Gaithersburg, MD

Cybersecurity Jobs in Gaithersburg, MD

5 jobs found

Include remote jobs

1d ago

IT Technology Architect

Montgomery County Public Schools Gaithersburg, MD

Gaithersburg, MD

1d ago

$45 - $65/hr Full time Backend Developer Application Security Azure Solutions Architect

Apply Now

Job Description

Montgomery County Public Schools seeks an onsite IT Technology Architect to design privacy-by-design architectures for educational technology systems handling student and staff data.

Responsibilities

Design and implement privacy-by-design principles across application and system architectures handling student and staff data
Ensure compliance with education data privacy regulations throughout the data lifecycle, including FERPA, COPPA, and other state-specific requirements such as Maryland's Student Data Privacy Act (MODPA)
Conduct Data Privacy Impact Assessments (DPIAs) for new educational technologies
Provide architectural recommendations to mitigate privacy risks
Assess and apply best practices (including Application Lifecycle Management (ALM)) to support cost optimization
Collaborate with IT security to enforce security and audit controls
Develop and maintain architectural documentation, including roadmaps, district-wide system blueprints, and design specifications, and ensure required capabilities are met
Collaborate with cross-functional teams to define technical and functional requirements for architectural designs
Provide expert support for enterprise-wide technology applications and platforms
Use a multi-discipline approach across requirements gathering, solutions engineering, reliability, resiliency, solutions development, R&D integration, test and evaluation, maintainability, and analysis across application architectures
Assist with design, implementation, maintenance, and day-to-day operations of enterprise-wide systems
Serve as lead technical expert for a specific program area, including project management responsibilities
Prepare and review Request for Information (RFI) and Request for Proposal (RFP) responses to identify new technologies
Establish and maintain vendor relationships and coordinate with contracted personnel
Define and document repeatable processes and procedures for transitioning new technologies and integrating new applications into current infrastructure
Identify, troubleshoot, research, and resolve routine issues across varied systems, platforms, and applications to maintain system security, confidentiality, compatibility, and functionality in line with policies, procedures, and regulations

Requirements

Demonstrated knowledge of standard computer and network operating systems, protocols, and software, with advanced proficiency in standard and ad hoc applications
Knowledge of, or ability to quickly learn, educational technology requirements
Ability to determine priorities, allocate resources, manage projects, and measure/analyze results
Effective oral and written communication skills
Ability to leverage software development and industry-standard solutions to automate required tasks
Understanding of relationships between solution components and non-solution components
Demonstrated proficiency designing and implementing comprehensive frameworks and processes (e.g., ALM), ideally within an organization with diverse user groups
Experience mapping system requirements to architecture and conducting configuration management of system configurations
Proficiency developing technical specifications and interface control documents, including integration plans and schedules, interservices support agreements, system behavior diagrams, sequence diagrams, and network diagrams
Strong understanding of Agile and DevOps methodologies, with extensive experience with ALM across various tools and platforms
In-depth knowledge of governance frameworks and best practices such as TOGAF and ITIL, and ability to coordinate with a wide range of stakeholders, including non-technical users
Knowledge of education-specific data privacy principles and regulations (e.g., FERPA, COPPA, CIPA) and experience with privacy enhancing technologies (PETs) and secure coding practices
Proficiency designing secure and scalable cloud-based architectures (e.g., Azure, AWS), including network security, identity and access management, and data encryption techniques
Ability to write and code custom reports for various education tools
Excellent analytical, problem-solving, and communication skills with the ability to work independently and collaboratively in a dynamic educational environment
Considerable knowledge of enterprise systems architecture, including Windows/Linux/Unix Server environments, cloud and hybrid cloud design, virtualization platforms, enterprise storage, backup and recovery, disaster recovery, threat intelligence, infrastructure automation, configuration management, patch management, monitoring, identity and access management, server security controls, and Infrastructure as Code (IaC)
Demonstrated ability to architect and implement automated enterprise infrastructure solutions using scripting, configuration management, orchestration, and IaC technologies to support hybrid Windows Server and Microsoft Azure environments, improve operational efficiency, reduce manual administration, enforce configuration standards, and accelerate infrastructure modernization initiatives
Knowledge of and ability to meet the seven core competencies of the Supporting Services Professional Growth System (SSPGS) (Supporting Services Professional Growth System core competencies include commitment to students, knowledge of job, professionalism, interpersonal and communication and organizational skills, and problem-solving competencies)
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related technology field
Minimum experience: 6 years in technology, with at least 3 years in an architectural role focusing on enterprise-level systems
Experience managing enterprise technology security, upgrades, and maintenance; implementing and monitoring complex applications; responding to issues timely; preventing client impacts by adhering to SLAs; maintaining and documenting versioning controls and system performance degradation
Experience with complex and custom enterprise legacy systems and cloud platforms
Experience managing a mixture of legacy code and modern technology
Experience working with remote contracting teams
Experience creating technology workflow diagrams and gathering business functional and technical requirements
Experience writing and maintaining scripts for infrastructure automation
Experience with authentication, authorization, and rostering (e.g., LDAP, SAML, OAuth, and others)
Preferred tools/skills: Puppet, Ansible, Terraform, GIT, PowerBI, Python, and/or SQL

Technology

FERPA, COPPA, Maryland's Student Data Privacy Act (MODPA), CIPA
Application Lifecycle Management (ALM)
TOGAF, ITIL
Azure, AWS
Puppet, Ansible, Terraform, GIT
PowerBI, Python, SQL
Agile, DevOps, Infrastructure as Code (IaC)
Windows Server, Linux, Unix
LDAP, SAML, OAuth
PETs
Infrastructure automation, configuration management, patch management, monitoring
Identity and access management, virtualization platforms

Role & Logistics

Location: Gaithersburg, MD (onsite)
Schedule: Full-time, 1.000 (80 hours bi-weekly)
Working months: 12
Shift: Day Job
Job: Information Technology
Grade: 27 (Optimal Qualified)
Offices Dept: Infrastructure/Operations
Compensation: USD $45 - $65 per hourly (wage range $45.14 to $65.91 per hour based on years of service)
Physical demands: None
Special requirements: None
Application screening: Applicants meeting minimum requirements based on submitted materials will be contacted for an assessment prior to interviews
Posting window: Nov 11, 2026, 11:26:23 AM - Nov 20, 2026, 10:59:00 PM

For information about benefits, please follow the link provided in the original posting.

View full job page →

29d ago

Oracle Security Analyst

i360technologies, Inc. Gaithersburg, MD

Gaithersburg, MD

29d ago

$80k - $106k/yr Full time Cloud Platforms Identity and Access Management Information Security

Apply Now

Job Description

i360technologies, Inc. is hiring a Senior Oracle Security Analyst/Oracle Security Consultant to lead Oracle Fusion Cloud security architecture for a federal financial management modernization program.

Responsibilities

Design the Oracle Fusion Cloud security architecture for enterprise use
Define the enterprise RBAC (role-based access control) strategy
Design job, duty, and data roles aligned to security requirements
Develop security matrices and access-control models
Design Segregation of Duties (SoD) controls
Support IAM integrations for Oracle Fusion and related components
Define security requirements for Fusion, OIC, and PaaS components
Support security assessments and audit requirements
Support ATO documentation and remediation activities
Coordinate with cybersecurity, functional, and technical teams across the program
Maintain control effectiveness through releases and configuration changes
Use AI tools to accelerate analysis and documentation, and mentor junior team members on using AI safely

Requirements

3+ years of Oracle application security experience
Strong, hands-on experience with Oracle Fusion Cloud security
Experience designing RBAC and SoD controls
Knowledge of IAM and security integration
Experience designing enterprise Oracle security models
Strong background in audits and security controls
Demonstrated use of AI tools to accelerate analysis, documentation, or problem solving

Technologies

Oracle Fusion Cloud, Oracle Fusion, OIC
PaaS
NIST 800-53
FISMA
FedRAMP
Claude, ChatGPT, Copilot
HSPD-12 Personal Identity Verification (PIV)
FBI fingerprinting

Preferred Experience

Knowledge of FISMA, NIST 800-53, or FedRAMP
Experience supporting an ATO
Federal financial system experience

Security & Eligibility Requirements

U.S. citizenship or Lawful Permanent Residency with a minimum of three (3) years of U.S. residency
Successful completion of a Moderate Risk background investigation and FBI fingerprinting
Eligibility to obtain and maintain an HSPD-12 PIV credential
Execution of a Non-Disclosure Agreement (NDA)
Compliance with agency Security Rules of Behavior
Completion of required cybersecurity and privacy awareness training
Work performed within the United States; remote access from foreign locations is not permitted
Employment contingent upon contract award and Government approval of candidate qualifications

AI in the Role

Use AI tools such as Claude, ChatGPT, Copilot, or similar
Analyze role and access designs and draft security matrices
Accelerate ATO documentation work
Map security controls to NIST requirements
Review SoD conflicts and research Oracle security features
Support early-career colleagues in using AI safely with sensitive information
Demonstrate how AI improves speed and quality of delivery

Job Details

Location: Gaithersburg, MD (onsite)
Salary: USD 80,000 - 106,000 per year

Benefits

Referral Bonus
(401k) Matching
Holidays – Eleven
Technology Reimbursement
Short-Term & Long-Term Disability
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (0-3 years - 15 Days PTO | 3+ years 20 Days)
80% Employer Paid Health Care Plan (Medical, Dental & Vision)

View full job page →

30d ago

Cybersecurity GRC Engineer

X Energy, LLC Gaithersburg, MD

Gaithersburg, MD

30d ago Closed

$113k - $128k/yr Full time Cloud Platforms Cloud Security Cybersecurity Tools

This position is no longer accepting applications (closed Nov 13, 2026).

Job Description

In this role, you will support cybersecurity Governance, Risk, and Compliance (GRC) practices for nuclear facility design and engineering, with a focus on the Xe-100 advanced nuclear reactor. You will help integrate cybersecurity requirements, risk management, and regulatory compliance across IT and OT systems throughout the plant lifecycle.

Location and Work Arrangement

Gaithersburg, MD (hybrid)

Salary and Employment Type

Salary: USD 112,500 to 128,250 per year
Classification: Full time, Exempt
Compensation note: Compensation ranges listed for US job postings reflect base salary only and do not include benefits or other incentives.

Key Responsibilities

Execute advanced threat hunting activities using known adversary tactics, techniques, and procedures, along with indicators of attack to detect adversaries.
Develop threat intelligence capabilities to detect, respond to, and help defeat advanced persistent threats (APTs).
Develop and produce reports on activities and incidents to maintain day-to-day status, track and report trends, and provide situational awareness.
Identify and remediate control weaknesses.
Review data with firewall administrators, engineering, system administrators, and other relevant teams to determine the risk associated with security events.
Perform complex, senior-level information security analysis.
Develop and recommend safeguarding plans for computer, server, network configurations, and data files to prevent accidental or unauthorized modification, destruction, or disclosure, including support for emergency data processing needs.
Execute performance and reviews of technical risk assessments for both new and existing applications.
Develop and implement systems and procedures to prevent, detect, contain, and correct data security breaches.
Maintain a professional demeanor and behavior in all forms of communication.
Perform other duties as assigned by the manager.

Required Qualifications

Education: High school diploma or equivalent
Experience: Typically 5 years of experience in a cybersecurity role
Knowledge of ServiceNow platform capabilities, modules, and best practices
Experience in ServiceNow development and architecture
Familiarity with ITIL processes and service management principles
Technical skills including scripting, workflow configuration, and business rule development
Ability to independently design and lead complex user interfaces, integrations, and workflows
Proficiency in JavaScript, AngularJS, HTML, CSS, and ServiceNow Glide API
Knowledge and experience managing cybersecurity tools such as NDR, EDR, and SIEM
Experience with Azure and AWS
One or more of the following certifications is required: CISSP, CISA, GIAC (Global Information Assurance Certification), GCIH, GPEN, GICSP, or equivalent
Identity and Access Management technologies including Federation, Multi-Factor Authentication (MFA), and Public Key Infrastructure (PKI)
Cloud technologies including AWS, Azure, Docker, Kubernetes, and DevSecOps
Networking, firewall, and software-defined networking
Ability to integrate cybersecurity tools to support an enterprise-level cybersecurity program
Leveraging Artificial Intelligence (AI), Machine Learning (ML), and Orchestration to secure the environment

Tools and Technologies

ServiceNow
ITIL
JavaScript
AngularJS
HTML
CSS
ServiceNow Glide API
NDR
EDR
SIEM
Azure
AWS
Federation
Multi-Factor Authentication (MFA)
Public Key Infrastructure (PKI)
Docker
Kubernetes
DevSecOps
Artificial Intelligence (AI)
Machine Learning (ML)

Benefits

401K plan with an employer match
Medical/Dental/Vision Insurance
Life and Disability Insurance
Paid Time Off
Tuition Reimbursement/Professional Development policy

View full job page →

1mo ago

Senior RMF Security Analyst

Diligent Solutions Gaithersburg, MD

Gaithersburg, MD

1mo ago Closed

Full time Senior Data Security Facilities Management

This position is no longer accepting applications (closed Oct 22, 2026).

Job Description

Diligent Solutions is seeking a Senior RMF Security Analyst to support federal information systems through RMF Steps 1–3. In this hands-on role, you will develop and maintain RMF security documentation to help systems achieve, maintain, and renew Authorities to Operate (ATOs).

This position is based in Gaithersburg, MD on a hybrid schedule, with work focused on producing accurate, complete, and review-ready authorization package artifacts.

Key Responsibilities

Collect and update general system information for federal RMF documentation.
Create and maintain system records in CSAM, including system identification information, system descriptions, and technical narratives.
Prepare and update Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs).
Perform and update FIPS 199 security categorizations.
Perform and update E-Authentication Risk Assessments.
Identify common and inherited security controls, including controls inherited from FedRAMP-authorized services.
Develop and update compliance descriptions for applicable NIST SP 800-53 controls, including tailoring decisions.
Develop and update compensating controls when required.
Develop and update Contingency Plans and related testing and training documentation.
Develop and update documentation including System of Records Notices, Configuration Management Plans, Incident Response Plans, Business Impact Assessments, and Interconnection Security Agreements.
Finalize System Security Plan compliance descriptions.
Finalize Contingency Plans, Configuration Management Plans, Incident Response Plans, and Disaster Recovery Plans, as required.
Assist government stakeholders with addressing findings and updating documentation during concurrence and authorization reviews.
Coordinate with technical and business stakeholders to ensure RMF documentation is accurate, complete, consistent, and ready for authorization review.

Requirements

U.S. citizenship.
Bachelor’s degree and at least eight years of relevant cybersecurity experience.
Experience completing all aspects of the NIST Risk Management Framework for federal information systems.
Hands-on experience developing and maintaining federal A&A and authorization packages.
Working knowledge of the NIST Risk Management Framework.
Working knowledge of FIPS PUB 199.
Working knowledge of NIST SP 800-53 Rev. 4 and/or Rev. 5.
Working knowledge of NIST SP 800-37 Rev. 2.
Working knowledge of NIST SP 800-171 Rev. 2.
Working knowledge of NIST SP 800-47 Rev. 1.
Working knowledge of other publications and guidance related to the federal RMF process.
Hands-on experience using Cybersecurity Assessment and Management System (CSAM).
Experience supporting ATOs involving FedRAMP-authorized products, solutions, or platforms.
Experience developing SSPs, contingency plans, incident response plans, configuration management plans, business impact assessments, interconnection security agreements, and privacy documentation.
Strong technical-writing skills, with the ability to produce accurate, complete, and Section 508-compliant documentation.
Ability to appropriately handle Controlled Unclassified Information and other sensitive government information.
Ability to successfully obtain and maintain the required federal background investigation, suitability determination, facility access, and PIV credential.

Technology and Standards

Cybersecurity Assessment and Management System (CSAM)
FedRAMP
NIST Risk Management Framework
FIPS PUB 199
NIST SP 800-53 Rev. 4 and NIST SP 800-53 Rev. 5
NIST SP 800-37 Rev. 2
NIST SP 800-171 Rev. 2
NIST SP 800-47 Rev. 1
Section 508

Location

Hybrid (Beltsville, Maryland)

Preferred Qualifications

Prior federal civilian-agency A&A experience.
Prior USDA cybersecurity or RMF experience is a plus.
Experience with the USDA Six-Step RMF Process or USDA CSAM instance is a strong plus.
Experience independently supporting RMF activities across multiple federal information systems.
Active certification such as CISSP, CGRC (formerly CAP), or CISM.
Current or prior federal Public Trust investigation.

View full job page →

3mo ago

Penetration Tester

Connsci Gaithersburg, MD

Gaithersburg, MD

3mo ago Closed

$100k - $130k/yr Full time Application Security Cloud Platforms Compliance Testing

This position is no longer accepting applications (closed Sep 12, 2026).

Job Description

Connsci is seeking a Penetration Tester to support a government program through hands-on penetration testing, vulnerability and compliance testing, and audit and reporting activities. This position is primarily remote, with travel required on an as-needed basis across Florida and the Washington DC metro region.

Role Overview

The Penetration Tester will perform security testing across networks, systems, endpoints, and cloud environments, with an emphasis on web application, API, and control validation. Responsibilities include documenting findings, preparing audit evidence, and providing recommendations to improve governance, risk, and compliance posture.

Responsibilities

Conduct authenticated vulnerability scans and compliance evaluations across networks, systems, endpoints, and cloud platforms.
Assess agency web applications using OWASP Top 10 and industry best practices.
Perform authenticated and unauthenticated scanning activities using tools such as Burp Suite and OWASP ZAP.
Identify vulnerabilities including injection flaws, authentication weaknesses, session mismanagement, and sensitive data exposure.
Validate application security controls against NIST CSF subcategories.
Evaluate REST and GraphQL APIs for authentication, authorization, and input validation weaknesses.
Conduct fuzzing and misuse testing to identify broken object-level authorization (BOLA) and mass assignment vulnerabilities.
Assess security of API tokens, keys, and session management practices.
Review error handling, data leakage, and logging practices to support compliance requirements.
Execute controlled penetration testing (internal and external) to simulate adversary behaviors and assess defensive effectiveness.
Document findings, prepare audit evidence, and provide recommendations for improving governance, risk, and compliance posture.
Provide technical assistance to Agency OIGs and coordinate with operational IT and security teams to ensure findings are actionable and evidence-based.

Required Qualifications

Bachelor's degree in Cybersecurity, Information Systems, or a related field, or equivalent experience.
At least 5 years of penetration testing experience, including web application testing and API testing.
At least 2 years supporting audit, compliance, or oversight functions, including preparing audit-ready documentation, evidence, and reports for executive leadership.
At least 2 years experience with NIST Cybersecurity Framework, including NIST 800-53.
At least one cybersecurity certification, such as CISSP, CISA, CISM, CCE, CFCE, GCFE, or CEH.

Technology & Tools

OWASP Top 10
Burp Suite
OWASP ZAP
NIST CSF
NIST 800-53
REST
GraphQL
BOLA

Location and Travel

Primarily remote work.
As-needed travel to company and government client site locations across Florida and the Washington DC metro region.
Preference for candidates local to the DC Metro Region or who reside in Florida.

Preferred Qualifications

Master's degree in Cybersecurity, Information Technology, or Computer Science.
7+ years of experience in penetration testing.
3+ years of experience with cloud technologies and Cloud Security Posture Management.

Compensation

USD 100,000 - 130,000 per year.

View full job page →

Cybersecurity Jobs in Gaithersburg, MD

IT Technology Architect

Oracle Security Analyst

Cybersecurity GRC Engineer

Senior RMF Security Analyst

Penetration Tester

Get Cybersecurity Jobs in Gaithersburg, MD alerts