Cybersecurity Engineer III

The Cybersecurity Engineer III at Trace3 will design, implement, and maintain advanced security capabilities to safeguard organizational systems, networks, and data. This contract role in Baltimore, MD (onsite) provides senior technical support across security architecture, threat detection, vulnerability management, and incident response.

Responsibilities

• Design, implement, and maintain enterprise security solutions including firewalls, intrusion detection/prevention systems, endpoint protection, and identity management tools.
• Develop and enforce security architecture standards across on-premises, cloud, and hybrid environments.
• Develop an Authority-To-Operate (ATO) authorization plan to support CI/CD pipeline(s).
• Perform security assessments and risk analyses for new technologies and system implementations.
• Monitor security events and investigate potential threats using SIEM and other security monitoring tools.
• Lead technical investigations and support incident response for security breaches or suspicious activity.
• Conduct threat hunting and analyze indicators of compromise (IOCs).
• Coordinate with internal teams to contain, remediate, and recover from security incidents.
• Integrate security controls into system architecture and infrastructure deployments.
• Conduct vulnerability scanning and manage related remediation activities.
• Assess system and network vulnerabilities and recommend mitigation strategies.
• Support patch management and security configuration compliance.
• Evaluate third-party tools and technologies for potential security risks.
• Ensure systems comply with applicable security standards and regulatory requirements.
• Support security audits, system authorization activities, and documentation.

Frameworks and Standards

• NIST Cybersecurity Framework
• NIST SP 800-53
• Risk Management Framework (RMF)
• ISO/IEC 27001

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related technical field (or equivalent experience) preferred.
• 8+ years of experience in cybersecurity engineering or information security preferred.
• Experience implementing and managing enterprise security tools including SIEM, endpoint protection, firewalls, and vulnerability management platforms.
• Strong knowledge of network security, identity management, and security architecture principles.
• Experience with cloud security in AWS or Microsoft Azure.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience supporting federal government or regulated environments.
• Knowledge of secure system architecture and DevSecOps practices.
• Experience with security automation and scripting (PowerShell, Python, or similar) preferred.
• Top Secret clearance REQUIRED; SCI preferred.
• Fully onsite in the Baltimore/Annapolis Junction area.
• Position can be either W2 Contract or FTE.

Technologies

• Firewalls
• Intrusion detection/prevention systems
• Endpoint protection
• Identity management tools
• Authority-To-Operate (ATO)
• CI/CD pipeline(s) (CI/CD)
• SIEM
• Security monitoring tools
• Indicators of compromise (IOCs)
• Vulnerability scanning
• Patch management
• Security configuration compliance
• NIST Cybersecurity Framework
• NIST SP 800-53
• Risk Management Framework (RMF)
• ISO/IEC 27001
• PowerShell
• Python
• AWS
• Microsoft Azure
• DevSecOps
• Security automation and scripting

Compensation

USD 165,000 - 175,000 per year.

Benefits

• Comprehensive medical, dental and vision plans for you and your dependents
• 401(k) Retirement Plan with Employer Match
• 529 College Savings Plan
• Health Savings Account
• Life Insurance
• Long-Term Disability
• Competitive Compensation
• Training and development programs
• Major offices stocked with snacks and beverages
• Collaborative and cool culture
• Work-life balance and generous paid time off

Work Environment and Physical Demands

• Performed within a secure, classified workspace.
• Must comply with applicable security protocols and access control procedures, including restrictions on personal electronic devices and handling of sensitive information.
• Remain in a stationary position for extended periods of time.
• Operate a computer, keyboard, and other office equipment using hands and fingers.
• Communicate effectively in person, over the phone, and through electronic means.
• Occasionally move about the office to access files, office equipment, and meeting spaces.
• Lift and/or move up to 15 pounds as needed.
• Maintain specific vision abilities, including close vision and the ability to adjust focus.