Vulnerability Management Engineer, IT Specialist III - Baltimore City Department of Information and Technology

Mayor and City Council of Baltimore; Baltimore (MD); On-site; USD 84,000 - 133,000; Full time

Benefits offered by this job

Medical benefits

Prescription drug coverage

Dental coverage

Vision coverage

Optional life insurance

AD&D

FSA plans

Wellness programs

Job summary

The City of Baltimore seeks a highly technical Vulnerability Security Engineer to evaluate vulnerabilities, reproduce exploits, and engineer prevention strategies across hybrid infrastructures. You will lead efforts to harden operating systems, cloud platforms, and databases while mapping adversarial behaviors to measurable security improvements.

Ideal candidates have deep expertise in OS, cloud, and database security, plus hands-on verification, remediation planning, and strong written and

Qualifications

• Bachelor of Science degree from an accredited college or university.
• Two years of related IT experience in areas such as system/network security, GIS, or cloud-based integration.
• Excellent verbal and written communication skills; prior IT lead experience preferred.
• Equivalent combination of education and experience accepted; advanced credentials may substitute.
• Advanced technical credentials (e.g., PMP, CISM) preferred.

Responsibilities

• Evaluate vulnerabilities and exploit scenarios across enterprise-scale systems.
• Develop and implement remediation strategies for identified weaknesses.
• Collaborate with teams to harden operating systems, cloud platforms, and databases.
• Prepare detailed technical reports and security analyses.

Skills

Verbal & written communication

Security concepts

Vulnerability assessment

Exploit analysis

System security

Education

Bachelor of Science degree

Job description

Salary Range: $83,530.00 - $133,471.00 Annually

Get to Know Us

Welcome to the City of Baltimore! Experience the reward of a fulfilling career and enjoy the added element of excitement in a vibrant, diverse atmosphere. The City of Baltimore offers limitless opportunities to help drive social impact, both on the job and in the community, while serving its citizens. Join us in making Baltimore a great place to live and work. In the City of Baltimore, we hire great people and provide them with the skills and opportunities to grow toward their career aspirations. If you are looking for a career change or interested in learning more, explore our opportunities and benefits programs. We are excited to have you as a part of the City of Baltimore Team! The city offers medical, prescription drug, dental, vision, optional life, AD&D, and FSA plans. This office also supplies wellness programs, support groups, and workshops. You can learn about our benefits here: https://humanresources.baltimorecity.gov/hr-divisions/benefits

Job Summary:

We are seeking a highly technical Vulnerability Security Engineer with deep expertise across vulnerability discovery, exploit analysis, system hardening, and database security. This role focuses on evaluating complex security weaknesses, understanding how attackers exploit them, and engineering enterprise‑scale prevention and remediation strategies. The ideal candidate is an expert in operating systems, cloud platforms, databases, and automated remediation techniques‑capable of driving measurable improvements in security posture across large, hybrid infrastructures.

Vulnerability Identification, Analysis & Exploit Expertise

The engineer must possess advanced understanding of how vulnerabilities arise and how attackers leverage them in real‑world scenarios. This includes hands‑on verification, exploit reproduction, and mapping to adversarial behaviors.

MINIMUM QUALIFICATIONS

• EDUCATION: Have a Bachelor of Science degree from an accredited college or university.
• AND
• EXPERIENCE: Have two years of related specialty IT experience (for example, but not limited to: system engineering, network engineering, information security, application programming, systems design, hierarchical/relational database management, GIS experience, custom report writing, or developing and supporting cloud‑based software integration).
• Excellent verbal and written communication skills. Previous IT work lead experience is preferred. Previous IT experience in government is preferred.
• OR
• NOTES EQUIVALENCIES: Have an equivalent combination of education and experience. Advanced technical credentials may be substituted for six months of experience or education. Multiple certifications may receive additional credit towards education/experience.
• AND
• LICENSES, REGISTRATIONS AND CERTIFICATES: Advanced technical credentials, e.g., Project Management Professional (PMP), Certified Information Security Manager (CISM), preferred.

KNOWLEDGES, SKILLS, AND ABILITIES

• Knowledge of the installation, maintenance, and enhancement of microcomputer systems and mainframe client servers.
• Knowledge of the interrelationship of systems analysis, computer programming, and information technology operations.
• Knowledge of current trends and developments in network‑based communications systems.
• Knowledge of computer‑based communications protocols.
• Knowledge of security groups and roles and assignment of those roles.
• Skill in developing database queries and generating reports.
• Skill in installing, repairing, and troubleshooting network programs, hardware, and systems.
• Skill in cartographic map design, accuracy of presentation with required map components and elements, layout and design.
• Ability to analyze, apply logic and solve technology problems.
• Ability to establish and maintain effective working relationships with vendors, management, technical co‑workers and support specialists, and system users.
• Ability to design complex systems consisting of a wide variety of programs, procedures, and forms.
• Ability to schedule and perform preventative and corrective maintenance procedures and repairs.Ability to write detailed technical reports and analyses.
• Ability to develop a working knowledge of computer systems software and operating systems.
• Ability to develop systems software and systems software testing procedures.

Background Check

Eligible candidates under final consideration for appointment to positions identified as positions of trust will be required to complete authorization for a Criminal Background Check and/or Fingerprint must be successfully completed.

Probation

All persons, including current City employees, selected for this position must complete a mandatory six-month's probation.

Eligibility

Qualified can