Senior Security Engineer — Monitoring & Incident Response
DCL seeks a hands-on security engineer to build and run continuous security monitoring for a Maryland statewide program’s case management, document management, and call center systems. The contract requires automated monitoring and alerting: problems must be caught by our tools, not reported by users. You will tune the alerting that makes that possible, run vulnerability management, and lead first response when something goes wrong.
- Location
- Hybrid — Baltimore, MD area (within 50 miles of downtown Baltimore)
- Engagement type
- W-2 full-time
- Pay range
- $130,000–$160,000 per year, based on experience and certifications
- Schedule
- Full-time, Normal State Business Hours, with a shared on-call rotation for after-hours alerts
- Start
- Contingent upon contract award (anticipated spring 2027)
This position is contingent upon contract award to DCL’s prime contractor partner and execution of DCL’s subcontract. Anticipated start is spring 2027 (subject to the State’s award timeline), beginning with a four-month transition-in period.
Key responsibilities
- Design, deploy, and tune SIEM and automated alerting for security anomalies across contractor-managed systems, including the case management platform, IVR/telephony, and document management.
- Run the vulnerability management program: scanning, prioritization, remediation tracking, and verification.
- Triage security alerts and lead incident response, including containment, evidence handling, root-cause analysis, and State incident-reporting timelines.
- Validate secure configurations and VPN/secure-gateway connectivity to State systems.
- Produce monitoring metrics and incident reports for the program lead, the prime contractor, and State stakeholders.
- Participate in a shared on-call rotation for after-hours security alerts.
Required qualifications
- 5+ years of security engineering or security operations experience.
- Security+ (or higher, such as CySA+, GCIH, or CISSP).
- Hands-on experience with a SIEM (e.g., Microsoft Sentinel, Splunk, or Elastic) and endpoint detection and response tooling.
- Experience running vulnerability management and leading incident response in production environments.
- Working knowledge of cloud security (Azure, AWS, or Salesforce/SaaS platforms) and network security fundamentals.
- Authorized to work in the United States; all work must be performed within the continental United States.
- Ability to pass a background check and to complete required State of Maryland security and privacy training and confidentiality agreements before accessing program systems or data.
Preferred qualifications
- Experience in government programs handling PII or federal tax, health, or benefits data.
- Scripting or automation skills (PowerShell, Python, or KQL).
- Experience with Salesforce Shield/Event Monitoring or contact-center security.
- Veterans and military spouses are encouraged to apply.
Apply for Senior Security Engineer — Monitoring & Incident Response
Email a current resume, copies of your certifications, your availability, and confirmation of the pay range to careers@dummarsconsultants.com with the subject line “Senior Security Engineer — DCL Baltimore.” Applications are reviewed on a rolling basis.
Email careers@dummarsconsultants.comDummars Consultants LLC is an Equal Opportunity Employer. As a Service-Disabled Veteran-Owned Small Business (SDVOSB) and SWaM-certified firm, we are committed to a diverse and inclusive workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status, or any other characteristic protected by federal or Maryland law. All candidate information is handled in confidence.