage with customers, MSPs, and internal teams to understand how endpoint management and security features are used in practice.
• Write clear product requirements, define workflows and edge cases, and ensure features are delivered to a high standard.
• Ensure capabilities work cohesively across NinjaOne and enable other product areas to build on top of them effectively.

Product Manager – Endpoint Management, Security

• performing work on US Government classified environments
• delivering Business Critical Services to customers
• transforming current and future security architecture for customers
• training and mentoring other engineers
• helping customers reduce risk and adopt technology
• collaborating with Cisco Engineering to advocate for innovation

Customer Delivery Consulting Engineer – Security

• Design and implement cybersecurity solutions, upgrades, enhancements
• Provide technical expertise and support for cybersecurity solutions
• Serve as subject matter expert in compliance of secure baseline configurations
• Initiate technical assessments of systems and applications
• Author new cybersecurity standards and procedures
• Serve as technical leader for cybersecurity projects
• Identify threats and develop suitable defense measures
• Lead root-cause analysis on Cyber systems

Cybersecurity Engineer III

• Conduct cybersecurity assessments, audits, and inspections for DoD organizations and partners handling DoD information or connecting to the DoDIN
• Evaluate systems and Defensive Cyberspace Operations using cyber threat emulation and performance-based testing
• Adhere to policies and processes for each assessment type
• Support assessment development and execution to ensure security expertise is properly applied
• Coordinate logistics, test plans, and scope with the SCA Team Lead
• Perform vulnerability assessments, capture results using STIG Viewer or designated tools, and document findings in eMASS
• Analyze security gaps and provide mitigation recommendations
• Validate cybersecurity controls, TTPs, STIGs, RMF controls, and compliance with DoD policies and guidelines
• Provide risk analysis and assessment results for authorization recommendations
• Participate in daily assessment reviews, in-briefs, and out-briefs, sharing findings with the SCA-R
• Mentor and guide personnel by providing technical expertise, best practices, and professional development support to enhance team capabilities and knowledge

Traveling Security Control Assessor

• Assist the Government operating a responsive, courteous, and professional knowledge center
• Provide accurate and complete data concerning Personnel Security for Industry Knowledge Center Support
• Review investigation request submissions for completeness and risk
• Receive and process notifications and notices from Facility Security Officers
• Maintain National Security Databases/Classified Databases to meet program requirements
• Ensure cases are complete and accurate for adjudicative determination

Personnel Security Assistant

• Provide security advisory support to System Owners (SOs), Business Process Owners, ISSMs, and program leadership on matters related to information system security
• Support implementation, maintenance, and continuous improvement of security controls across enterprise systems and applications
• Coordinate and execute RMF activities including system categorization, control implementation, security assessments, authorization activities, and continuous monitoring
• Develop, review, and maintain System Security Plans (SSPs), POA&Ms, Security Assessment Plans, security procedures, and related authorization documentation
• Assess system security posture and recommend corrective actions to address risks, vulnerabilities, and compliance deficiencies
• Conduct security reviews and assessments to validate implementation and effectiveness of security controls
• Collaborate with engineers, system administrators, developers, and government stakeholders to ensure security requirements are integrated throughout the system lifecycle
• Support Authorization to Operate (ATO) activities and ongoing authorization maintenance efforts
• Execute vulnerability management activities including identification, remediation tracking, risk assessment, and validation of corrective actions
• Review and validate access control implementations, privileged account management, hardware inventories, software inventories, and security configurations
• Develop security reports, dashboards, metrics, and recommendations for government leadership
• Support audit activities, compliance reviews, inspections, and security assessments conducted by internal and external organizations
• Provide guidance regarding physical and logical protection of information system assets
• Evaluate security program effectiveness and recommend improvements to policies, procedures, and operational practices
• Support incident response, security investigations, and remediation activities as required
• Advise leadership on emerging threats, cybersecurity risks, and security improvement opportunities

Information System Security Officer

• Develop and execute account plans across assigned agencies
• Build relationships with executive and operational leaders, including CIOs, CISOs
• Identify opportunities to modernize cybersecurity programs
• Position Cisco's Security portfolio to address agency priorities
• Collaborate with Cisco Account Managers, Security Specialists, Solutions Engineers, and partners
• Navigate government procurement processes and funding programs
• Consistently achieve and exceed assigned sales objectives

Federal Civilian Security Account Executive – Architecture

• Develop systems and component architectures and APIs that meet the test of time.
• Articulate and evangelize architectural principles reciprocally with engineering, architecture and product teams that ensure system components fit securely, are sustainable, and align with company’s business direction.
• Analyze and recommend novel technologies, architectural solutions (and associated business cases) to the various technology executives across the company which simultaneously optimize value, risk, spend & design footprints.
• Influence enterprise solutions architects and engineers to define, develop, maintain, and communicate the technology and platform strategy, guidelines, and re-usable design patterns to all levels including the Highmark Health executive team.
• Work with external and internal engineering teams to provide continuous architecture and design mentorship/leadership and be a source of support that ensures successful product delivery and operational excellence in production, including leadership and support for application development and change management activities.
• Establish relationships with key architects and executive technology leadership across the enterprise technology organization and collaborate on promoting architectural standard methodologies.
• Collaborate with key internal and external partners such as security, developers, development managers, product and program management and senior technical and business executives to drive the Architecture strategy, reference enterprise architecture documents, functional specifications, designs, and architectural libraries.
• Resolve approaches for new areas by quickly investigating and synthesizing the state of the art and available technologies including leading the development of enterprise solutions which meet current and future business requirements.
• Take a consultative approach to develop, present and share the value and vision of proposed architectures and solutions to a wide audience.
• Promote architecture standard methodologies and mentor key technical people within the Data Product organization.
• Champion a culture of innovation in an environment that requires high levels of scalability, security and reliability for our most critical enterprise cloud and 'on premise' applications and infrastructure.

Security Engineer jobs in Maryland

See all jobs on JobTailor