Baltimore, MD

Cybersecurity Jobs in Baltimore, MD

15 jobs found

Include remote jobs

3d ago

Penetration Tester / Ethical Hacker

CyberLinx Solutions LLC Baltimore, MD

Baltimore, MD

3d ago

Full time Application Security Cloud Platforms Ethical Hacking

Apply Now

Job Description

CyberLinx Solutions LLC is hiring a Penetration Tester / Ethical Hacker in Baltimore, MD for an onsite role. In this position, you will help simulate real-world cyberattacks, identify weaknesses across the environment, and support efforts to improve the organization’s overall security posture.

What You Will Do

The Penetration Tester / Ethical Hacker will conduct structured security testing to uncover vulnerabilities and validate defensive controls. The work will span multiple domains, with a focus on both technical depth and clear communication of results.

Conduct penetration testing across web applications, networks, APIs, and cloud environments
Perform vulnerability assessments and controlled exploitation
Simulate adversary tactics aligned with real-world threat actors
Document findings and produce technical and executive reports
Partner with engineering and security teams to drive remediation
Support Red Team exercises and ongoing continuous security validation

Team Collaboration

This role includes close coordination with internal security functions. You will work alongside the SOC, Threat Intelligence, and Security Engineering teams to proactively identify and address security risks.

Work Focus

Testing activities will be designed to reflect realistic attack behavior, providing actionable insight into where exposures exist and how they can be mitigated. The role also emphasizes repeatable validation through Red Team activities and continuous security testing.

View full job page →

10d ago

Security Engineer III, Splunk Architect

Deloitte Baltimore, MD

Baltimore, MD

10d ago

$103k - $189k/yr Full time Engineer Identity and Access Management Incident Response

Apply Now

Job Description

Join Deloitte’s Cyber team to architect and engineer Splunk capabilities for security monitoring, enterprise logging, and operational analytics.

Responsibilities

Design, implement, and optimize Splunk architectures for security monitoring, log management, and operational analytics
Build and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to client and business requirements
Integrate log and telemetry sources into Splunk, including infrastructure, cloud, application, and security technologies
Support development of threat detection, incident response, compliance monitoring, and operational visibility use cases
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related technical field
Active Top-Secret Clearance
Ability to work onsite up to 5 days a week
Implementing and supporting Splunk Enterprise or Splunk Cloud
Develop Splunk dashboards, reports, alerts, and saved searches
Onboard and normalize log sources from infrastructure, applications, cloud platforms, or security tools
SIEM concepts with security monitoring or threat detection use case experience
Working knowledge of TCP/IP, networking protocols, and system log analysis
Experience with Splunk Search Processing Language (SPL), Splunk data models, and role-based access controls
One or more certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or Splunk Enterprise Security
Ability to travel 20% on average based on client needs and sectors
Legally authorized to work in the United States without employer sponsorship, now or in the future

Preferred

1+ year supporting Splunk in AWS, Microsoft Azure, or GCP
5+ years of Splunk Enterprise Security, Splunk SOAR, or security orchestration workflow experience
5+ years integrating Splunk with endpoint, identity, firewall, or cloud security tools
1+ year experience with Python, automation scripting, or infrastructure as code tools
Experience supporting regulated or federal environments

Successful Candidate Skills

Ability to work independently and collaborate in a team
Effective written and verbal communication skills
Meticulous attention to detail and quality of work product
Ability to build and sustain professional relationships
Ability to lead projects or workstreams
Ability to manage and prioritize multiple tasks in a fast-paced environment
Strong interpersonal skills and professional demeanor
Ability to meet deadlines
Ability to provide clear guidance to others

Technologies

Splunk Enterprise
Splunk Cloud
Splunk Search Processing Language (SPL)
TCP/IP
SIEM
Splunk dashboards, Splunk alerts, Splunk reports, saved searches
Splunk data models
Role-based access controls

Location and Salary

Baltimore, MD (onsite)
USD 102,500 - 188,900 per year

Team and Offering

Deloitte’s Deloitte Cyber team focuses on the unique challenges and opportunities businesses face in cybersecurity
Cyber defense and resilience offering supports managing and protecting dynamic attack surfaces, enabling rapid crisis and cyber incident response for readiness, response, and recovery

Role Context

Security Engineer III (Splunk Architect) role on Deloitte’s Cyber team
Designs, implements, and optimizes Splunk solutions for security monitoring, visibility, and enterprise logging strategies
Combines hands-on Splunk engineering with architecture responsibilities to support threat detection and operational resilience

View full job page →

10d ago

Security Engineer III, Red Team Operator

Deloitte Baltimore, MD

Baltimore, MD

10d ago

$111k - $218k/yr Full time Adversary Emulation C2 Framework Cloud Platforms

Apply Now

Job Description

Security Engineer III, Red Team Operator will support authorized adversary emulation to improve detection, response, and resilience through controlled offensive testing activities.

Responsibilities

Plan and execute red team operations across enterprise environments, web applications, cloud platforms, and endpoints
Emulate advanced threat actors using realistic attack paths, tools, and techniques
Simulate reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration
Evaluate security control effectiveness, including monitoring and incident response processes
Conduct phishing, social engineering, and credential attack exercises where authorized
Develop custom payloads, scripts, and attack workflows to support engagements
Document findings, attack chains, defense gaps, and remediation recommendations
Provide after-action reports and technical debriefs to stakeholders, including leadership
Collaborate with blue teams, detection engineers, and security leadership to strengthen defensive capabilities
Maintain strict adherence to rules of engagement, legal requirements, and operational safety

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field
Active Top-Secret Clearance
Ability to work onsite up to 5 days a week
Knowledge of network architecture, protocols, and techniques (including tunneling)
Hands-on offensive security experience in red teaming, purple teaming, or adversary simulation
Strong knowledge of enterprise attack techniques across Windows, Active Directory, Linux, cloud, and identity environments
Experience with command and control frameworks, privilege escalation, lateral movement, and evasion techniques
Proficiency with tools including Cobalt Strike, Mythic, Metasploit, BloodHound, Burp Suite, Nmap, and PowerShell or Python
Experience with MITRE ATT&CK mapping and threat emulation
Ability to write high-quality reports connecting technical findings to business risk
CRTO (Certified Red Team Operator) or OSCP (Offensive Security Certified Professional)
Ability to travel 20% on average
Legally authorized to work in the United States without employer sponsorship, now or at any time in the future

Technologies

Cobalt Strike
Mythic
Metasploit
BloodHound
Burp Suite
Nmap
PowerShell
Python
MITRE ATT&CK
Active Directory
Linux
Windows
Cobalt Strike (C2 Framework)
Havoc
Sliver
AWS
Azure
GCP

The Team

Cyber Defense & Resilience supports clients defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence
Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response to enable readiness, response, and recovery from business disruptions

Preferred

Experience with C2 frameworks such as Cobalt Strike, Havoc, Mythic, and Sliver
Experience with cloud red teaming in AWS, Azure, or GCP
Familiarity with detection engineering, SIEM, EDR, and purple team exercises
Experience developing custom tooling or modifying public offensive tools
Knowledge of malware analysis, reverse engineering, or exploit development

Location

Baltimore, MD (onsite)

Compensation

Salary range: USD 110,700 - 218,300 per year

In making compensation decisions, Deloitte considers a wide range of factors; a reasonable estimate of the current range is $110,700-$218,300, and it is not typical to hire at the top of the range. Compensation depends on the facts and circumstances of each case.

Minimum Experience

2 years

View full job page →

11d ago

Principal / Senior Principal Embedded Systems Security Engineer

Northrop Grumman Baltimore, MD

Baltimore, MD

11d ago

$120k - $179k/yr Full time Senior Anti Tamper Cyber Security

Apply Now

Job Description

Lead embedded systems security efforts for sensor payload and mission systems in a 100% onsite role.

Responsibilities

Implement and support compliance with government policies (including JSIG and DAAPM) by reviewing process tailoring needs and approving documented procedures
Perform analyses to validate security requirements and define additional safeguards to improve overall system security
Support formal Security Test and Evaluation (ST&E) activities through pre-test preparation, active testing support, result analysis, and preparation of required reports
Document findings from Assessment and Authorization efforts, including technical work and coordination activities
Prepare and maintain system Security Plans and keep the Plan of Actions and Milestones (POA&M) updated
Oversee and communicate exportability analyses and required modifications for system, subsystem, or sensor exportability, ensuring alignment with international standards
Collaborate with program teams and global Business Development personnel to incorporate international requirements and features into design processes and support product line initiatives for global markets
Apply full life cycle development experience including architecture design, trade studies, cybersecurity requirements formulation, detailed design, unit testing, system testing, and validation and verification practices
Drive cybersecurity technology development planning aligned to global strategic priorities and inform current and future policies
Use reverse engineering techniques to architect and validate cybersecurity solutions
Participate in communities of practice to strengthen domain knowledge and support continuous professional growth

Requirements

Principal Basic Qualifications: Bachelor’s degree with 5 years of experience, or Master’s degree with 3 years, or PhD with 1 year in Science, Technology, Engineering, or Mathematics (or related technical fields; an additional 4 years of experience may be considered in lieu of a degree)
Senior Principal Basic Qualifications: Bachelor’s degree with 8 years of experience, or Master’s degree with 6 years, or PhD with 4 years in Science, Technology, Engineering, or Mathematics (or related technical fields; an additional 4 years of experience may be considered in lieu of a degree)
U.S. Citizenship required
Active/Current DoD Secret Clearance required
Ability to obtain and maintain Special Access Program (SAP) access prior to start
2 years of system engineering experience with DoD-based platforms, sensors and/or subsystems (including examples such as EO/IR, embedded software or cryptography, satellite, architecture development, hardware design, RF, radar, and undersea sensors)
2 years of experience with requirements development, derivation, system integration & test, and validation and verification
2 years of experience with anti-tamper, reverse engineering, and/or Risk Management Framework and cyber resiliency

Technologies / Keywords

JSIG, DAAPM, ST&E, POA&M
Risk Management Framework, Cyber Resiliency
Anti-tamper, Reverse Engineering
Cryptography, EO/IR
RF, Radar, Undersea Sensors, Satellite
SAP

Benefits

Health Plan
Savings Plan
Paid Time Off
Additional benefits including Education Assistance, Training and Development, and 9/80 Work Schedule (where available)
Comprehensive benefits package including health insurance coverage, life and disability insurance, company-paid holidays, and PTO

Relocation Assistance

Relocation assistance may be available

Clearance and Work Conditions

Clearance required for start: Yes
Clearance type: Secret
Travel: Yes, up to 10%
Onsite requirement: 100% onsite
Contingent conditions: Contract award, successful transfer of an active DoD Secret Clearance, and ability to obtain Special Program Access
Position may be filled as a Principal Embedded Systems Security Engineer or Senior Principal Embedded Systems Security Engineer

Preferred Qualifications

Advanced degrees in Science, Technology, Engineering or Mathematics (or related technical fields)
Active Top Secret Clearance or higher
Experience with Hardware (Firmware) Assurance, Software Attack Surface Analysis Report, Select Software/Firmware Encryption, and Secure Key Handling
Experience identifying and mitigating software assurance vulnerabilities and performing integration testing of mitigation/resolution
Experience contributing to and/or making technical presentations to internal and external customers

View full job page →

12d ago

Senior Application Security Pentester

Independent Security Evaluators Baltimore, MD 🇺🇸 Remote

Baltimore, MD

12d ago

$115k - $165k/yr Full time Senior Application Security Information Security

Apply Now

Job Description

Independent Security Evaluators (ISE) supports security professionals who want to do hands-on application testing with real-world impact. This senior role is built around meaningful client assessments, research, and collaboration, backed by a flexible schedule, work from home options, and unlimited vacation. ISE also offers a $0 health premium plan option, including coverage for a spouse and family, plus opportunities to research and publish and speak at major security events and conferences. The environment is relaxed and team-led, with a culture that encourages mentorship and continuous improvement.

Responsibilities

Serve as a project lead, senior analyst, or in a scoping capacity for client engagements
Mentor junior analysts across client assessments, research projects, findings reviews, and professional and technical development
Conduct hands-on security assessments and reviews across technology domains, including:
- Web applications and APIs
- Mobile applications
- Networks
- Cloud architecture and configuration
- Source code analysis
- Hardware and firmware
Produce comprehensive assessment reports that identify vulnerabilities, explain their impact on clients' digital assets, and outline remediation strategies
Provide consultative guidance to clients on best practices, design guidance, and emerging threats, along with relevant policies and processes
Perform research and develop whitepapers, presentations, and other materials aligned to research interests and expertise
Opportunity to participate in IoT Village

Requirements

6+ years in security consulting focused on application or software
Experience with programming and developing exploits
Familiarity with Unix command line tools and working in CLI environments
Advanced skillset in web and desktop application security
Advanced skillset in cloud security and architecture
Basic skillset in mobile application security
Background in software vulnerability analysis, code analysis, and fuzzing
Background in reverse engineering through static and dynamic analysis
Background in analyzing cryptographic workflows
Background in analyzing network traffic
Experience interacting with clients in a consultative environment
Strong technical writing and oral communication skills
Public speaking experience
Desire to make things better through help for clients and growth for colleagues, along with self-motivation and a continuous improvement mindset

Salary and location

Location: Baltimore, MD (remote)

Compensation: $115,000 - $165,000 per year, depending on experience

What you won't do at ISE

Rely on scanners as the primary approach (scanning tools may be used occasionally, but assessments are designed to find what scanners miss)
Write policy or compliance rules or assess tools strictly for regulatory purposes
Work only “head down” without client interaction (the role includes discussion with clients, mentoring, and collaboration on projects, talks, and research)

Nice to have

IoT hardware security
Network security
Red Teaming
AI security
Experience with digital rights management and digital watermarking
Experience with secure software development
Familiarity with industry standard security policies and practical applications (SOC2, OWASP ASVA, GDPR, ISO 27001, PCI, NIST CSF, etc.)
Experience assessing generative AI technologies and applications

Benefits

Flexible schedule
Work from home options
Unlimited vacation
$0 health premium plan option, including spouse and family
Opportunities to research and publish, and to speak at major security events and conferences
Leadership and peers that support and mentor you (your growth is their growth; your success is their success)
Relaxed and fun environment: ditch the suit and tie, sit or stand at your desk, or find a sofa

Note: ISE is connecting with Senior level Application Security Pentester/Analyst candidates and is not currently hiring for this role.

View full job page →

13d ago

Application Security (AppSec) Engineer - AI Trainer

DataAnnotation Baltimore, MD 🇺🇸 Remote

Baltimore, MD

13d ago

$50 - $100/hr Contract Ai Security Ai Training Application Security

Apply Now

Job Description

Benefits

Fully remote work from anywhere in the US, Canada, UK, Ireland, Australia, and New Zealand.
Flexible schedule that lets you choose projects and set your own hours from your own device.
Competitive pay at 50 to 100 USD per hour, with potential higher bonus rates on select projects.
Impactful work that helps shape AI technologies used in cybersecurity.

In this contract role, you will help train AI driven security models by assessing AI produced cybersecurity content, solving technical security problems, and guiding how AI systems reason about threats. The position is remote with flexible hours and competitive compensation.

Responsibilities

Assess AI produced cybersecurity content, including threat analyses, vulnerability reviews, and offensive techniques, for real world accuracy and applicability.
Design and tackle security oriented technical challenges used to train AI systems.
Write clear technical explanations and security relevant code.
Provide feedback that shapes the next generation of AI security models.

Requirements

2+ years of hands-on experience in a cybersecurity role, such as penetration testing, red teaming, incident response, detection engineering, DFIR, malware analysis, threat intelligence, or adjacent fields, including government or military cyber operations.
Some coding experience required; comfort navigating and patching a codebase is key.
Fluency in English (native or bilingual level) with strong writing skills.

Payment is made via PayPal. This job is only available to those in the US, Canada, UK, Ireland, Australia, and New Zealand.

View full job page →

14d ago

Principal Classified Cybersecurity Analyst

Northrop Grumman Baltimore, MD

Baltimore, MD

14d ago

$109k - $163k/yr Full time Senior Analyst Cybersecurity Tools

Apply Now

Job Description

On-site role in Baltimore, MD for a Principal Classified Cybersecurity Analyst with Northrop Grumman, focused on information systems lifecycle security, audits, compliance, and A&A/ST&E activities.

Responsibilities

Conduct system audits and continuous monitoring across security controls, configurations, and operational processes to evaluate the information systems security posture.
Assess systems and networks within the enclave to identify deviations from approved configurations, enclave policy, or local policy.
Analyze to validate established security requirements and recommend additional safeguards and controls.
Assist in implementing required government policy, advise on process tailoring, and participate in and document process activities.
Establish rigorous program control processes to mitigate risks and support the Assessment and Authorization (A&A) of systems, including process support, coordination, security certification testing, documentation, investigations, hardware/software introduction and release, emerging technology research, inspections, and periodic audits.
Support the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, test participation, analysis of results, and reporting.
Document A&A results and related technical or coordination activities, building the Risk Management Framework body of evidence.

Requirements

Master’s degree with 3 years of experience, Bachelor’s degree with 5 years, Associate degree with 7 years, or High School Diploma/GED with 9 years of experience in lieu of a degree.
Must meet U.S. Government 8140 requirements for Principal Cybersecurity Analyst – Security+.
Current U.S. Government Top Secret clearance (minimum), with a closed investigation date within the last 6 years, or enrolled in the Continuous Evaluation (CE) program to be considered.
Ability to obtain and maintain access to Special Access Programs as a condition of employment.

Technologies

ACAS
Nessus
Splunk
Trellix
SCAP
NIST
JSIG
DAAG
SSPs
POA&Ms
SCTMs

Benefits

Flexible work arrangements
Phenomenal learning opportunities
Exposure to a wide variety of projects and customers
Friendly team environment
Exceptional benefits and healthcare
9/80 work schedule
Strong 401(k) matching program

Relocation Assistance

Relocation assistance may be available

Travel

Travel required up to 10 percent of the time

Preferred Qualifications

Bachelor’s degree in Cybersecurity or a related field
Experience with cybersecurity compliance, including RMF A&A
Knowledge of security tools such as ACAS, Nessus, Splunk, Trellix, and SCAP
Familiarity with security frameworks and documentation such as NIST, JSIG, DAAG, SSPs, POA&Ms, and SCTMs