← Search all jobs

Sr Cyber Defense Sys Engineer

Constellation Energy

Annapolis, MD · Posted October 28, 2026

Just laid off? Start here: a plan for the first weeks

See every open role at Constellation Energy

More in Maryland job market · Energy & Utilities · Security jobs

More roles at Constellation Energy

Similar jobs

Where Annapolis, MD ranks

Where Annapolis, MD placed in our monthly rankings, month by month. Each month stays online at its own address.

Rankings about security jobs

Security jobs · Top Security employers · All rankings

How AI is used in this kind of work

Among computer occupations, all other, AI is already used for a large share of the tasks. Measured exposure for computer occupations, all other: 31% (high).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

Who We Are

As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes.

Our culture and employee experience make it clear: We are powered by passion and purpose. Together, we're creating healthier communities and a cleaner planet, and our people are the driving force behind our success. At Constellation, you can build a fulfilling career with opportunities to learn, grow and make an impact. By doing our best work and meeting new challenges, we can accomplish great things. Join us in meeting the country's energy needs today and tomorrow.

Total Rewards

Constellation offers an extensive selection of benefits and rewards to help our employees thrive professionally and personally. We provide competitive compensation and a wide-range of benefits that support both employees and their families, helping them prepare for the future. In addition to highly competitive salaries, eligible employees are offered a bonus program, 401(k) with company match, employee stock purchase program; comprehensive medical, dental and vision benefits, including robust wellbeing programs; disability and life insurance benefits; paid time off for vacation, holidays, and sick days; and much more.

Expected salary range of $121,500 to $135,000, varies based on experience, along with comprehensive benefits package that includes bonus and 401(k).

Primary Purpose of Position

Responsible for the maintenance and operation of the Cyber Security Operations Center (CSOC) and for providing targeted security advisory services. Tests, implements, deploys, maintains, reviews, and administers the infrastructure hardware, software, and documentation that are required to effectively manage network defense. Enables the Cyber SOC to meet key performance metrics across five key capabilities: Security Monitoring, Incident Handling & Response, Digital Forensics & eDiscovery, Cyber Threat Intelligence, and Technical Solutions Development. Responsible for the creation of content for use in monitoring toolsets while maintaining a uniform view of security monitoring architecture. Tests, implements, deploys, maintains, and administers the infrastructure hardware and software.

Primary Duties and Accountabilities

Deploy new data source feeds into SIEM & develops initial content for monitoring

Monitor SIEM infrastructure performance

Continually monitor, refine & improve upon the security technologies utilized by the CSOC. Perform system administration on specialized cyber defense applications and systems (e.g., EDR, Cloud and Email Security, SIEM, appliances) to include installation, configuration, maintenance, backup and restoration. Build, install, configure, and test dedicated cyber defense hardware.

Provide Log & Monitoring Design Services. Identify potential conflicts with implementation of any cyber defense capability (e.g., tool testing and optimization).

Provide Security Advisory Services

Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources.

Responsible for SOC Release Management & SOC Change Management

Assure that all equipment, systems, applications & appliances of threat & vulnerability management technologies are available & running effectively.

Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.

Lead projects to further enhance security technologies, practices, processes

Minimum Qualifications

Bachelor's degree and 5-years relevant experience, in lieu of degree 9 years of relevant experience

5-years solid, diverse experience in cyber security vulnerability assessments, or equivalent combination of education and work experience

Knowledge in the following core technical competencies: SIEM , EDR, Microsoft security suite, Linux, Palo Alto, Operations, Engineering, Content Development, Internetworking, TCP IP, Cribl or BindPlane

Strong knowledge of the Software Development Life Cycle (SDLC) and digital product development

Knowledge of how network services and protocols interact to provide network communications.

Knowledge of Security principles such as Threat Lifecycle Management & Incident Management & Lifecycle.

Knowledge of Cyber SOC processes and Cyber SOC Engineering

Knowledge of network protocols (e.g., Transmission Control Protocol/Internet Protocol [TCP/IP], Dynamic Host Configuration Protocol [ DHCP] and directory services (e.g., Domain Name System [DNS], Active Directory)

Knowledge of network traffic analysis methods

Knowledge of packet level analysis using appropriate tools (e.g., Wireshark).

Knowledge of basic system administration, network, and operating system hardening techniques

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense in-depth).

Knowledge of OSI model and underlying network protocols (e.g., TCP/IP, Dynamic Host Configuration Protocol [DHCP]), and directory services (e.g., Domain Name System [DNS]).)

Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution

Skill in securing network communications

Knowledge of protecting a network against malware

Knowledge of web filtering technologies

Knowledge of cyber defense policies, procedures, and regulations

Knowledge of test procedures, principles, and methodologies (e.g., Capabilities and Maturity Model Integration (CMMI))

Knowledge of basic system, network, OS hardening techniques and security benchmarks

Preferred Qualifications

Experience with Data Pipelines

Graduate degree in cyber security or related area of expertise.

Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff

Skill in using security event correlation tools

In-depth knowledge of cyber security program elements such as Policy Development, Application Security, Information Security, Network Security, Disaster Recovery Planning, Operational Security, Incident Response, and End User Education

CIM Normalization

Primary Purpose of Position

Responsible for the maintenance and operation of the Cyber Security Operations Center (CSOC) and for providing targeted security advisory services. Tests, implements, deploys, maintains, reviews, and administers the infrastructure hardware, software, and documentation that are required to effectively manage network defense. Enables the Cyber SOC to meet key performance metrics across five key capabilities: Security Monitoring, Incident Handling & Response, Digital Forensics & eDiscovery, Cyber Threat Intelligence, and Technical Solutions Development. Responsible for the creation of content for use in monitoring toolsets while maintaining a uniform view of security monitoring architecture. Tests, implements, deploys, maintains, and administers the infrastructure hardware and software.

Primary Duties and Accountabilities

Deploy new data source feeds into SIEM & develops initial content for monitoring

Monitor SIEM infrastructure performance

Continually monitor, refine & improve upon the security technologies utilized by the CSOC. Perform system administration on specialized cyber defense applications and systems (e.g., EDR, Cloud and Email Security, SIEM, appliances) to include installation, configuration, maintenance, backup and restoration. Build, install, configure, and test dedicated cyber defense hardware.

Provide Log & Monitoring Design Services. Identify potential conflicts with implementation of any cyber defense capability (e.g., tool testing and optimization).

Provide Security Advisory Services

Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources.

Responsible for SOC Release Management & SOC Change Management

Assure that all equipment, systems, applications & appliances of threat & vulnerability management technologies are available & running effectively.

Assist in assessing the impact of implementing and sustaining a dedicated cyber defense infrastructure.

Lead projects to further enhance security technologies, practices, processes

Minimum Qualifications

Bachelor's degree and 5-years relevant experience, in lieu of degree 9 years of relevant experience

5-years solid, diverse experience in cyber security vulnerability assessments, or equivalent combination of education and work experience

Knowledge in the following core technical competencies: SIEM , EDR, Microsoft security suite, Linux, Palo Alto, Operations, Engineering, Content Development, Internetworking, TCP IP, Cribl or BindPlane

Strong knowledge of the Software Development Life Cycle (SDLC) and digital product development

Knowledge of how network services and protocols interact to provide network communications.

Knowledge of Security principles such as Threat Lifecycle Management & Incident Management & Lifecycle.

Knowledge of Cyber SOC processes and Cyber SOC Engineering

Knowledge of network protocols (e.g., Transmission Control Protocol/Internet Protocol [TCP/IP], Dynamic Host Configuration Protocol [ DHCP] and directory services (e.g., Domain Name System [DNS], Active Directory)

Knowledge of network traffic analysis methods

Knowledge of packet level analysis using appropriate tools (e.g., Wireshark).

Knowledge of basic system administration, network, and operating system hardening techniques

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense in-depth).

Knowledge of OSI model and underlying network protocols (e.g., TCP/IP, Dynamic Host Configuration Protocol [DHCP]), and directory services (e.g., Domain Name System [DNS]).)

Skill in troubleshooting and diagnosing cyber defense infrastructure anomalies and work through resolution

Skill in securing network communications

Knowledge of protecting a network against malware

Knowledge of web filtering technologies

Knowledge of cyber defense policies, procedures, and regulations

Knowledge of test procedures, principles, and methodologies (e.g., Capabilities and Maturity Model Integration (CMMI))

Knowledge of basic system, network, OS hardening techniques and security benchmarks

Preferred Qualifications

Experience with Data Pipelines

Graduate degree in cyber security or related area of expertise.

Ability to demonstrate analytical skills, technical knowledge, and practical application of cyber and information security principles to business leaders and technical staff

Skill in using security event correlation tools

In-depth knowledge of cyber security program elements such as Policy Development, Application Security, Information Security, Network Security, Disaster Recovery Planning, Operational Security, Incident Response, and End User Education

CIM Normalization