IT Security Engineer Jobs in Maryland
IT Security Engineer jobs in Maryland are concentrated in the Baltimore-Washington corridor, Bethesda, and Annapolis, where federal contractors, defense agencies, and financial institutions drive consistent demand from mid-level practitioners through principal engineers. Employers with a lasting hiring presence include Northrop Grumman, Booz Allen Hamilton, and Leidos, all of which maintain large Maryland operations tied to federal cybersecurity missions. The most in-demand specialties are cloud security architecture, zero-trust implementation, and security operations center analysis. See the openings below and apply to the ones that match your experience.
Find IT Security Engineer JobsOverview
Showing 5 of 10+ IT Security Engineer jobs
Location: Bethesda, MD (Requires Onsite 3–5 days per week as needs change)
Employment Type: Full-time
The National Library of Medicine (NLM) is seeking an IT Senior Security Engineer to join our Security Compliance team. In this role, you will work closely with the NLM Information Systems Security Office and play a critical part in safeguarding NLM’s IT infrastructure.
The Senior Security Engineer plays a hands-on role in a multi-disciplined security team, focusing on the implementation of security controls, ensuring compliance with the federal cybersecurity framework (FISMA), and supporting secure cloud adoption across multiple platforms. Collaborating closely with endpoint owners, infrastructure and network security teams, as well as enterprise security teams to meet NIH mandates, this engineer actively works across vulnerability management, application security, cloud security, SIEM, and bringing in new AI-based tooling to strengthen the organization's overall security posture. Receiving day-to-day technical direction from the ISSO and collaborating with tool owners and system administrators—rather than managing any single platform outright—the ideal candidate brings a strong foundation in systems administration, deep hands-on security engineering experience, and the ability to optimize the effectiveness of existing security tools. As part of a broader IT program providing end-to-end support including network, incident response, and security services, this role is critical in ensuring the availability, integrity, and confidentiality of mission-critical systems.
Responsibilities
- Enhance and automate security and compliance checks using scripting and available tools; evaluate emerging technologies, including AI capabilities, to improve security coverage and operational efficiency. Lead team efforts to integrate AI/ML-driven capabilities with the current security tools and operations to enhance and automate assessment and remediation using LLM within NLM
- Implement and maintain security controls for on-prem and cloud environments (AWS, GCP, Azure), ensuring compliance with FISMA, NIH policy, and federal security requirements.
- Recommend and support security services for identity access, privileged access, vulnerability management, encryption, network micro-segmentation, and centralized log management in both cloud and on-premises systems.
- Integrate and optimize enterprise security and SIEM solutions (e.g., Splunk, Tenable) for continuous monitoring, event correlation, and compliance visibility in hybrid environments.
- Conduct threat modeling and security assessments of cloud deployments, identifying and mitigating vulnerabilities and supporting secure cloud migrations.
- Provide security guidance, best practices, and compliance support to developers, operations teams, and system owners, promoting security awareness across the organization.
- Analyze vulnerability and assessment data to identify systemic risks, remediation trends, and opportunities for process or tool improvement, collaborating with system administrators and security teams for practical, risk-informed remediation.
- Contribute and manage documentation, standard operating procedures, and technical guidance to support the broader security program and ensure consistent practices.
- Extensive experience securing on-premises and cloud environments (AWS, GCP, Azure), with strong working knowledge of cloud security models, logging, tagging strategies, ephemeral resource tracking, and cross-platform operations; proven hands-on security engineering background in federal, regulated settings.
- 10+ years in securing information technology, plus 7+ years in hands-on security engineering built on a systems administration foundation including at least 3 years focused on cloud security and administration of Linux and Windows endpoints
- Familiarity with AI/ML integration in security tooling and operations, supporting modern approaches to threat detection and remediation.
- Demonstrated expertise applying federal compliance frameworks (FISMA, NIST 800-53, FedRAMP, RMF), supporting system authorization processes (ATO, POA&M), and navigating complex governance and compliance requirements.
- Admin or engineering-level experience with at least two security tools such as Tenable, Checkmarx, or Splunk, along with a strong understanding of vulnerability management, application security testing, and remediation workflows.
- Bachelor’s degree in computer science, cybersecurity, information technology, or related technical field (or equivalent technical experience)
- CISSP certification (or ability to obtain within 6 months).
- Effective collaboration and guidance for multi-disciplinary teams managing servers, workstations, network and security appliances within regulated environments; ability to adapt to shifting priorities and contribute to team goals.
- Strong written and verbal communication skills, with a proven ability to produce clear security documentation and explain technical concepts to both technical and non-technical stakeholders.
- Hands-on work experience with AI/ML automation, security event correlation, asset inventory tracking and SEIM management (preferably in SPLUNK), utilizing scripting or programming such as PowerShell, Bash, Python or equivalent and use of APIs
- Advanced Linux and Windows administration experience, Certified in AWS/AZURE/GCP
- Experience with container security (like Docker & Kubernetes)
- Master’s degree in computer science, Cybersecurity, Information Technology, or a related technical field
S8yQHvMPYP
Location: Bethesda, MD (Requires Onsite 3–5 days per week as needs change)
Employment Type: Full-time
The National Library of Medicine (NLM) is seeking an IT Senior Security Engineer to join our Security Compliance team. In this role, you will work closely with the NLM Information Systems Security Office and play a critical part in safeguarding NLM’s IT infrastructure.
The Senior Security Engineer plays a hands-on role in a multi-disciplined security team, focusing on the implementation of security controls, ensuring compliance with the federal cybersecurity framework (FISMA), and supporting secure cloud adoption across multiple platforms. Collaborating closely with endpoint owners, infrastructure and network security teams, as well as enterprise security teams to meet NIH mandates, this engineer actively works across vulnerability management, application security, cloud security, SIEM, and bringing in new AI-based tooling to strengthen the organization's overall security posture. Receiving day-to-day technical direction from the ISSO and collaborating with tool owners and system administrators—rather than managing any single platform outright—the ideal candidate brings a strong foundation in systems administration, deep hands-on security engineering experience, and the ability to optimize the effectiveness of existing security tools. As part of a broader IT program providing end-to-end support including network, incident response, and security services, this role is critical in ensuring the availability, integrity, and confidentiality of mission-critical systems.
Responsibilities
- Enhance and automate security and compliance checks using scripting and available tools; evaluate emerging technologies, including AI capabilities, to improve security coverage and operational efficiency. Lead team efforts to integrate AI/ML-driven capabilities with the current security tools and operations to enhance and automate assessment and remediation using LLM within NLM
- Implement and maintain security controls for on-prem and cloud environments (AWS, GCP, Azure), ensuring compliance with FISMA, NIH policy, and federal security requirements.
- Recommend and support security services for identity access, privileged access, vulnerability management, encryption, network micro-segmentation, and centralized log management in both cloud and on-premises systems.
- Integrate and optimize enterprise security and SIEM solutions (e.g., Splunk, Tenable) for continuous monitoring, event correlation, and compliance visibility in hybrid environments.
- Conduct threat modeling and security assessments of cloud deployments, identifying and mitigating vulnerabilities and supporting secure cloud migrations.
- Provide security guidance, best practices, and compliance support to developers, operations teams, and system owners, promoting security awareness across the organization.
- Analyze vulnerability and assessment data to identify systemic risks, remediation trends, and opportunities for process or tool improvement, collaborating with system administrators and security teams for practical, risk-informed remediation.
- Contribute and manage documentation, standard operating procedures, and technical guidance to support the broader security program and ensure consistent practices.
- Extensive experience securing on-premises and cloud environments (AWS, GCP, Azure), with strong working knowledge of cloud security models, logging, tagging strategies, ephemeral resource tracking, and cross-platform operations; proven hands-on security engineering background in federal, regulated settings.
- 10+ years in securing information technology, plus 7+ years in hands-on security engineering built on a systems administration foundation including at least 3 years focused on cloud security and administration of Linux and Windows endpoints
- Familiarity with AI/ML integration in security tooling and operations, supporting modern approaches to threat detection and remediation.
- Demonstrated expertise applying federal compliance frameworks (FISMA, NIST 800-53, FedRAMP, RMF), supporting system authorization processes (ATO, POA&M), and navigating complex governance and compliance requirements.
- Admin or engineering-level experience with at least two security tools such as Tenable, Checkmarx, or Splunk, along with a strong understanding of vulnerability management, application security testing, and remediation workflows.
- Bachelor’s degree in computer science, cybersecurity, information technology, or related technical field (or equivalent technical experience)
- CISSP certification (or ability to obtain within 6 months).
- Effective collaboration and guidance for multi-disciplinary teams managing servers, workstations, network and security appliances within regulated environments; ability to adapt to shifting priorities and contribute to team goals.
- Strong written and verbal communication skills, with a proven ability to produce clear security documentation and explain technical concepts to both technical and non-technical stakeholders.
- Hands-on work experience with AI/ML automation, security event correlation, asset inventory tracking and SEIM management (preferably in SPLUNK), utilizing scripting or programming such as PowerShell, Bash, Python or equivalent and use of APIs
- Advanced Linux and Windows administration experience, Certified in AWS/AZURE/GCP
- Experience with container security (like Docker & Kubernetes)
- Master’s degree in computer science, Cybersecurity, Information Technology, or a related technical field
S8yQHvMPYP
See All 10 IT Security Engineer Jobs in Maryland
Find roles in Maryland that match your experience and apply in just a few clicks.
Find IT Security Engineer JobsIT Security Engineer Jobs by City in Maryland
Where Maryland roles are concentrated, by current openings.
IT Security Engineer Job Market in Maryland
A snapshot from current Maryland openings, updated as new roles post.
Who's Hiring
What Maryland Employers Look For
The qualifications that appear most often in IT security engineer jobs across Maryland.
- Active DoD security clearance or eligibility at the Secret or Top Secret level
- CISSP, CompTIA Security+, or equivalent industry certification currently held
- Bachelor's degree in cybersecurity, computer science, or a related technical field
- Hands-on experience with SIEM platforms, endpoint detection, and incident response
- Familiarity with NIST frameworks, RMF, and federal compliance requirements
- Proficiency in network security tools, vulnerability scanning, and penetration testing
IT Security Engineer Jobs in Maryland: Frequently Asked Questions
How do you become a it security engineer in Maryland?
Maryland does not issue a state-specific license for IT security engineers, so entry runs through education and industry credentials. Most Maryland employers expect a bachelor's degree in cybersecurity, information systems, or computer science, followed by certifications such as CompTIA Security+, CISSP, or CEH. Federal contractor roles, which dominate the Maryland market, add a security clearance as a practical requirement alongside the technical credentials.
How much do IT security engineers make in Maryland?
IT security engineers in Maryland earn a median of about $139,640 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $79,130 for the lowest 10% to over $216,570 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire it security engineers in Maryland?
Maryland it security engineer roles are posted by August Schell, Centers for Medicare and Medicaid Services, and DUIT and others right now, based on current listings on Migrate Mate as of September 2026. Maryland's concentration of federal contractors and defense agencies means many of these employers are tied to government cybersecurity programs in the Baltimore-Washington corridor.
Which Maryland cities have the most it security engineer jobs?
Bethesda, Woodlawn, and Bowie account for the largest share of it security engineer openings in Maryland. The Baltimore and Bethesda areas lead because of the dense cluster of federal agencies, defense contractors, and financial institutions headquartered there, while Annapolis draws demand from state government and mid-size technology firms working on public-sector security contracts.
Are there remote it security engineer jobs in Maryland?
Yes, and more than many technical roles, since much of the analytical and architecture work can move off-site. About 75% of it security engineer openings tied to Maryland are remote or hybrid as of September 2026, though roles requiring physical access to classified facilities or government networks remain predominantly on-site. Cloud security, policy, and monitoring work tends to carry the most remote flexibility.
How can I get hired as a it security engineer in Maryland with little or no experience?
The most realistic entry path is a junior security analyst or SOC analyst role, which large Maryland federal contractors such as Booz Allen Hamilton, Leidos, and SAIC regularly staff with early-career candidates. Earning CompTIA Security+ before applying signals baseline competency and meets the baseline certification requirement many of these employers list. Internships and cleared internship programs at Maryland-area contractors also convert into full-time offers at a high rate for candidates who complete them.
Where can I find and apply to it security engineer jobs in Maryland?
You can find and apply to it security engineer jobs in Maryland on Migrate Mate, which lists current openings tied to the state. Search the listings to find roles that match your experience level, clearance status, and preferred location, then apply directly to the ones that fit.
See All 10 IT Security Engineer Jobs in Maryland
Find roles in Maryland that match your experience and apply in just a few clicks.
Find IT Security Engineer Jobs