Information Security EngineerMaryland State Judiciary

The Maryland Judiciary offers a generous benefit package including medical, dental, vision, life insurance, paid time off, paid holidays, tuition assistance, continuing education programs, employee assistance programs, and State Retirement and Pension plans. 

Maryland Judiciary Benefits (mdcourts.gov) 

About the Maryland Court System | Maryland Courts (mdcourts.gov)

salaryrangesfy27.pdf

Essential Job Functions:  

This position is responsible for the design, deployment, configuration, maintenance, and continuous improvement of information security tools and technologies used by JIS Information Security. This position works closely with others to implement, monitor and maintain security controls that protect Judiciary systems, networks, applications, and data. The Engineer evaluates information system assets, identifies vulnerabilities and security gaps, and provides recommendations to strengthen the overall security posture. Additionally, this position supports vulnerability management, security assessments, incident response, threat detection, and the secure implementation of new and existing technologies.

Deploy and configure security tools to include but limited to SIEM platforms, endpoint detection systems, vulnerability scanning, penetration testing, data loss prevention, information protection, artificial intelligence, log receiver management, email security, and various other technology toolsets.

Conduct security reviews of infrastructure to make recommendation and/or implement changes, application designs, and third-party integrations.

Deploy, integrate, troubleshoot, and validate data connectors, ingestion pipelines, and log sources across enterprise systems. 

Develop security automation scripts and integrations to accelerate incident detection, enrichment, and response workflows.

Collaborate with security operations, engineering teams, internal users, external partners/stakeholders, and application owners to ensure platforms support enterprise security objectives and risk management activities. 

Administer vulnerability management tooling, coordinate remediation activities, and track Plan of Action & Milestones (POAM) updates for compliance-related findings.

Collaborate with various teams including Governance, Risk & Compliance teams to evaluate risks, manage exceptions and draft, maintain and track compliance program documentation such as risk acceptance (RA) forms and plan of action and milestones (POAM). 

Integrate AI security toolkits into threat detection, monitoring, incident response and remediation activities. 

Develop custom APIs with the implementation of new system integrations.  Other duties as assigned.

Minimum Qualifications:

Education:     Bachelor's degree in computer science, information technology, cybersecurity, electrical engineering, or a related technical field (standard) 

Experience:   5 years of work experience in the areas of Information Technology with a focus in Cybersecurity security engineering, administration and, management. 2+ years of hands-on experience in information security operations, response, vulnerability management, threat detection or similar work. 

Preferred Certificates: 

Cloud Security Certifications (e.g. CCSP, CCSK) 

Microsoft/Azure Security Certifications (e.g. AZ-500, SC-200)

Note: Professional work experience as defined above may be substituted on a year for year basis for up to four (4) years of the required education. Equivalent experience plus certifications accepted at many organizations, particularly those with hiring pipelines from military technical training.

Knowledge of:

Security architecture: network segmentation, DMZ design, defense-in-depth and zero-trust principles.

Identity and access management Active Directory, Azure AD/Entra ID.

Endpoint security: CrowdStrike Falcon, Microsoft Defender for Endpoint.

Cloud security: CSPM tools (Prisma Cloud, Defender for Cloud, Azure Security), IAM policy analysis 

Application security: Qualys, SAST/DAST tools, OWASP Top 10, CVE & MITRE, web application firewall (WAF) configuration, Palo Alto firewalls rules & policies.

Knowledge of and experience with data security technologies. Experience with Microsoft Purview preferred. 

Experience with securing Artificial Intelligence resources, leveraging AI to improve information security defense capabilities, and defending against AI powered cyber-attacks. 

Azure and Office 365 security configuration and compliance best practices.

Understanding of security concepts and technologies used in SOC environments (e.g., SIEM, IDS/IPS, EDR, vulnerability scanners) ? Artificial Intelligence agents, models, benefits and security concerns

PowerShell, KQL, Python or other scripting languages used in security engineering.

Skill in:

Critical thinking with strong attention to detail and follow up.

Professionalism and personal integrity.  Handling sensitive situations and people.

Interpersonal relations. 

Written and verbal communications, effectively tailoring the communication to the needs and experience of the intended audience. 

Analytical thought, organization, and attention to detail. 

Understanding new technologies.

Ability to:

Effectively balance multiple responsibilities which may frequently change. 

Learn information quickly and apply risk/control considerations which impact downstream decisions. 

Communicate effectively with internal and external auditors.

Be well organized, work independently, and meet deadlines. 

Assess potential problems and make sound judgments around issues that may have an adverse effect on the Judiciary. 

Work well under pressure and with a high degree of independence. 

Work collaboratively with others to achieve defined goals. 

Maintain high level of confidentiality. 

Remain actively involved with industry peers to stay current with security practices, guidelines, legislation, etc. and use this knowledge to implement and promote continuous improvement of Judiciary's state of security. 

Glean important details from information security and other technical tools to analyze and interpret relevant security information.

Physical Requirements:

Sedentary work. Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.

Equipment, Machinery and Tools:

Computer equipment required to perform the business functions.

Software and Computer Skills:

Traditional office productivity tools such as Microsoft Office products, Outlook email, etc. 

ITSM tool used to support JIS business operations. . 

Specialized SOC tools and management software platforms.

Any other specialized software required in the delivery of position responsibilities.

In addition, this position needs to be able to glean the important details out of all information security and other technical tools to analyze and interpret relevant security information. This information is used to provide meaningful insight and guidance to the Security team, other JIS application and Technical support teams, internal and external audit and JIS Executive management.

Selection Process:

Your application package will be used to determine your eligibility, qualifications, and ranking for this position. If you are determined to be ineligible or not qualified, your application will receive no further consideration. It is essential that you provide complete and accurate information on your application. Please report all related education, experience, dates, and hours of work. If you have held more than one (1) position at the same employer, you must list each position that you held, the length of time that you held each position, and the corresponding duties. Description of duties that state, "see resume" will negatively impact consideration for this position. Applicants will not be contacted for additional information. Only applicants considered for this position will be contacted.

Complete applications must be submitted by the closing date. Information submitted after this date will not be added. Incomplete applications will not be accepted. Resumes will not be accepted in lieu of a completed application.

For further information please contact Talent Acquisition at aocta@mdcourts.gov.

The Maryland Judiciary is an equal-opportunity employer committed to fostering a workplace culture of diversity, equity, inclusion, and belonging. We do not discriminate on the basis of race, color, religion, age, sex, pregnancy, marital status, national origin, military or veteran status, physical or mental disability, familial status, genetic information, gender identity or expression, sexual orientation, or any other characteristic protected by State or federal law. Applicants who need an ADA Accommodation during the application and/or interview process should send their request via email to ADA@mdcourts.gov or call 410-260-1732. The Maryland Judiciary is a drug-free workplace. Applicants must be United States citizens or eligible to work in the United States. 

Please find the Maryland Judiciary's equal employment opportunity policy here: Policy Prohibiting Discrimination, Harassment, and Retaliation.