ZipRecruiter

Log In

1

Security Engineer Jobs in Perry Hall, MD (NOW HIRING)

Leidos

Information Systems Security Engineer

Linthicum, MD · On-site

$107K - $195K/yr

Leidos is currently seeking an Information Systems Security Engineer to support our customer onsite. The ISSE shall perform, or review, technical security assessments of computing environments to ...

previous page

Showing results 41-60

All JobsSecurity Engineer JobsSecurity Engineer Jobs in Perry Hall, MD

Security Engineer information

See Perry Hall, MD salary details

$58.7K

$145.9K

$196.2K

How much do security engineer jobs pay per year?

As of Aug 16, 2026, the average yearly pay for security engineer in Perry Hall, MD is $145,881.00, according to ZipRecruiter salary data. Most workers in this role earn between $136,500.00 and $151,300.00 per year, depending on experience, location, and employer.

How does a security engineer typically collaborate with other IT teams within an organization?

Security Engineers work closely with various IT teams such as network administrators, software developers, and system administrators to ensure security protocols are integrated at every level. This collaboration often involves conducting security assessments, reviewing code for vulnerabilities, and assisting with incident response. Regular meetings and cross-functional projects are common, as Security Engineers provide guidance on best practices and help teams understand potential threats. Effective communication and teamwork are key, as security is a shared responsibility across the organization.

What is a security engineer?

A service provider is responsible for delivering professional quality services on behalf of a business or organization. The types of services vary depending on the businesses they work with. Many companies partner with experts in the local community to perform functions on their behalf rather than developing the expertise in-house. A service provider performs the services based on a written legal agreement and charges fees for their work.

What are the key skills and qualifications needed to thrive as a Security Engineer, and why are they important?

To thrive as a Security Engineer, you need expertise in information security principles, network architecture, vulnerability assessment, and commonly a degree in computer science or a related field. Familiarity with tools like SIEM systems, firewalls, intrusion detection/prevention systems, and certifications such as CISSP or CEH are typically required. Strong problem-solving skills, attention to detail, and effective communication set outstanding Security Engineers apart. These competencies are essential to proactively protect organizations from cyber threats, ensure compliance, and minimize security risks.

What do you do as a security engineer?

A security engineer designs, implements, and maintains security systems to protect an organization’s networks, systems, and data from cyber threats. They analyze vulnerabilities, develop security protocols, and often use tools like firewalls, intrusion detection systems, and encryption. Certifications such as CISSP or CEH and strong knowledge of network architecture are common in this role.

What is the difference between Security Engineer vs Network Security Specialist?

AspectSecurity EngineerNetwork Security Specialist
Required CertificationsCompTIA Security+, CISSP, CEHCompTIA Security+, Cisco CCNA Security, CISSP
Work EnvironmentDesigning, implementing, and maintaining security systems across IT infrastructureMonitoring, analyzing, and securing network traffic and infrastructure
Employer & Industry UsageTech companies, finance, government agenciesTelecommunications, enterprise networks, cybersecurity firms

Security Engineers focus on developing and deploying security solutions across IT systems, while Network Security Specialists concentrate on protecting network infrastructure and traffic. Both roles require similar certifications and often work together to ensure comprehensive security.

More about Security Engineer jobs

What are the most commonly searched types of Security Engineer jobs in Perry Hall, MD?

The most popular types of Security Engineer jobs in Perry Hall, MD are:

What are popular job titles related to Security Engineer jobs in Perry Hall, MD?

For Security Engineer jobs in Perry Hall, MD, the most frequently searched job titles are:

What cities near Perry Hall, MD are hiring for Security Engineer jobs?

Cities near Perry Hall, MD with the most Security Engineer job openings:

Security Engineer jobs near you
Infographic showing various Security Engineer job openings in Perry Hall, MD as of August 2026, with employment types broken down into 78% Full Time, 20% Part Time, and 2% Contract. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $145,881 per year, or $70.1 per hour.

Identity and Access Security Engineer

Brown Advisory Incorporated

Baltimore, MD • On-site

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 9 days ago

Job description

Company Overview
Every firm has a culture - the values, beliefs, methodology, attitudes and standards that reflect an organization's DNA. But the truly inspiring firms - the game-changers, the industry leaders and the disruptors - have cultures that propel them to innovate and stand out. At Brown Advisory, we aim to be one of those inspired firms. Over the years, we have purposefully built and nurtured our client-first culture.
Brown Advisory is an independent investment management and strategic advisory firm committed to delivering a combination of first-class performance, strategic advice and the highest level of client service. The firm's clients-including individuals, families, family offices, endowments, foundations, charities, institutions, consultants, and financial intermediaries-are served by over 1,000 colleagues worldwide, all of whom are equity owners of the firm.
Brown Advisory is currently seeking an Identity and Access Security Engineer to lead and mature the firm's identity security controls across Okta, Microsoft Entra ID, Active Directory, CyberArk, BloodHound Enterprise, multifactor authentication, privileged access, application integrations, and access governance. This blended role is designed for a hands-on security professional who understands identity as both a business-enablement workflow and a critical security control plane.
The engineer will be responsible for reducing identity-related risk across workforce, privileged, service, application, and machine identities. The role combines identity engineering, privileged-access management, identity threat exposure management, access governance, attack-path remediation, and operational control assurance.
As part of a lean Information Security team within a mid-sized financial services organization, this individual will partner with Infrastructure, Enterprise Applications, Compliance, Human Resources, Operations, and business system owners. The role will help ensure that access is appropriately granted, reviewed, monitored, and removed while enabling secure adoption of SaaS, cloud, and on-premises platforms.
Blended Role Coverage
Primary emphasis: Identity security engineering and governance across IAM, PAM, identity threat exposure management, MFA, privileged access, access reviews, and identity-related risk.
Blended coverage: Okta and Entra ID integration, CyberArk platform operations and privileged-account onboarding, service-account governance, BloodHound Enterprise analysis and attack-path remediation, Active Directory privilege hygiene, SaaS access controls, identity lifecycle automation, and selected security-engineering support.
Duties and Responsibilities
  • Own the day-to-day security governance and engineering of identity controls across Okta, Microsoft Entra ID, Active Directory, MFA, Conditional Access, privileged access, and identity lifecycle workflows.
  • Design, implement, operate, and continuously improve privileged-access controls using CyberArk, including account discovery, vault onboarding, credential rotation, access workflows, session controls, privileged-account monitoring, break-glass access, and evidence collection.
  • Govern the lifecycle of privileged human and non-human identities, including administrator accounts, service accounts, application credentials, scheduled-task accounts, emergency accounts, and other machine identities.
  • Identify privileged and service accounts that are unmanaged, improperly configured, inactive, or outside established CyberArk controls, and coordinate their onboarding, remediation, or retirement.
  • Develop and maintain CyberArk safes, platforms, policies, account ownership models, reconciliation processes, access permissions, operational procedures, and recovery documentation.
  • Operate BloodHound Enterprise as an identity threat exposure management capability, analyzing attack paths, Tier Zero relationships, excessive privilege, nested group membership, delegated permissions, and other identity-control weaknesses.
  • Translate BloodHound findings into prioritized and actionable remediation plans, working with Infrastructure and application owners to remove unnecessary privilege while preserving required business and system functionality.
  • Validate identity-risk remediation through rescanning, attack-path analysis, ticket evidence, exception documentation, and measurable reduction in identity exposure.
  • Maintain a defined Tier Zero and critical-identity model across Active Directory, Entra ID, privileged platforms, administrative systems, and supporting infrastructure.
  • Assess and improve Active Directory security, including privileged groups, delegated administrative rights, nested group relationships, service accounts, stale privileges, domain and forest trust exposure, and administrative-tier separation.
  • Partner with Infrastructure to reduce standing privilege and implement secure administrative patterns for domain, server, workstation, application, and help-desk administration.
  • Integrate applications with Okta and Entra ID using secure authentication, authorization, SSO, provisioning, deprovisioning, and lifecycle-management patterns.
  • Lead access review routines for critical systems, privileged roles, SaaS platforms, and regulated business processes, ensuring exceptions are documented and remediated.
  • Partner with HR, Compliance, Operations, and application owners to improve joiner, mover, leaver, contractor, vendor, service-account, and application-identity workflows.
  • Strengthen identity detection and response by integrating telemetry from Okta, Entra ID, Active Directory, CyberArk, BloodHound Enterprise, and other identity systems into SIEM and investigation workflows.
  • Support investigations involving suspicious authentication, credential misuse, privileged-account activity, unauthorized role changes, risky OAuth grants, anomalous service-account behavior, and potential identity-based lateral movement.
  • Support security configuration for SaaS applications where identity, authorization, administrative roles, and data-access controls are central to risk management.
  • Define and report identity-security metrics, including privileged-account coverage, service-account onboarding, password-rotation compliance, standing privileged access, attack-path exposure, Tier Zero findings, stale access, review completion, and remediation aging.
  • Maintain identity standards, procedures, control evidence, risk documentation, metrics, and leadership reporting in partnership with GRC.
  • Drive remediation of identity-related audit findings, penetration-test findings, policy exceptions, BloodHound findings, and access-control gaps.
  • Provide practical guidance to application, infrastructure, and business teams on secure identity patterns that meet control requirements without slowing delivery unnecessarily.

Preferred Qualifications
  • Bachelor's degree in cyber security, computer science, information systems, engineering, or a relevant field, or equivalent professional experience.
  • 4-8 years of experience in information security, identity and access management, infrastructure security, cloud security, or related technical work.
  • Hands-on experience administering or engineering identity controls in Microsoft Entra ID and Active Directory; experience with Okta or another enterprise identity provider strongly preferred.
  • Hands-on experience with a privileged-access management platform; CyberArk administration or engineering experience strongly preferred.
  • Experience identifying and remediating Active Directory or cloud identity attack paths using BloodHound Enterprise, BloodHound Community Edition, or a comparable identity threat exposure management platform.
  • Demonstrated experience governing service accounts, application identities, privileged accounts, secrets, and other non-human identities.
  • Experience with access reviews, MFA, SSO, provisioning, deprovisioning, Conditional Access, and identity governance in a regulated environment.
  • Experience with PowerShell, Microsoft Graph, REST APIs, or other automation methods used to analyze identity data and automate control workflows.
  • Experience working with infrastructure teams to remediate complex privilege relationships without disrupting business-critical systems.
  • CISSP, Microsoft identity/security certifications, CyberArk certifications, Okta certifications, or other relevant professional designations preferred.

Technical Skills
  • Identity platforms and protocols: Okta, Microsoft Entra ID, Active Directory, Microsoft 365, MFA, Conditional Access, SSO, SCIM, SAML, OAuth 2.0, OpenID Connect, lifecycle automation, group governance, enterprise applications, managed identities, and application registrations.
  • Privileged-access management: CyberArk administration and engineering, including vaulting, safes, platforms, credential rotation, reconciliation, privileged session controls, account discovery, onboarding, access workflows, reporting, service accounts, emergency access, and operational recovery.
  • Identity threat exposure management: BloodHound Enterprise or comparable attack-path management platforms; Tier Zero analysis; transitive privilege; nested group analysis; delegated permissions; attack-path prioritization; Active Directory privilege hygiene; remediation validation; and exposure metrics.
  • Identity governance: Joiner, mover, leaver workflows; access certification; role and entitlement governance; segregation of duties; exception handling; contractor and vendor access; evidence collection; and control reporting.
  • Automation and analysis: PowerShell, Microsoft Graph, REST APIs, structured data analysis, identity inventory reconciliation, workflow automation, and integration with ticketing, SIEM, and reporting platforms.
  • Identity detection and response: Analysis of authentication, privilege, administrative, and access telemetry from Okta, Entra ID, Active Directory, CyberArk, SaaS platforms, and related identity systems.
  • SaaS access-control models for platforms such as Microsoft 365, Salesforce, Box, and other business-critical applications.
  • Strong communication skills and comfort working across technical teams, business owners, Compliance, HR, and Operations.
  • Demonstrates curiosity and a continuous improvement mindset by identifying opportunities to enhance processes, improve efficiency, and thoughtfully leverage new technologies and tools, including AI-enabled productivity solutions

Personal Attributes
  • Take ownership and move initiatives forward without constant oversight.
  • Balance technical depth, process discipline, and sound business judgment.
  • Approach risk management pragmatically rather than theoretically.
  • Demonstrate sufficient technical judgment to distinguish an exploitable identity path from a theoretical configuration concern.
  • Work carefully through complex privilege remediation where seemingly minor changes may affect applications, service accounts, administrative workflows, or production systems.
  • Thrive in collaborative, high-accountability environments.
  • Communicate clearly with technical and non-technical colleagues.
  • Bring an entrepreneurial mindset to building and improving security capabilities.

Applicants must be authorized to work in the United States without the need for current or future employer-sponsored work authorization (e.g., H-1B , O-1, F-1 (OPT), TN, or any other non-immigrant visa classifications that require employer support or sponsorship).
MD Salary: $110-$135k. Commensurate with experience and location. Does not include bonus or long term incentive eligibility (if applicable).
Benefits
At Brown Advisory we offer a competitive compensation package, including full benefits.
• Medical
• Dental
• Vision
• Wellness program participation incentive
• Financial wellness program
• Fitness event fee reimbursement
• Gym membership discounts
• Colleague Assistance Program
• Telemedicine Program (for those enrolled in Medical)
• Adoption Benefits
• Daycare late pick-up fee reimbursement
• Basic Life & Accidental Death & Dismemberment Insurance
• Voluntary Life & Accidental Death & Dismemberment Insurance
• Short Term Disability
• Paid parental leave
• Group Long Term Disability
• Pet Insurance
• 401(k) (50% employer match up to IRS limit, 4 year vesting)
Brown Advisory is an Equal Employment Opportunity Employer.

Apply