Cybersecurity Engineer III

Cybersecurity Jobs; Baltimore (MD); On-site; USD 165,000 - 175,000; Full time

Benefits offered by this job

Medical, dental, vision

401(k) retirement plan

Training & development

Onsite offices with snacks

Job summary

Trace3 is seeking a senior Cybersecurity Engineer III to design, implement, and maintain advanced security capabilities protecting systems, networks, and data. This contract role supports security architecture, threat detection, vulnerability management, and incident response aligned with standards and regulatory expectations.

Based in Baltimore, MD onsite, the role requires working in a secure, classified workspace with access-control procedures and device restrictions.

Qualifications

• Bachelor’s degree in a related technical field; 8+ years in cybersecurity engineering preferred.
• Experience with enterprise security tools such as SIEM, endpoint protection, firewalls, and vulnerability management platforms.
• Strong knowledge of network security, identity management, and security architecture principles.
• Experience with cloud security in environments such as AWS or Microsoft Azure and DevSecOps practices.
• Top Secret clearance required; SCI preferred; onsite in the Baltimore/Annapolis Junction area.

Responsibilities

• Design, implement, and maintain enterprise security solutions including firewalls, IDS/IPS, endpoint protection, and identity management tools.
• Develop and enforce security architecture standards across on-premises, cloud, and hybrid environments.
• Develop an Authority-To-Operate (ATO) authorization plan for CI/CD pipelines.
• Conduct security assessments and risk analyses for new technologies and systems.
• Monitor security events and investigate threats using SIEM and monitoring tools.
• Lead investigations and support incident response for security incidents.
• Perform threat hunting and analyze indicators of compromise (IOCs).
• Coordinate with internal teams to contain, remediate, and recover from security incidents.
• Integrate security controls into system architecture and deployments.
• Conduct vulnerability scanning and drive remediation and patch management.
• Evaluate third-party tools for security risk and ensure regulatory compliance.

Skills

SIEM

PowerShell

Python

Network security

Identity management

DevSecOps

Threat hunting

Incident response

Education

Bachelor’s degree in Cybersecurity / CS / IT

Tools

SIEM

End point protection

Firewalls

Vulnerability management

AWS

Microsoft Azure

Job description

Trace3 is seeking a senior Cybersecurity Engineer III to design, implement, and maintain advanced security capabilities that protect organizational systems, networks, and data. This contract role supports security architecture, threat detection, vulnerability management, and incident response across enterprise environments while aligning controls to applicable standards and regulatory expectations.

This position is based in Baltimore, MD (onsite) and requires working within a secure, classified workspace, including compliance with relevant access control procedures and restrictions on personal electronic devices.

Key Responsibilities

• Design, implement, and maintain enterprise security solutions including firewalls, intrusion detection/prevention systems, endpoint protection, and identity management tools.
• Develop and enforce security architecture standards across on-premises, cloud, and hybrid environments.
• Develop an Authority-To-Operate (ATO) authorization plan to ensure the CI/CD pipeline(s) are addressed.
• Conduct security assessments and risk analyses for new technologies and system implementations.
• Monitor security events and investigate potential threats using SIEM and security monitoring tools.
• Lead technical investigations and support incident response for security breaches or suspicious activities.
• Perform threat hunting and analyze indicators of compromise (IOCs).
• Coordinate with internal teams to contain, remediate, and recover from security incidents.
• Integrate security controls into system architecture and infrastructure deployments.
• Conduct vulnerability scanning and manage remediation activities, including assessing system and network vulnerabilities and recommending mitigations.
• Support patch management and security configuration compliance.
• Evaluate third-party tools and technologies for security risks.
• Ensure systems comply with applicable security standards and regulatory requirements.
• Support security audits, system authorization activities, and documentation.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related technical field (or equivalent experience) preferred.
• 8+ years of experience in cybersecurity engineering or information security preferred.
• Experience implementing and managing enterprise security tools such as SIEM, endpoint protection, firewalls, and vulnerability management platforms.
• Strong knowledge of network security, identity management, and security architecture principles.
• Experience with cloud security in environments such as AWS or Microsoft Azure.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience supporting federal government or regulated environments.
• Knowledge of secure system architecture and DevSecOps practices.
• Experience with security automation and scripting (PowerShell, Python, or similar) preferred.
• Top Secret clearance REQUIRED, SCI Preferred.
• Fully onsite in the Baltimore/Annapolis Junction area.
• Position can be either W2 Contract or FTE.

Technologies and Frameworks

• Firewalls, intrusion detection/prevention systems, endpoint protection, identity management tools
• Authority-To-Operate (ATO), CI/CD pipeline(s)
• SIEM and security monitoring tools, indicators of compromise (IOCs)
• Vulnerability scanning, patch management, security configuration compliance
• NIST Cybersecurity Framework, NIST SP 800-53, Risk Management Framework (RMF), ISO/IEC 27001
• PowerShell, Python
• AWS, Microsoft Azure
• DevSecOps, security automation and scripting
• CI/CD

Benefits

• Comprehensive medical, dental, and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match
• 529 College Savings Plan
• Health Savings Account
• Life Insurance
• Long-Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and cool culture
• Work-life balance and generous paid time off

Physical Demands

• Remain in a stationary position for extended periods of time
• Operate a computer, keyboard, and other office equipment using hands and fingers
• Communicate effectively in person, over the phone, and through electronic means
• Occasionally move about the office to access files, office equipment, and meeting spaces
• Lift and/or move up to 15 pounds as needed
• Maintain specific vision abilities, including close vision and the ability to adjust focus

Work Environment

• Performed within a secure, classified workspace
• Employees must comply with applicable security protocols and access control procedures, including restrictions on personal electronic devices and handling of sensitive information

Compensation: USD 165,000 - 175,000 per year