Vulnerability Security Engineer: Secure by Design

Mayor and City Council of Baltimore; Baltimore (MD); On-site; USD 84,000 - 133,000; Full time

Benefits offered by this job

Medical benefits

Prescription drug coverage

Dental coverage

Vision coverage

Optional life insurance

AD&D

FSA plans

Wellness programs

Job summary

The City of Baltimore seeks a highly technical Vulnerability Security Engineer to evaluate vulnerabilities, reproduce exploits, and engineer prevention strategies across hybrid infrastructures. You will lead efforts to harden operating systems, cloud platforms, and databases while mapping adversarial behaviors to measurable security improvements.

Ideal candidates have deep expertise in OS, cloud, and database security, plus hands-on verification, remediation planning, and strong written and

Qualifications

• Bachelor of Science degree from an accredited college or university.
• Two years of related IT experience in areas such as system/network security, GIS, or cloud-based integration.
• Excellent verbal and written communication skills; prior IT lead experience preferred.
• Equivalent combination of education and experience accepted; advanced credentials may substitute.
• Advanced technical credentials (e.g., PMP, CISM) preferred.

Responsibilities

• Evaluate vulnerabilities and exploit scenarios across enterprise-scale systems.
• Develop and implement remediation strategies for identified weaknesses.
• Collaborate with teams to harden operating systems, cloud platforms, and databases.
• Prepare detailed technical reports and security analyses.

Skills

Verbal & written communication

Security concepts

Vulnerability assessment

Exploit analysis

System security

Education

Bachelor of Science degree

Job description

The City of Baltimore seeks a highly technical Vulnerability Security Engineer to evaluate vulnerabilities, reproduce exploits, and engineer prevention strategies across hybrid infrastructures. You will lead efforts to harden operating systems, cloud platforms, and databases while mapping adversarial behaviors to measurable security improvements.

Ideal candidates have deep expertise in OS, cloud, and database security, plus hands-on verification, remediation planning, and strong written and