Cybersecurity Engineer III

The Cybersecurity Engineer III role at Trace3 is an onsite position in Annapolis, MD supporting the design, implementation, and ongoing maintenance of advanced security capabilities. This senior engineering position contributes to security architecture, threat detection, vulnerability management, and incident response across enterprise environments.

Key Responsibilities

• Design, implement, and maintain enterprise security solutions, including firewalls, intrusion detection/prevention, endpoint protection, and identity management tools.
• Develop and enforce security architecture standards across on-premises, cloud, and hybrid environments.
• Develop the Authority-To-Operate (ATO) authorization plan to support CI/CD pipeline(s).
• Perform security assessments and risk analyses for new technologies and system implementations.
• Monitor security events and investigate potential threats using SIEM and security monitoring tools.
• Lead technical investigations and support incident response activities related to security breaches or suspicious activity.
• Conduct threat hunting and analyze indicators of compromise (IOCs).
• Coordinate with internal teams to help contain, remediate, and recover from security incidents.
• Integrate security controls into system architecture and infrastructure deployments.
• Conduct vulnerability scanning and manage remediation activities.
• Assess system and network vulnerabilities and recommend mitigation strategies.
• Support patch management and security configuration compliance.
• Evaluate third-party tools and technologies for potential security risks.
• Ensure systems comply with applicable security standards and regulatory requirements.
• Support implementation of security frameworks, including NIST Cybersecurity Framework, NIST SP 800-53, Risk Management Framework (RMF), and ISO/IEC 27001.
• Assist with security audits, system authorization activities, and related documentation.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related technical field, or equivalent experience (preferred).
• 8+ years of experience in cybersecurity engineering or information security (preferred).
• Experience implementing and managing enterprise security tools, including SIEM, endpoint protection, firewalls, and vulnerability management platforms.
• Strong knowledge of network security, identity management, and security architecture principles.
• Experience with cloud security in environments such as AWS or Microsoft Azure.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience supporting federal government or regulated environments.
• Knowledge of secure system architecture and DevSecOps practices.
• Experience with security automation and scripting (for example, PowerShell, Python, or similar) preferred.

Tools and Technologies

• SIEM
• PowerShell
• Python
• AWS
• Microsoft Azure
• NIST Cybersecurity Framework
• NIST SP 800-53
• Risk Management Framework (RMF)
• ISO/IEC 27001

Compensation

USD 165,000 - 175,000 per year.

Benefits

• Comprehensive medical, dental, and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match
• 529 College Savings Plan
• Health Savings Account
• Life Insurance
• Long-Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Work-life balance and generous paid time off

Physical Demands

• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.

Work Environment and Security Requirements

• This position is performed within a secure, classified workspace.
• Employees must comply with all applicable security protocols and access control procedures, including restrictions on personal electronic devices and the handling of sensitive information.