ZipRecruiter

Log In

1

Security Risk Analyst Jobs in Baltimore, MD (NOW HIRING)

Jensen Hughes

Sr. Project Finance Analyst

Columbia, MD · On-site

$84K - $105K/yr

Today, our expertise extends broadly across closely related security and risk-based fields - from accessibility consulting and risk analysis to process safety, forensic investigations, security risk ...

New

Jensen Hughes

Sr. Project Finance Analyst

Columbia, MD · On-site

$84K - $105K/yr

  • Medical

  • Retirement

Today, our expertise extends broadly across closely related security and risk-based fields - from accessibility consulting and risk analysis to process safety, forensic investigations, security risk ...

New

previous pagenext page

Showing results 21-40

All JobsSecurity Risk Analyst JobsSecurity Risk Analyst Jobs in Baltimore, MD

Security Risk Analyst information

See Baltimore, MD salary details

$10

$50

$69

How much do security risk analyst jobs pay per hour?

As of Aug 14, 2026, the average hourly pay for security risk analyst in Baltimore, MD is $50.09, according to ZipRecruiter salary data. Most workers in this role earn between $40.62 and $59.71 per hour, depending on experience, location, and employer.

What does a security risk analyst do?

A Security Risk Analyst is responsible for identifying, assessing, and mitigating risks to an organization's information systems and data. They analyze security measures, conduct vulnerability assessments, and recommend strategies to protect against threats such as cyberattacks, data breaches, and unauthorized access. Their work helps ensure that a company's digital assets remain safe and compliant with industry regulations. Security Risk Analysts collaborate with IT teams and management to implement effective security policies and respond to incidents as needed.

What are the key skills and qualifications needed to thrive as a security risk analyst?

To thrive as a Security Risk Analyst, you need a strong background in risk assessment, information security principles, and analytical thinking, often supported by a degree in cybersecurity, IT, or a related field. Familiarity with risk management frameworks (such as NIST or ISO 27001), security assessment tools, and certifications like CISSP or CISM is highly valuable. Excellent communication, attention to detail, and problem-solving abilities help you translate complex risks for varied stakeholders and drive mitigation strategies. These skills and qualities are crucial for identifying vulnerabilities, minimizing threats, and maintaining organizational security and compliance.

What are some common challenges security risk analysts face when collaborating with other departments?

Security Risk Analysts often work closely with IT, compliance, and business units to assess and mitigate risks. A common challenge is bridging the gap between technical security requirements and business objectives, as not all stakeholders may have a cybersecurity background. Effective communication and education are key to ensuring that risk recommendations are understood and adopted. Additionally, prioritizing risks with limited resources and balancing security with operational needs can be complex, requiring strong collaboration and negotiation skills.

What is the difference between Security Risk Analyst vs Security Analyst?

AspectSecurity Risk AnalystSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CISSP, CEH
Work EnvironmentRisk assessment, vulnerability analysis, policy developmentMonitoring security systems, incident response, security audits
Employer & Industry UsageFinancial, healthcare, government sectors focusing on risk mitigationIT departments across various industries focusing on security operations

While both roles focus on cybersecurity, Security Risk Analysts primarily assess and manage potential security threats and vulnerabilities, emphasizing risk mitigation strategies. Security Analysts tend to monitor security systems, respond to incidents, and ensure ongoing security measures. Both roles often require similar certifications and work environments but differ in their core responsibilities within cybersecurity teams.

What is a security risk analyst?

A security risk analyst is a professional who identifies, assesses, and mitigates security threats to an organization’s information systems. They analyze vulnerabilities, develop security strategies, and often use tools like risk assessment frameworks and security software to protect data and infrastructure.

What are popular job titles related to Security Risk Analyst jobs in Baltimore, MD?

For Security Risk Analyst jobs in Baltimore, MD, the most frequently searched job titles are:

What job categories do people searching Security Risk Analyst jobs in Baltimore, MD look for?

The top searched job categories for Security Risk Analyst jobs in Baltimore, MD are:

Security Risk Analyst jobs near you
Infographic showing various Security Risk Analyst job openings in Baltimore, MD as of August 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution, with an average salary of $104,181 per year, or $50.1 per hour.

Information Security Analyst Lead

eSimplicity

Fort George G Meade, MD • On-site

$112K - $150K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 16 days ago

Job description

Job Type
Full-time
Description
About Us:
eSimplicity is modern digital services company that work across government, partnering with our clients to improve the lives and ensure the security of all Americans-from soldiers and veteran to kids and the elderly, and defend national interests on the battlefield. Our engineers, designers and strategist cut through complexity to create intuitive products and services that equip Federal agencies with solutions to courageously transform today for a better tomorrow for all Americans.
Purpose of Scope:
We are seeking an Information Security Analyst who is responsible for providing security support services while meeting security control compliance requirements for a portfolio of systems at various states of maturity and modernization. This role will provide support for continuously monitoring the cybersecurity posture of systems to secure against cyber threats.
The primary responsibility is to facilitate security tool and control implementation, security tool usage, and ensure tools and controls remain compliant and configured properly, all the while ensuring a successful program Authorization to Operate (ATO). Additionally, the expectation is to take ownership of communication and visualization of security issues, especially where coordination between product teams, information owners, engineering, and infrastructure staff is necessary for remediation.
The candidate will own coordination and response to the agency's security-related inquiries, compliance with agency policy, security controls, and the maintenance of security documentation and artifacts. You will function as the primary liaison to provide timely and accurate responses to security-related data calls (System Security & Compliance Status, Vulnerability, and Compliance scanning issues) and provide security guidance throughout the system development lifecycle. This role requires interfacing with multiple stakeholders through multiple touchpoints weekly.
Responsibilities:
  • Work closely with the Product Owners, ISSOs, engineering and infrastructure staff to provide guidance on implementation if security policies, standards, and procedures
  • Analyze new or updated security requirements, collaborate with stakeholders, and develop responses that are clear and accurate.
  • Support the review and update of ATO artifacts such as System Security Plans, Information System Contingency Plans, Configuration and Change Management Plans, Incident Response Plans, Privacy Impact Analysis, and more.
  • Interpret security risk assessment, review security scan results, assess security vulnerabilities and support the development and remediation of vulnerability and compliance issues via Plan of Action and Milestones (POA&Ms).
  • Support the development of implementation and design documentation relating to security feature implementation.
  • Work with engineering and infrastructure personnel to document remediation for vulnerabilities and non-compliance issues.
  • Analyze and interpret agency security requirements and provide governance communication to non-security personnel.
  • Collaborate with product teams, ISSOs and other stakeholders in support of continuous monitoring and ATO efforts.
  • Conducts vulnerability assessments and monitors systems, networks, databases and Web-based assets for potential system breaches. Recommends and takes the lead on implementing changes to enhance security systems, prevent unauthorized access, and help mitigate security vulnerabilities.
  • Responds to alerts from information security tools. Reports, investigates, and resolves higher level security incidents.
  • Responds to security tool outages, degradations in service, tune security rules and alerts, and setup/maintain security tool dashboards and reporting.
  • Research security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach. Ensures compliance with regulations and privacy laws. Conducts research to identify new attack vectors.
  • Educates and communicates security requirements and procedures to all users and new employees.
  • Recommend process improvements to the information system for risk mitigation.
  • Applies iterative security automation to all program aspects increasing overall security posture iteratively and never accepts the status quo.
  • Provide audit log review in Splunk, present any findings to ISSO, and plan for any investigation or remediation activities.
  • Periodic user and privileged access reviews.

Requirements
Requirements
Required Qualifications:
  • Minimum of eight years of experience in cybersecurity architecture, cloud security, DevSecOps, security engineering, or a related technical field. Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field preferred but not required.
  • Must hold a current Security+ certification.
  • Experience designing security "baked-in" to architectures including Cloud and IaC, applications, web applications, data processing, data-centric applications, AI/ML, and CI/CD pipelines.
  • A proven track record
  • Familiarity with Agile methodologies.
  • Working knowledge of AWS or Azure security tools, their functionality, and their purpose.
  • Ability to assist customers with defining appropriate management processes (responsible for documenting application criticality, privacy, and security impact analysis).
  • Knowledge of hardening standards (DISA STIG, CIS).
  • Experience with the NIST Risk Management Framework, NIST 800-53 rev5, and NIST 800-171.
  • Active secret clearance.

Desired Qualifications:
  • Federal Government contracting work experience.
  • Experience as an ISSO for the DoD.
  • Highly preferred industry certifications such as CISSP, CEH, GIAC, etc.
  • Experience with Security Information and Event Management (SIEM) systems (e.g., Splunk).

Location and Hours
Location: This role is primarily remote; however, the employee must be able to report on-site to Fort Meade, MD when requested due to customer or business needs. The frequency and timing of on-site support may vary and cannot be guaranteed in advance.
Hours: Expected hours are 9:00 AM to 5:00 PM Eastern Time unless otherwise directed by your manager.
Travel: Occasional travel for training and project meetings, estimated to be less than 5% per year.
Benefits:
eSimplicity offers a comprehensive benefits package, including medical, dental, and vision coverage, 401(k) retirement benefits, paid time off, paid holidays, life and disability insurance, and additional wellness and employee support programs. Eligibility may vary based on employment status and applicable plan terms.
Reasonable Accommodation:
eSimplicity is committed to providing reasonable accommodations to qualified individuals with disabilities during the application and hiring process. Applicants who need assistance or an accommodation should contact Human Resources.
Equal Employment Opportunity:
eSimplicity is an Equal Opportunity Employer, including disability and protected veteran status. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran status, disability, or any other legally protected status.
Salary Description
$112,800 - $150,000

Apply