Senior Cybersecurity Analyst Jobs in Maryland
Senior Cybersecurity Analyst jobs in Maryland are concentrated in the Baltimore-Washington corridor, Annapolis, and the suburbs of Montgomery and Prince George's counties, where federal contractors, defense primes, and financial institutions drive consistent demand. Employers with deep roots in the state include Northrop Grumman, Leidos, and CareFirst BlueCross BlueShield, all of which maintain large security operations teams here. The most sought-after specialties are threat intelligence, cloud security, and compliance with federal frameworks such as NIST and FedRAMP, reflecting Maryland's unique overlap between private industry and federal agency support. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 21+ Senior Cybersecurity Analyst jobs
About Us
We are seeking a Senior Cloud SCA-R to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer. As a Team Lead, you will be responsible for performing analysis, conducting independent validations of assessments, and Continuous Monitoring (ConMon) for authorized CSPs and CSOs.
Responsibilities Include:
- Conduct cybersecurity assessments and validations of Cloud Service Offerings (CSOs) in support of the Department of Defense (DoD) Provisional Authorization (PA) process.
- Evaluate Cloud Service Provider (CSP) documentation packages following government guidance and procedures, including key artifacts such as the Cloud Architecture Diagram, System Security Plan (SSP), SSP Addendum, Readiness Assessment Report (RAR), System Architecture, Security Assessment Plan (SAP), Security Assessment Report (SAR), and associated Plans of Action & Milestones (POA&Ms).
- Review, analyze, and process additional documents including Change Requests, Extension Requests, Deviation Requests, Whitelist Requests, Corrective Action Plans, templates, process guide approvals, and continuous monitoring (ConMon) artifacts for existing Provisional Authorizations.
- Prepare and deliver up to 30 Cloud Security Assessment Packages annually, each including validated cybersecurity controls, certifier recommendations, and a statement of residual risk.
- Participate in technical kickoff meetings and review preliminary documentation to assess a CSP's readiness posture.
- Analyze and provide detailed feedback on CSP submissions such as the RAR, SAP, SSP, and architectural diagrams.
- Assess and document the operational impact of authorizations, changes, and vulnerabilities on the CSP environment.
- Develop Cloud Security Assessment Packages in accordance with established guidelines, including the SAR, POA&M, and any Deviation Requests.
- Draft Authorization Recommendation Memoranda outlining CSO compliance with DoD cybersecurity controls, residual risks, and technical findings.
- Prepare formal DoD Provisional Authorization memoranda, detailing authorization length, CSO boundary, services provided, operating conditions, DoD usage considerations, and follow-on activities.
- Validate CSO controls within eMASS or other government-provided Governance, Risk, and Compliance (GRC) tools; ensure accurate tracking in the Mission Status Report (MSR).
- Review and verify the Customer Responsibility Matrix (CRM), ensuring proper control inheritance is reflected in eMASS/GRC systems.
- Upload authorization conditions as system-level POA&Ms in eMASS and monitor their resolution.
- Organize and associate all received documentation with applicable security controls within eMASS.
- Maintain and update the DoD Cloud Process Guide, including all checklists, templates, forms, and guidance documents.
- Assist in developing internal requirements and how-to guides for assessors conducting CSP validations.
- Document and refine assessment procedures and validation best practices to align with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG).
- Contribute to the ongoing development and annual updates of the DoD Cloud Assessment Process Guides as requested by the Government.
Required Skills, Qualifications, and Experience:
- Education and Certifications:
- Bachelor's degree (IT-related field preferred)
- DoD 8570 IAM/IA Technical (IAT) Level III certification
- Experience:
- Eight (8) years of overall experience in cybersecurity or network security position
- Citizenship and Security Clearance:
- US Citizenship is required.
- Must have and maintain an active DoD Top Secret clearance with SCI eligibility
- Skills and Knowledge:
- Familiarity with security controls for Azure, AWS, and assorted cloud platforms
- Solid understanding of DoD Risk Management Framework (RMF), DoDI 8510.01, and DoD Cloud Computing Security Requirements Guide (SRG)
- Familiarity with security controls for Azure, AWS, and assorted cloud platforms
- Hands-on experience with eMASS or other government-provided GRC tools
- Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms
- Ability to analyze complex cloud architectures and provide accurate risk assessments
- Strong technical writing and communication skills to produce security assessment reports and formal recommendations
- Location:
- Candidates must reside within a commutable distance of Ft. Meade, MD in order to work a fully onsite schedule.
The projected salary range for this position is $120,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.
At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.
- 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
- Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
- 401(k) with Match: We match 3% of your contributions with immediate vesting.
- Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
- Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
- Parental Leave: 15 days of fully paid leave for new parents, because family matters.
- Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving.
- Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
- Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.
At AGE, you'll do work that matters, supported by a company that delivers for its people.
About Us
We are seeking a Senior Cloud SCA-R to join our team in support of an upcoming cybersecurity risk management and assessment program with our DoD customer. As a Team Lead, you will be responsible for performing analysis, conducting independent validations of assessments, and Continuous Monitoring (ConMon) for authorized CSPs and CSOs.
Responsibilities Include:
- Conduct cybersecurity assessments and validations of Cloud Service Offerings (CSOs) in support of the Department of Defense (DoD) Provisional Authorization (PA) process.
- Evaluate Cloud Service Provider (CSP) documentation packages following government guidance and procedures, including key artifacts such as the Cloud Architecture Diagram, System Security Plan (SSP), SSP Addendum, Readiness Assessment Report (RAR), System Architecture, Security Assessment Plan (SAP), Security Assessment Report (SAR), and associated Plans of Action & Milestones (POA&Ms).
- Review, analyze, and process additional documents including Change Requests, Extension Requests, Deviation Requests, Whitelist Requests, Corrective Action Plans, templates, process guide approvals, and continuous monitoring (ConMon) artifacts for existing Provisional Authorizations.
- Prepare and deliver up to 30 Cloud Security Assessment Packages annually, each including validated cybersecurity controls, certifier recommendations, and a statement of residual risk.
- Participate in technical kickoff meetings and review preliminary documentation to assess a CSP's readiness posture.
- Analyze and provide detailed feedback on CSP submissions such as the RAR, SAP, SSP, and architectural diagrams.
- Assess and document the operational impact of authorizations, changes, and vulnerabilities on the CSP environment.
- Develop Cloud Security Assessment Packages in accordance with established guidelines, including the SAR, POA&M, and any Deviation Requests.
- Draft Authorization Recommendation Memoranda outlining CSO compliance with DoD cybersecurity controls, residual risks, and technical findings.
- Prepare formal DoD Provisional Authorization memoranda, detailing authorization length, CSO boundary, services provided, operating conditions, DoD usage considerations, and follow-on activities.
- Validate CSO controls within eMASS or other government-provided Governance, Risk, and Compliance (GRC) tools; ensure accurate tracking in the Mission Status Report (MSR).
- Review and verify the Customer Responsibility Matrix (CRM), ensuring proper control inheritance is reflected in eMASS/GRC systems.
- Upload authorization conditions as system-level POA&Ms in eMASS and monitor their resolution.
- Organize and associate all received documentation with applicable security controls within eMASS.
- Maintain and update the DoD Cloud Process Guide, including all checklists, templates, forms, and guidance documents.
- Assist in developing internal requirements and how-to guides for assessors conducting CSP validations.
- Document and refine assessment procedures and validation best practices to align with DoDI 8510.01 and the DoD Cloud Computing Security Requirements Guide (SRG).
- Contribute to the ongoing development and annual updates of the DoD Cloud Assessment Process Guides as requested by the Government.
Required Skills, Qualifications, and Experience:
- Education and Certifications:
- Bachelor's degree (IT-related field preferred)
- DoD 8570 IAM/IA Technical (IAT) Level III certification
- Experience:
- Eight (8) years of overall experience in cybersecurity or network security position
- Citizenship and Security Clearance:
- US Citizenship is required.
- Must have and maintain an active DoD Top Secret clearance with SCI eligibility
- Skills and Knowledge:
- Familiarity with security controls for Azure, AWS, and assorted cloud platforms
- Solid understanding of DoD Risk Management Framework (RMF), DoDI 8510.01, and DoD Cloud Computing Security Requirements Guide (SRG)
- Familiarity with security controls for Azure, AWS, and assorted cloud platforms
- Hands-on experience with eMASS or other government-provided GRC tools
- Familiarity with cloud security documentation, including SSPs, SARs, RARs, and POA&Ms
- Ability to analyze complex cloud architectures and provide accurate risk assessments
- Strong technical writing and communication skills to produce security assessment reports and formal recommendations
- Location:
- Candidates must reside within a commutable distance of Ft. Meade, MD in order to work a fully onsite schedule.
The projected salary range for this position is $120,000+ annually. Final compensation will be determined based on factors including years of relevant experience, active security clearance level, certifications, technical skillset, contract requirements, and overall qualifications.
At AGE Solutions, we reward performance, invest in growth, and share success. Our benefits support the whole person, professionally, financially, and personally.
- 26 Days Paid Leave: Includes vacation, sick, personal time, and holidays. You choose how to use it.
- Performance Bonuses: Performance bonuses are awarded based on individual contributions and company-wide results, aligning recognition with impact.
- 401(k) with Match: We match 3% of your contributions with immediate vesting.
- Financial Protection: Company-paid life insurance up to $300K and options for additional coverage for you and your dependents.
- Health Benefits: Multiple medical plans, dental, vision, FSA and HSA options to fit your needs.
- Parental Leave: 15 days of fully paid leave for new parents, because family matters.
- Military Differential Pay: We bridge the gap for employees on active duty, so they don't take a financial hit while serving.
- Professional Growth: Paid training and certifications, tuition reimbursement, and the tools and tech to get the job done right.
- Shared Success: In the event of a company sale, our CEO has committed to returning 80% of net proceeds to employees. This ensures our team shares in the long term value they help create.
At AGE, you'll do work that matters, supported by a company that delivers for its people.
See All 21 Senior Cybersecurity Analyst Jobs in Maryland
Find roles in Maryland that match your experience and apply in just a few clicks.
Find JobsSenior Cybersecurity Analyst Jobs by City in Maryland
Where Maryland roles are concentrated, by current openings.
Senior Cybersecurity Analyst Job Market in Maryland
A snapshot from current Maryland openings, updated as new roles post.
Who's Hiring
What Maryland Employers Look For
The qualifications that appear most often in senior cybersecurity analyst jobs across Maryland.
- Active security clearance or eligibility for Secret or Top Secret clearance required
- Bachelor's degree in cybersecurity, information systems, or a related technical field
- Active CISSP, CISM, or equivalent professional certification strongly preferred
- Five or more years of hands-on experience in security operations or incident response
- Demonstrated experience with NIST frameworks, FedRAMP, or FISMA compliance requirements
- Proficiency with SIEM platforms, vulnerability management tools, and endpoint detection systems
Senior Cybersecurity Analyst Jobs in Maryland: Frequently Asked Questions
How do you become a senior cybersecurity analyst in Maryland?
Maryland does not require a state-issued license to work as a senior cybersecurity analyst, so the path runs through education, certification, and security clearance eligibility. Most employers expect a bachelor's degree in cybersecurity, computer science, or information assurance, followed by hands-on experience in a junior or mid-level security role. Earning a CISSP or CISM credential and building familiarity with federal compliance frameworks accelerates hiring, particularly given Maryland's concentration of defense and federal contractor employers.
How much do senior cybersecurity analysts make in Maryland?
Senior cybersecurity analysts in Maryland earn a median of about $139,640 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $79,130 for the lowest 10% to over $216,570 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire senior cybersecurity analysts in Maryland?
Employers hiring senior cybersecurity analysts in Maryland right now include Leidos, AGE Solutions, and BNH, based on current listings on Migrate Mate as of November 2026. Maryland's density of federal contractors and government-adjacent institutions means hiring tends to be active year-round rather than seasonal.
Which Maryland cities have the most senior cybersecurity analyst jobs?
The cities with the most senior cybersecurity analyst openings in Maryland are Fort Meade, Odenton, and Aberdeen Proving Ground. The Baltimore-Washington corridor dominates because it anchors both major federal agency campuses and the contractors that support them, while suburban hubs like Columbia and Rockville generate additional demand from technology firms and financial services companies headquartered there.
Are there remote senior cybersecurity analyst jobs in Maryland?
Yes, and more than most fields. About 50% of senior cybersecurity analyst openings tied to Maryland are remote or hybrid as of November 2026, reflecting how much of the analytical work, threat monitoring, and policy development can be done off-site. Roles tied to classified government systems or physical security operations centers are the most likely to require in-person attendance.
How can I get hired as a senior cybersecurity analyst in Maryland with little or no experience?
The most realistic entry path is a junior security analyst or SOC analyst role at one of Maryland's large federal contractors, where internal promotion to senior levels is common. Companies like Northrop Grumman and Leidos regularly hire associate-level analysts and invest in certifications and clearance sponsorship. Building toward a CompTIA Security+ or CySA+ credential, completing an internship through the University of Maryland's cybersecurity programs, or transitioning from a network administrator or IT support role gives candidates a concrete edge in the application process.
Where can I find and apply to senior cybersecurity analyst jobs in Maryland?
You can find and apply to senior cybersecurity analyst jobs in Maryland on Migrate Mate, which lists current Maryland openings updated in real time. Search the available roles, find the ones that match your experience and clearance level, and apply directly to each employer without creating a profile or signing up.
See All 21 Senior Cybersecurity Analyst Jobs in Maryland
Find roles in Maryland that match your experience and apply in just a few clicks.
Find Jobs