Suitland, MD

Cybersecurity Jobs in Suitland, MD

4 jobs found

Include remote jobs

Today

Cybersecurity and Zero Trust Technical Manager

Leidos Suitland, MD

Suitland, MD

Today

$131k - $237k/yr Full time Manager Cloud Platforms Cloud Security

Apply Now

Job Description

Leidos is seeking a Cybersecurity and Zero Trust Technical Manager to lead enterprise cybersecurity operations and modernization efforts for classified environments in support of ONI and HGCC.

Responsibilities

Provide technical leadership across Cyber Defense Operations, Security Engineering, and Assessment & Validation teams
Lead planning, implementation, and optimization of Zero Trust architecture initiatives
Oversee integration, sustainment, and modernization of enterprise cybersecurity tools
Support enterprise security architecture, cloud security, and identity management initiatives
Guide incident response, threat hunting, vulnerability management, and remediation activities
Provide engineering oversight for RMF, security assessments, and compliance activities
Develop technical roadmaps, executive briefings, and engineering recommendations
Coordinate with Government stakeholders to identify risks, improve security posture, and support mission requirements
Mentor cybersecurity engineers, analysts, and technical specialists

Requirements

Bachelor’s degree with 12+ years of cybersecurity, information assurance, or systems engineering experience, or Master’s degree with 10+ years
Active TS/SCI clearance in DISS with required program access
Experience leading technical cybersecurity or engineering teams
Experience supporting DoD, Intelligence Community, or classified environments
Experience with cybersecurity operations, RMF, vulnerability management, and security engineering
Experience implementing or supporting Zero Trust Architecture initiatives

Technologies

Microsoft Defender
Microsoft Sentinel
Entra ID
Azure security services
Splunk
RSA SecurID
Cisco ISE
Cisco Secure Workload
Tanium

Benefits

Health and Wellness programs
Income Protection
Paid Leave
Retirement

Location and Clearance

Location: Suitland, MD (onsite)
Clearance: Active TS/SCI

Preferred Qualifications

CISSP, CISM, CAP, GIAC, CCSP, or equivalent certification
Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Azure security services, Splunk, RSA SecurID, Cisco ISE, Cisco Secure Workload, Tanium, or similar cybersecurity platforms
Knowledge of NIST 800-53, NIST 800-207, ICD 503, and DoD cybersecurity requirements
Experience supporting cloud and hybrid-cloud security environments

Preferred Skills

Cyber Defense Operations (SOC/SIEM)
Zero Trust Architecture
Security Architecture & Engineering
Cloud Security (Azure/AWS)
Identity & Access Management (IAM)
Threat Hunting & Incident Response
RMF & Compliance
Vulnerability Assessment & Remediation
Executive Briefing Development
Cross-Functional Technical Leadership

Salary: USD 131,300 - 237,350 per year

Original posting date: November 6, 2026

Pay Range: $131,300.00 - $237,350.00

View full job page →

7d ago

Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Leidos Suitland, MD

Suitland, MD

7d ago

$108k - $195k/yr Full time Cybersecurity Operations Data Security Identity and Access Management

Apply Now

Job Description

Hands-on Information Assurance and Information Systems security engineering role to secure, administer, harden, and maintain enterprise mission systems in Suitland, MD.

Responsibilities

Act as a primary security engineering resource for enterprise infrastructure, supporting hands-on administration, configuration, security hardening, troubleshooting, and vulnerability remediation.
Research and evaluate cybersecurity tools, technologies, and methodologies to identify opportunities to strengthen enterprise security.
Support architecture and engineering reviews by providing security recommendations for new capabilities, technologies, and infrastructure changes.
Troubleshoot complex security issues spanning storage, networking, operating systems, authentication, and broader enterprise infrastructure.
Perform vulnerability assessments, ethical hacking, and penetration testing to identify and address security risks.
Review and harden storage protocols and services, including NFS, SMB/CIFS, iSCSI, and associated management interfaces.
Apply and validate DISA STIGs, SRGs, vendor security guidance, and industry security best practices.
Configure and maintain secure administrative access using technologies and principles such as SSH, HTTPS/TLS, RBAC, centralized authentication, and least privilege.
Develop and deliver training on cybersecurity tools, technologies, and processes.

Requirements

Education and experience: Bachelor’s degree in Cybersecurity, Electrical Engineering, Information Technology, Information Assurance, or related field with 8+ or 12+ years experience; or Master’s degree with 6+ or 10+ years experience.
Clearance: Active TS/SCI clearance in DISS with required program access.
Security engineering experience, including experience with DoD RMF, ICD 503, and/or the NIST Risk Management Framework.
Extensive experience with Intelligence Community (IC), DoD, DISA, NAVINTEL Cybersecurity, FLTCYBERCOM, and DoDIIS processes, tools, systems, reporting mechanisms, and requirements supporting Assessment and Authorization (A&A).
Software development experience using Java, C, C++, or other programming or scripting languages, including designing and developing host based and network based scanning tools.
Experience with SCAP (Security Content Automation Protocol) based tools and specifications.
Experience installing, configuring, testing, deploying, operating, and maintaining enterprise network based scanning and reporting tools such as Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, and STIG Manager.
Extensive experience hardening modern Unix operating systems (e.g., Oracle Solaris 10/11 and RHEL) and Microsoft Windows environments using STIGs.
Extensive experience securing systems and software in accordance with IC, DoD, and industry security best practices.
Experience developing security controls, testing methodologies, and test procedures for systems, cloud based architectures, and Cross Domain Solutions (CDS).
Demonstrated proactive, results-oriented approach and ability to build effective customer and team relationships.
DoD 8140 IAM Level III approved baseline certification such as CISSP or SecurityX.

Technologies

Java, C, C++
SCAP
Trellix/ESS, ACAS, RedSeal, Evaluate STIG, SteelCloud ConfigOS, STIG Manager
SSH, HTTPS/TLS, RBAC
NFS, SMB/CIFS, iSCSI
DISA STIGs, SRGs
DoD RMF, ICD 503, NIST Risk Management Framework
Oracle Solaris 10, Oracle Solaris 11, RHEL

Benefits

Competitive compensation
Health and Wellness programs
Income Protection
Paid Leave and Retirement

Location: Suitland, MD (onsite)

Clearance: Active TS/SCI

Pay Range: USD 107,900 - 195,050 per year

Original Posting: October 30, 2026

View full job page →

1mo ago

Assistant ISSO/RMF Cybersecurity Analyst

THOR Solutions, LLC Suitland, MD

Suitland, MD

1mo ago Closed

$82k - $112k/yr Full time Cybersecurity Tools Identity and Access Management Incident Response

This position is no longer accepting applications (closed Oct 30, 2026).

Job Description

The Assistant ISSO/RMF Cybersecurity Analyst will support a USCG information technology support services program in Suitland, MD. In this role, you will serve as an Assistant Information System Security Officer (A-ISSO), assisting assigned systems and enclaves through the Risk Management Framework (RMF) and cybersecurity assessment and authorization (A&A) activities.

Role Overview

This position supports RMF execution for assigned programs, organizations, systems, or enclaves. The role includes maintaining RMF documentation packages, supporting security assessments and testing, and assisting with control implementation activities required for accreditation.

Responsibilities

Serve as an Assistant Information System Security Officer (A-ISSO) and participate in the RMF process for assigned programs, organizations, systems, or enclaves.
Gather or generate, assess, and maintain RMF documentation packages tailored to specific systems, including Security Categorization Determinations, Implementation Plans, System Security Plans (SSP), Configuration Management Plans (CMP), Incident Response Plans (IRP), Contingency Plans (CP), authorization documentation, POA&M, Scorecards, Security Assessment Reports (SAR), Continuous Monitoring Strategies, vulnerability scans, hardware/software lists, threat models, cybersecurity strategies, and net (as applicable per assigned package scope).
Ensure system cybersecurity documentation is current and accessible to properly authorized individuals.
Interpret system designs and diagrams to identify data interconnections, interfaces, protocols, and data types, then select appropriate controls to remediate or minimize cybersecurity risk exposure.
Develop plans and perform testing and control assessments to evaluate compliance with applicable security requirements, standards, and best practices.
Conduct STIG/SRG assessments and Security Readiness Reviews (SRR) for operating systems and applications, leveraging automation to improve efficiency.
Conduct and review system scans using automated compliance assessment tools and provide documented results to appropriate stakeholders.
Develop and conduct detailed security assessment briefs and provide cybersecurity risk recommendations to authorizing officials.
Assist ISSOs and Information System Owners with security control implementation, policy development, and Standard Operating Procedures required for accreditation.

Required Qualifications

Bachelor's degree in data science, information systems, computer science, or a related discipline.
At least five (5) years of Information Assurance and A&A experience, including assessment of information system vulnerabilities and participation in the RMF process.
Experience developing and maintaining RMF/authorization documentation packages, conducting security control assessments, and supporting continuous monitoring.
Active/current certifications to qualify as both DoD 8570/8140 IAT Level 2 and IAM Level 2.
DoD 8570/8140 IAT Level 2 certification, fulfilled by one of the following options: CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE (Sec+ CE), EC-Council Certified Network Defense (CND) v3, Red Hat Certified System Administrator (RHCSA), CCNA Security, Global Industrial Cyber Security Professional (GICSP), GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP), CompTIA Advanced Security Practitioner (CASP), Cisco Certified Network Prof. Security (CCNP Security), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), GIAC Certified Enterprise Defender (GCED), or GIAC Certified Incident Handler (GCIH).
DoD 8570/8140 IAM Level 2 certification, fulfilled by one of the following options: CompTIA Advanced Security Practitioner (CASP), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Chief Information Security Officer (C-CISO), HealthCare Info. Security and Privacy Practitioner (HCISPP), Red Hat Certified System Administrator (RHCSA), Certified Authorization Professional (CAP), or GIAC Security Leadership (GSLC).
Proficiency in Microsoft Office suite and SharePoint.
Knowledge of data governance and data framework compliance.
Strong organizational and communication skills.

Technologies and Skills

Microsoft Office suite, SharePoint
STIG/SRG, RMF
DHS, DoD 8570/8140
IAT Level 2, IAM Level 2
CompTIA Cybersecurity Analyst (CySA+), CompTIA Security+ CE (Sec+ CE)
EC-Council Certified Network Defense (CND) v3
Red Hat Certified System Administrator (RHCSA)
CCNA Security, Global Industrial Cyber Security Professional (GICSP)
GIAC Security Essentials (GSEC), Systems Security Certified Practitioner (SSCP)
CompTIA Advanced Security Practitioner (CASP), Cisco Certified Network Prof. Security (CCNP Security)
Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP)
Certified Cloud Security Professional (CCSP)
GIAC Certified Enterprise Defender (GCED), GIAC Certified Incident Handler (GCIH)
Certified Information Security Manager (CISM), Certified Chief Information Security Officer (C-CISO)
HealthCare Info. Security and Privacy Practitioner (HCISPP)
Certified Authorization Professional (CAP), GIAC Security Leadership (GSLC)

Clearance and Eligibility

This position requires an existing active TS/SCI security clearance prior to hire.
Only U.S. citizens are eligible for a security clearance; therefore, only current U.S. citizens will be considered for this position.

Work Location and Schedule

Full-time onsite at USCG ICC in Suitland, MD.

Compensation

USD 82,000 - 112,000 per yearly
Anticipated pay range for the identified location(s) is $82,000 – 112,000.

Benefits

Paid Time Off (accrued)
Paid Holidays
401(k) with employer match and Traditional/Roth options
Medical Insurance (3 plan options)
TRICARE Supplemental Coverage for TRICARE-eligible individuals
Dental Insurance (2 plan options)
Vision Insurance Plan (2 plan options)
Healthcare and Dependent Care Flexible Spending Accounts (FSAs)
Commuter/Transit Benefits
Basic Life/AD&D Insurance for employee
Additional Life Insurance options for employee + family
Short-Term and Long-Term Disability Insurance
Pet Benefits
Legal Plan
ID Theft Protection Plan
Employee Assistant Plan and Work-Life Program
Voluntary Leave Transfer Program
Tuition Reimbursement Program
Employee Referral Program

Typical Physical Activity

Desk/computer work in an office environment.
May involve: repetitive motion.

View full job page →

1mo ago

Senior AI/Cybersecurity Solutions Engineer

RCG Suitland, MD

Suitland, MD

1mo ago Closed

$130k - $140k/yr Full time Senior Agent Ai Security

This position is no longer accepting applications (closed Oct 23, 2026).

Job Description

Senior AI/Cybersecurity Solutions Engineer role supporting a federal Security, Architecture, and Engineering (SAE) team in Suitland, MD.

Responsibilities

Design and implement Amazon Bedrock agent action groups, including OpenAPI schemas and Python Lambda execution layers
Build Retrieval-Augmented Generation (RAG) pipelines using Bedrock Knowledge Bases with sources including NIST 800-53, CIS Benchmarks, organizational SSPs, and threat intelligence
Engineer prompts, guardrails, and input validation to improve accuracy, security, and resistance to prompt-injection attacks
Evaluate and evolve foundation-model strategies as platform requirements and AI capabilities mature
Develop AI-assisted workflows for security assessment, remediation, hardening, alert triage, and compliance operations
Automate NIST 800-53 control assessments and security evidence collection capabilities
Implement remediation and hardening automation across AWS services including S3, EC2, IAM, CloudTrail, ECS, and EKS
Integrate live security data from AWS Security Hub, GuardDuty, Inspector, and Config to enable environment-aware analysis and AI-assisted decisions
Support BOD 26-04 SLA logic, CISA KEV correlation, risk enrichment, and remediation SLA tracking
Support security telemetry aggregation and SIEM integrations including Microsoft Sentinel and AWS Security Lake
Support ECR vulnerability scanning, EKS runtime monitoring, and container configuration hardening
Develop and analyze SBOMs using formats such as SPDX and CycloneDX
Correlate vulnerabilities with the CISA Known Exploited Vulnerabilities (KEV) catalog for risk-based prioritization
Perform software supply-chain security checks for dependencies, provenance, and threats including typosquatting and unsigned container images
Maintain GitLab CI/CD pipelines for linting, testing, security scanning, builds, and deployments
Implement secure OIDC-based AWS authentication
Develop and manage Infrastructure as Code using CloudFormation and/or Terraform with least-privilege IAM
Support deployment and rollout verification across application and Kubernetes/EKS environments
Maintain strong Git practices including branching, merge requests, and clean version-control history
Manage technical work via Jira (tickets, epics, sub-tasks, workflows, status, and handoffs)
Maintain documentation in Confluence including architecture guides, runbooks, decision records, and onboarding materials
Produce technical design documentation, evidence packages, and audit-ready artifacts for federal assessments
Maintain traceability between requirements, engineering work, code, deployments, and security evidence
Own assigned technical workstreams and collaborate with cybersecurity and engineering teams

Requirements

Bachelor’s degree in computer science, Cybersecurity, or a related technical discipline
6+ years of cloud security engineering experience
2+ years of production experience with generative AI/LLM technologies
4+ years experience working with AWS security services
3+ years supporting federal compliance frameworks such as NIST, FedRAMP, and FISMA
2+ years active Jira and Confluence experience in an Agile or technical delivery environment
Expert-level Python development experience including Python 3.11+, boto3, type hints, and robust error handling
Advanced experience with Amazon Bedrock including agents, action groups, Knowledge Bases, guardrails, prompt engineering, and RAG
Expert knowledge of AWS security technologies including Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, and OIDC
Advanced container security experience with ECR, ECS/EKS, image scanning, runtime monitoring, and hardening
Expert knowledge of NIST SP 800-53 Rev. 5 including control families, assessment procedures, and evidence requirements
Advanced experience with CI/CD and Infrastructure as Code including GitLab CI and CloudFormation and/or Terraform
Advanced Git/version-control experience
Demonstrated experience managing technical work in Jira and maintaining team documentation in Confluence

Technologies

Amazon Bedrock, OpenAPI, Python, AWS Lambda
Retrieval-Augmented Generation (RAG), Bedrock Knowledge Bases, Amazon Bedrock agents, guardrails
NIST 800-53, NIST SP 800-53 Rev. 5, CIS Benchmarks, System Security Plans (SSPs)
prompt-injection attacks
AWS security services: AWS Security Hub, GuardDuty, Inspector, Config, IAM, CloudTrail, OIDC
AWS services: S3, EC2, ECS, EKS, Kubernetes
Microsoft Sentinel, AWS Security Lake
ECR, SBOMs (SPDX, CycloneDX), CISA Known Exploited Vulnerabilities (KEV)
GitLab CI/CD pipelines, GitLab CI, Jira, Confluence, Git, CI/CD
Infrastructure as Code: CloudFormation, Terraform
BOD 26-04, BOD 26-04
FedRAMP, FISMA

Benefits

Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k, IRA)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off (Vacation, Sick & Public Holidays)
Family Leave (Maternity, Paternity)
Short Term & Long Term Disability
Training & Development
Wellness Resources
401(k) with company match

Preferred Qualifications

Master’s degree in a related technical discipline
3+ years of experience building production AI agents
Experience supporting ATO and continuous monitoring activities
Experience administering or configuring Jira boards and Confluence spaces
Experience supporting federal IT security programs
Familiarity with CISA Binding Operational Directives, including BOD 22-01 and BOD 26-04
Experience with AWS Security Lake, OCSF, OSCAL machine-readable compliance, or Microsoft Sentinel integration
Experience with AI red teaming or adversarial testing of LLM applications
Familiarity with software supply-chain technologies and frameworks such as SLSA, Sigstore, and in-toto
Certifications such as AWS Certified Security – Specialty, CISSP, CISM, CKS, or AWS machine learning certification are preferred

Work Environment

Full-time, 100% on-site position in Suitland, MD supporting a federal government cybersecurity and enterprise IT environment
Technical environment includes AWS, Amazon Bedrock, EKS, GitLab, GitLab CI, AWS CodePipeline, Jira, Confluence, Python, VS Code, Jupyter Notebook, and related cloud and cybersecurity technologies

Additional Notes

Must be a U.S. Citizen or Lawful Permanent Resident and eligible to obtain and maintain a Public Trust
Employment contingent upon successful completion of applicable government background investigation and customer onboarding requirements

View full job page →

Cybersecurity Jobs in Suitland, MD

Cybersecurity and Zero Trust Technical Manager

Information Assurance Security Engineer (IASE) / Information Systems Security Engineer (ISSE)

Assistant ISSO/RMF Cybersecurity Analyst

Senior AI/Cybersecurity Solutions Engineer

Get Cybersecurity Jobs in Suitland, MD alerts