Market · Cleared legal talent

Security clearance attorney hiring in Maryland.

Between Fort Meade and the Baltimore waterfront sits a dense population of companies that cannot let a lawyer read their own contracts. For the general counsel filling that seat, the constraint is not the talent market. It is the eligibility.

Hire cleared counsel Submit your CV
01 Start here

Two questions wear the same three words.

A company searching for a security clearance attorney in Maryland is usually asking one of two unrelated questions: who defends a clearance under threat, or who can be hired onto the payroll already holding one. This page answers the second. Across 250 structured interviews with Baltimore corridor lawyers, 61 of the 94 respondents sitting inside cleared corporate legal departments over a 24-month window told Sartori their employer had at least once held a legal requisition open past six months on eligibility rather than on shortlist quality.

Lens 01 · The inversion The security process, not the talent market, sets the start date.

For the first quarter of fiscal 2026, the Defense Counterintelligence and Security Agency reported its investigation phase alone at 109 days for high-risk cases and 59 days for moderate-risk cases, on the fastest-90-percent measure. Sourcing a competent commercial lawyer in this metro takes weeks. Weeks to shortlist. Months to clear.

The seat exists, it is priced, and the constraint on filling it is administrative rather than commercial. The clock is broken down in full below.

~117,000
DCSA investigative inventory, FY26 Q1Down from a peak of about 725,000 cases in April 2018
Trusted Workforce 2.0 QPR; GAO-25-107325
24 months
Break-in-service reinstatement thresholdBeyond it, a new investigation is normally required
DoDM 5200.02, Change 1, 2020
10–25%
Stated cleared pay premium over uncleared peersTop of the range concentrated in TS/SCI holders
ClearanceJobs survey analysis, May 2026
337,968
Contractors DoD expects in CMMC scopeBy program year four, phased from 1,104 in year one
32 CFR Part 170 regulatory impact analysis, 2024
02 The inversion

Every other legal market is short of lawyers. This one is short of eligibility.

A hiring problem is normally a supply problem: too few people can do the work. Here the people can do the work and cannot yet be allowed to see it.

A general counsel in Columbia, Hanover or Annapolis Junction who needs a commercial lawyer is not operating in a thin market. Maryland recorded 26,020 resident active attorneys in the American Bar Association’s 2024 National Lawyer Population Survey, and the state sits at the edge of the second-largest legal labor concentration in the country. Briefing a competent contracts, privacy or employment lawyer here is an ordinary search. Then the requisition adds four words — active Secret required — and the market the general counsel was operating in ceases to be the market that matters.

The scale of the demand side is not in dispute. The Maryland Comptroller’s federal-impact dashboard, on a five-year average running through 2024, puts federal spending in the state at roughly $150 billion a year and federal employment of Marylanders at about 230,000. The Maryland Department of Commerce records 20 military installations in the state, more than 120 tenant organizations at Fort Meade alone, and a fifth-place national ranking by Department of Defense spending for fiscal 2023. The Fort Meade Alliance counted 284 member organizations in its 2026 impact report. Companies in that ecosystem do not merely sell to the government; a large share of them handle information the government classifies.

That is the inversion. In a normal legal market, the binding constraint is how many people can do the work, and money moves the constraint. Here the constraint is an administrative determination that money cannot move at all. A signing bonus does not shorten an investigation. A title does not create reciprocity. The company that budgets for compensation and forgets to budget for the clock has mispriced the hire in the only dimension that will actually decide whether the seat is filled this quarter or next year.

Sartori maps roughly 6,500 lawyers across the Baltimore metro, and that coverage is what makes the shortlist half of this problem tractable. Sartori’s Baltimore mandate telemetry records 15 closed in-house searches over the trailing three years at a 93 percent completion rate, on a desk that has worked this market for five years. The typical seat closes in 8 to 16 weeks. The clearance-conditioned seats did not.

Talent market decidesSecurity process decides

  1. The shortlist Skills, sector fluency, comp expectations, reporting line. This is the part a general counsel already knows how to run, and it behaves like any other search.
  2. The offer Band, equity, title, scope. Still commercial, still negotiable, still inside the company’s control. Counter-offers happen here and are managed here.
  3. The eligibility Sponsorship, investigation, adjudication, reciprocity, access indoctrination. Outside the company, outside the candidate, and immune to every lever the first two stops respond to.

The corollary matters more than the observation. If the third stop is where the risk sits, then the search has to be designed backwards from it. That means knowing, before a shortlist is circulated, whether the company can sponsor at all; whether the work can begin on a preliminary determination; and whether the access the role needs is collateral or agency-specific. Those are three questions a general counsel can answer in an afternoon, and answering them late is what turns an ordinary search into the one that embarrasses the department at the board meeting.

A signing bonus does not shorten an investigation. A title does not create reciprocity.
On the constraint
03 Who employs them

Four kinds of company, one corridor, one shared bottleneck.

These are not government offices. They are commercial employers with their own payrolls, their own legal departments and their own hiring committees — and they sit within a twenty-mile radius of one another.

01

Defense primes and integrators

Maryland divisions of national primes. Legal support sits with the sector, not only with corporate: contracts, subcontract flow-downs, internal investigations, export. The state put Northrop Grumman above 13,000 Maryland employees in 2022.

02

Listed cybersecurity vendors

Maryland-headquartered public companies that sell into federal buyers and run their own legal departments. Tenable filed its most recent annual report from Columbia in February 2026; ZeroFox files from Baltimore.

03

Cleared real estate and colocation

Owners and operators of the buildings classified work happens in. COPT Defense Properties, headquartered in Columbia, reported 31 single-tenant data centers alongside its office portfolio for fiscal 2024.

04

Operational-technology security

Industrial-control and OT security vendors that sit between critical infrastructure and federal buyers. A Hanover-based industrial cyber firm has run a Maryland headquarters facility with control-system ranges since 2018.

Start with the listed companies, because their filings are the cleanest evidence that an in-house legal function exists at all. Tenable Holdings filed its most recent annual report from Columbia, Maryland on 27 February 2026, and announced the creation of a combined chief legal officer and general counsel role leading a global legal organization in October 2022. ZeroFox Holdings, a threat-intelligence vendor, files from Baltimore and disclosed a general counsel and corporate secretary appointment in its registration statement. A company that signs a Form 10-K has a legal function whether or not it advertises one.

Next, the buildings. COPT Defense Properties, headquartered on Columbia Gateway Drive, reported a fiscal 2024 portfolio of 164 office buildings totaling 16.5 million square feet alongside 31 single-tenant data centers totaling 5.9 million square feet, run by 427 employees. Its National Business Park sits directly beside Fort Meade. A landlord at that scale negotiates single-tenant leases, development agreements and utility interconnections for tenants whose security obligations flow into the lease itself — which is a real estate legal seat with a security overlay, not a generic property practice.

Then the primes and the product companies. The Maryland Department of Commerce put Northrop Grumman’s statewide workforce above 13,000 in 2022, anchored on a Mission Systems campus at Linthicum of more than a million square feet. Operational-technology security sits alongside it: a Hanover-based industrial control security vendor has run a Maryland headquarters facility with control-system cyber ranges since 2018, and a Baltimore cybersecurity firm founded in 2009 serves both government and commercial buyers from Pratt Street. These are the employers whose contracts carry the clauses that create the legal work described in the next two sections.

Sortable — the article’s own map of corridor employer types against the in-house legal seat each one creates. Clearance columns describe what postings and program structure typically demand; they are not a survey of every employer in the category.
Employer type The seat What it owns Clearance posture Evidence
Defense prime, Maryland division Corporate counsel inside the business sector Prime and subcontract negotiation, DFARS flow-downs, export licensing, internal investigations, ethics Secret typical; Top Secret or SCI where the program requires it Employer postings at Linthicum, seen August 2026
Listed cybersecurity vendor Chief legal officer, general counsel, public-sector counsel Federal and state contracting, product counseling, incident disclosure, securities and governance Often none; clearance appears on the federal-facing sub-team SEC filings and company job boards, 2026
Cleared colocation or REIT Deputy general counsel, real estate and development Single-tenant leases, development agreements, utility and interconnection, tenant security obligations Varies by tenant mix; facility access rules bind regardless FY2024 annual report portfolio disclosure
OT and industrial-control vendor Commercial counsel with a security overlay Critical-infrastructure customer contracts, incident-reporting terms, CISA performance-goal representations Preferred rather than required at most levels Company facility and program disclosures
Federal IT services firm Senior corporate counsel or associate general counsel Task-order disputes, protest support, teaming agreements, labor and personnel security Secret common; program-specific escalation Company careers portals, 2026
04 The seat

What a security clearance attorney actually does inside a Maryland company.

Four disclosed postings, one metro, and a scope of work that is recognizably corporate rather than exotic. The clearance is a condition of entry, not a description of the job.

The single most useful thing a general counsel can do before writing a requisition is read what comparable employers have already published. Four postings seen in August 2026 across this metro describe the shape of the seat with more precision than any commentary. They also disclose bands, which is unusual enough in a state without a strong pay-transparency mandate that it is worth taking seriously when it happens.

Sortable — in-house legal postings in the Baltimore and Fort Meade corridor and one deliberate control, seen August 2026. Bands are as advertised by the employer, not salaries paid. Bethesda sits in Montgomery County, outside the corridor, and is included only for contrast.
Employer Location Title Clearance Advertised band Scope as posted
Northrop Grumman Linthicum Heights, MD Corporate Counsel II, Export and Import Active Secret $222,700 – $335,300 US customs and import compliance, ITAR and EAR export control, sanctions and embargo matters, non-US subsidiary support
Northrop Grumman Linthicum, MD Corporate Counsel, Mission Systems Secret preferred; TS/SCI eligible $133,050 – $275,000 Government and commercial contracting, litigation, internal investigations, IP, export compliance, ethics; 7+ years, 2+ in government contract law
Lockheed Martin Bethesda, MD Associate General Counsel Active Secret and US citizenship $156,400 – $275,655 Legal-compliance training for non-legal business audiences, contracts advisory. Posting indexed August 2026; employer page since removed
Tenable Columbia, MD Corporate Counsel, Public Sector None stated $128,000 – $170,000 base Public-sector contracting and commercial counseling; 3+ years. Included as the uncleared control in the same metro

Read the scope column and the job stops looking specialized. Customs and import compliance. Export licensing under the International Traffic in Arms Regulations and the Export Administration Regulations. Subcontract negotiation. Internal investigations. Intellectual property. Employment. This is a competent mid-to-senior corporate lawyer’s workload, delivered inside a building where the underlying facts are classified. The Mission Systems posting asks for seven or more years in total and only two or more specifically in government contract law — which tells you the employer regards the substantive law as learnable and the access as not.

The compliance overlay is what has been growing. The CMMC program rule was published on 15 October 2024 and took effect on 16 December 2024; the acquisition rule that actually puts the clause into Department of Defense contracts was published on 10 September 2025 and took effect on 10 November 2025, with a phase-in running to 10 November 2028. Under the program rule a named senior official must affirm continuing compliance annually. DFARS 252.204-7012 has for years required a cyber incident report within 72 hours of discovery, filed through a Department of Defense portal using an approved medium-assurance certificate. Section 889 of the fiscal 2019 National Defense Authorization Act, implemented at FAR 52.204-25, requires a representation on every offer and a flow-down into every subcontract.

Each of those is a clause with an owner. The affirmation belongs to whoever advises the executive who signs it. The 72-hour report belongs to whoever can be reached at 2am and can read the forensic detail without a read-in delay. The Section 889 representation belongs to whoever runs the supply-chain certification process. In a company small enough to have one lawyer, that is one person; in a company large enough to have six, it is a named split. Either way it is an internal role, because the moment of decision does not wait for a conflicts check at an outside firm.

A general counsel at a mid-cap Maryland cybersecurity product company put the problem to us in operational terms: the outside firm reads the redacted version and gives excellent advice on the redacted version, and by the time anyone with the full picture has read it, the reporting clock has spent a third of itself. That is the argument for the seat, and it is a better argument than the salary comparison.

The employer regards the substantive law as learnable and the access as not.
On the job itself
05 The clock

Three routes to a start date, and the failure mode of each.

A clearance is not a credential a candidate owns and carries. It is an access determination the government makes about a person, at the request of an employer, in respect of a specific contract.

Begin with who is allowed to ask. Under 32 CFR 117.9(a)(10) a contractor cannot apply for its own entity eligibility determination; sponsorship must come from a government contracting activity or from a contractor that is already cleared. The Defense Counterintelligence and Security Agency administers the industrial program as the cognizant security agency under 32 CFR 117.6(b). The instrument that carries the requirement down from a specific contract is the DD Form 254, whose instructions describe it as the principal authorized means of providing classification guidance, and which cannot specify a level above the contractor’s own facility clearance.

That chain has a blunt hiring consequence. If your company does not hold a facility clearance, you are not sponsoring anyone, and the only cleared lawyer you can hire is one who is already cleared through someone else and whose eligibility can be transferred. If you do hold one, the DD Form 254 on the relevant contract, not the job description, tells you what level the role genuinely requires.

A contract existsA person may read it

  1. The classified requirement A government contracting activity determines that performance requires access to classified information, and says so in the contract it awards.
  2. The facility and the form The company holds an entity eligibility determination it could not have requested for itself, and the DD Form 254 attached to the contract states what the work actually needs.
  3. The individual determination Only then does a named person get submitted, investigated, adjudicated and, where the holdings require it, separately indoctrinated for access.

How long, honestly

Two official series exist and they do not say the same thing, so both belong here. On the fastest-90-percent method used in government personnel-vetting reporting, the full fiscal year 2024 figures published in January 2025 put initial Secret cases at 87 to 96 days end to end against a 74-day goal, across a volume of 314,069 cases, and initial Top Secret cases at 155 to 183 days against a 114-day goal, across 126,667 cases. Legacy periodic reinvestigations, now being retired, ran 227 to 307 days against a 195-day goal. Separately, the cleared-careers job board ClearanceJobs, writing on 28 May 2025 from third-quarter fiscal 2025 agency data, reported a straight 243-day average end to end. Those two figures are not in conflict so much as they are not the same measurement: one reports the fastest nine cases in ten, the other reports a mean across all of them. Do not average them, and do not quote one to a board without naming which it is.

The direction of travel is better than the level. The investigative backlog peaked at roughly 725,000 cases in April 2018, the event that put the process on the Government Accountability Office’s high-risk list. Agency reporting for the first quarter of fiscal 2026 put the investigative inventory near 117,000, with a stated target of about 80,000 by the end of that fiscal year. Continuous vetting has replaced periodic reinvestigation across the national-security population, though the non-sensitive public-trust population was only around 33 percent migrated at the same reporting date.

There is a caveat that a general counsel should hear before relying on any of it. In December 2025 the Government Accountability Office reported that 63 percent of 305 sampled clearance statistics covering the third quarter of fiscal 2024 across seven agencies were inaccurate or incomplete, that 39 percent were inaccurate and 24 percent incomplete, and that a calculation error had understated processing times reported to Congress between 2020 and 2024. Plan against ranges. Do not put a clearance date in a board pack.

Comparison — the three routes by which a named lawyer becomes able to do the work, what each requires, and where each one characteristically breaks.
Route What it requires Who initiates Effect on the start date Failure mode
Already cleared, reciprocal A current investigation at or above the level required, no new adverse information, and no agency-specific add-on The receiving employer, through its security office A start date measured in days once the paperwork moves Any of the seven SEAD 7 exceptions, or a polygraph of the wrong scope, converts this into one of the routes below
Interim or preliminary determination A sponsoring employer with a facility clearance, a submitted application, and work the interim level covers The employer, at the point of hire Allows a lawyer to start on some work before final adjudication It does not follow the person to a new employer, and it does not reach every classified holding
New investigation Sponsorship, a completed application, investigation and adjudication in sequence The employer, then the investigative service provider Months, not weeks, and the figure depends on the tier A break in service beyond 24 months usually forces this route even for a lawyer who was cleared before

Reciprocity is fast on paper and slow in practice

Agency reporting has shown an average of one day for a straight transfer of trust consistently from the third quarter of fiscal 2022 through the first quarter of fiscal 2026. That is the number a hiring manager hears and reasonably plans around. Security Executive Agent Directive 7, effective 9 November 2018, is where it comes apart: section E.2 lists seven exceptions permitting fresh vetting — new adverse information, an investigation older than the applicable threshold, an adjudication carrying an exception to standards, Bond Amendment disqualifiers, approved unique agency needs, temporary or limited grants, and any prior denial, revocation or suspension. Section E.3 makes polygraph results reciprocal only where current and of the type required, which is why a counterintelligence-scope examination does not open a door that needs full scope.

The Government Accountability Office measured the practical shortfall on 22 January 2024: 28 of 31 surveyed agencies said their systems at times lacked complete information to make a reciprocity determination, and 17 of 31 said they sometimes distrusted other agencies’ processes enough for it to affect the decision. Two more mechanics matter to a hiring plan. A preliminary determination granted under a previous employer does not travel with the lawyer; the new employer requests its own. And under DoD Manual 5200.02, reinstatement without a fresh investigation generally depends on a break in service under 24 months with the underlying adjudication still current — a threshold that quietly disqualifies the excellent candidate who spent three years at a firm.

Adjudication itself follows Security Executive Agent Directive 4, signed on 10 December 2016 and effective 8 June 2017, which sets 13 guidelines running from allegiance and foreign influence through financial considerations, personal conduct and handling protected information. The Defense Office of Hearings and Appeals publishes individual industrial-security decisions by year but no aggregate grant or denial statistics, so any percentage quoted to you about denial rates is almost certainly someone’s estimate rather than a published figure.

06 What it pays

The premium is visible inside a single metro.

National survey averages describe cleared professionals of every kind. The more useful comparison sits eleven miles apart on the same commuter corridor.

Bureau of Labor Statistics data for 2025, published through O*NET, put the mean annual wage for Maryland lawyers at $139,110 and the median in the Baltimore-Columbia-Towson metro at $132,400. That is the floor the corridor prices against, and it is unremarkable. What is remarkable is the spread above it, and that the spread tracks eligibility rather than seniority.

Top of the advertised band for four in-house legal postings in the Maryland market, August 2026, against the metro lawyer median. These are ceilings an employer published, not salaries paid, and each is a single requisition rather than a survey. Click or hover a marker for the source.
$100K$350K

Baltimore metro lawyer median

All lawyers, all sectors, all seniorities. The market this corridor recruits out of.

BLS 2025 data via O*NET

The control in that set is doing the most work. A listed cybersecurity vendor in Columbia advertised public-sector corporate counsel with no clearance stated at a base band topping out at $170,000. A defense prime eleven miles away in Linthicum advertised a corporate counsel seat preferring a Secret clearance with a band topping out at $275,000. The two roles are not identical and no single pair of postings proves a market rate. But the gap between those two ceilings is 62 percent, inside one metropolitan statistical area, on comparable commutes, in the same month — and it is a far more useful number for a Maryland general counsel than any national average.

National survey data points the same way with a different instrument. The cleared-careers job board ClearanceJobs, publishing its 2026 compensation survey on 31 March 2026 from 2025 survey-year responses, reported average total compensation across all cleared professionals of $126,125, up about six percent year on year, with a Maryland-specific average of $139,303. Its 13 May 2026 analysis of the same dataset placed the premium over uncleared peers in comparable roles at 10 to 25 percent, and separately reported average total compensation of $149,875 for holders of a lifestyle or full-scope polygraph against $118,680 for those with none. This is a job board’s own survey of its audience rather than agency wage data, and it covers cleared professionals of all kinds rather than lawyers; read it as a shape, not a benchmark.

Average total compensation by clearance tier across all cleared professions — engineers, analysts and cyber staff as well as lawyers. The ladder is the point: each step up the access hierarchy carries a measurable premium, and lawyers sit inside the same ladder rather than beside it.

ClearanceJobs 2026 compensation survey analysis, 13 May 2026 (survey year 2025).

The public sector sets a competing ceiling that corridor employers have to clear. On the 2026 General Schedule with the Washington-Baltimore-Arlington locality payment of 33.94 percent, a GS-15 begins at $169,279 and is capped at $197,200 by the Executive Schedule. A cleared lawyer weighing a move from an agency office at Fort Meade into a company on the National Business Park is comparing a capped federal ladder against an uncapped commercial one — which is the single most reliable reason a corridor employer wins a candidate, and the reason agencies keep losing them.

Sartori’s Baltimore in-house telemetry records counter-offer incidence at 31 percent and a median of 14 working days between offer and acceptance. Both numbers behave differently when a clearance is involved. A head of talent at a defense electronics prime’s Maryland division described the internal logic plainly: losing a cleared lawyer does not cost the company a search, it costs the company a sponsorship cycle, so the counter-offer authority sits higher and moves faster than it does for an uncleared seat of the same grade. That is a derived read rather than a measured one, but it follows directly from the reinstatement and reciprocity mechanics set out above.

Losing a cleared lawyer does not cost the company a search. It costs the company a sponsorship cycle.
On the premium
07 Where they come from

The bench is grown, not recruited.

Nobody qualifies as a cleared lawyer. They qualify as a lawyer, then spend years somewhere that sponsors them — and the corridor hires almost entirely out of that residue.

The arithmetic of scarcity is the intersection of two populations that are each large and barely overlap. Bureau of Labor Statistics occupational data for May 2023 recorded 7,840 lawyers employed in the Baltimore-Columbia-Towson metro against 48,470 in the Washington-Arlington-Alexandria metro. The cleared population is separately large: the Office of the Director of National Intelligence’s fiscal 2023 determinations report, as summarized in a 2026 cleared-careers guide, put eligibility at roughly 3.7 million people with about 1.26 million at Top Secret. Other secondary summaries of the same report circulate a figure above four million; neither was traceable to a directly retrievable primary document during this research, and the article does not pick a winner between them.

No register publishes the intersection. There is no count of American lawyers holding a current clearance, and this article will not manufacture one. What can be described is where they come from, and those routes are few enough to name.

Sponsored by serviceSponsored by a company

  1. Uniformed and agency service Judge advocate corps across the services, agency general counsel offices, and Department of Justice national-security work. Eligibility arrives as a condition of employment rather than as a career choice.
  2. The first commercial move A move from an agency office or a JAG billet into a prime, an integrator or a product company. This is the transfer that converts a public-sector lawyer into a corridor candidate, and it usually happens once.
  3. The corridor in-house bench Lateral movement between cleared employers within the same geography. Small, well known to itself, and the pool almost every corridor requisition is actually fishing in.

The agency layer sits physically inside the corridor, which is why the corridor has a bench at all. A Department of Defense Inspector General report dated 21 October 2021 records that the National Security Agency’s general counsel supervises over 100 attorneys, organized into practice groups covering legislation, intelligence operations, cybersecurity, ethics, procurement, research and development, litigation and a combined environmental, patents, personnel-security and employment group. That office is at Fort Meade. The Department of Defense’s Deputy General Counsel for Intelligence supervises the general counsels of the Defense Intelligence Agency, the National Geospatial-Intelligence Agency, the National Security Agency, the National Reconnaissance Office and the Defense Counterintelligence and Security Agency — one supervisory chain covering the entire intelligence-legal ecosystem the corridor recruits from.

The uniformed layer feeds the same pool. The Army judge advocate general’s corps runs roughly 2,000 full-time active-duty judge advocates and civilian attorneys, on secondary sourcing that should be treated as approximate rather than as personnel data. Judge advocates leave with two things a corridor employer values and cannot train: current eligibility, and a working instinct for operating inside a classification regime. The academic feeder is regional rather than local — Georgetown’s national security law curriculum and George Washington’s national security and cybersecurity LL.M., which has run satellite courses at Fort Belvoir since the fall of 2022, are the specialist programs the region draws on, while Maryland’s own two law schools supply general volume into the state bar.

Lawyers employed by metropolitan area, all sectors and seniorities. Baltimore is a real legal market and a small one next to the capital next door — which is why a corridor employer that will not consider a Washington-side commuter has cut its own pool before the clearance filter is applied at all.

BLS Occupational Employment and Wage Statistics, SOC 23-1011, May 2023.

Movement inside the cleared population is real but modest. The 2025 cleared compensation survey reported that more than 13 percent of cleared professionals changed employer for better pay in the preceding year. The prevailing practitioner account of why the figure is not higher is consistent across published cleared-careers commentary: sponsorship, not the clearance certificate, is the asset, and leaving one sponsor before another is confirmed can stall a process that was otherwise complete. The published counter-view is that this anxiety is overstated, and that changing employer mid-investigation is more common than applicants believe provided sponsorship continuity is managed. Both accounts are editorial synthesis of practitioner questions rather than survey data, and are described here as such.

One consequence is geographic and it is worth stating plainly to any general counsel considering a remote arrangement. A clearance is worth very little away from the physical work it attaches to. Cleared candidates in this corridor do not relocate out of it, and they do not accept roles that assume they can do classified work from a kitchen table in another state. Virginia and the District compete for the same people on the same terms; the corridor’s advantage is the commute, not the offer.

08 Running the search

Design the search backwards from the eligibility.

The company controls the requisition, the sponsorship decision and the level demanded. It controls nothing after that. Everything below follows from taking that division seriously.

Sortable — what to interrogate on a cleared in-house shortlist. Each row is an item this article enumerates; weighting is qualitative guidance for a search brief rather than a scoring model.
Factor What to interrogate Weighs most for
Eligibility status Current and at what level, when the last investigation closed, and whether any access is agency-specific rather than collateral. Every cleared seat
Break in service Months since the last access, measured against the 24-month reinstatement threshold rather than against a resume gap. Returners from firms or academia
Polygraph scope Whether a counterintelligence or full-scope examination is held, and whether it is current for the receiving employer. Agency-adjacent programs
Contract literacy FAR and DFARS parts actually negotiated, not merely reviewed; flow-down drafting; a closed protest or dispute. Government contracts seats
Attestation exposure Experience advising a named signer on an affirmation or certification, and comfort saying no to one. CMMC and FedRAMP-facing roles
Incident clock A cyber incident report actually filed under deadline, and the decision record around it. Privacy and cyber counsel
Seat geography Willingness to sit inside the corridor rather than commute from a remote arrangement that classified work cannot accommodate. All cleared seats

Your exposure is a start date, not a shortlist. Sartori’s Baltimore desk closed 15 in-house mandates in three years at a 93 percent completion rate; the clearance-conditioned ones were the slow ones, and they were slow for reasons no candidate controlled.

  • Split the requisition in two. Write the legal specification and the access specification as separate documents. The first is negotiable, the second is not, and confusing them produces a role nobody can fill.
  • Pull the DD Form 254 first. Your program team already has it. It settles whether the seat needs Secret, Top Secret or sensitive compartmented access, and it does so on the record rather than by preference.
  • Budget the counter-offer honestly. Our Baltimore in-house counter-offer incidence runs 31 percent, and cleared employers defend harder because replacement costs them a sponsorship cycle rather than a search.
  • Front-load the eligibility question. Level, date of last investigation, months since last access, polygraph scope and currency. Four questions in the first call save six weeks in the eighth.
  • Consider the uncleared hire with a sponsorship plan. If you hold the facility clearance and the work can start on unclassified matters, the candidate pool multiplies immediately. Most companies dismiss this route without pricing it.

Your eligibility is an asset you do not own and cannot carry independently — and its value decays on a clock most candidates never look at.

  • Know your own dates. When the last investigation closed, when access last lapsed, and what scope of polygraph you hold. Employers ask late; the ones who ask early are the ones running a real process.
  • Watch the 24-month threshold. A break in service beyond it generally means a new investigation rather than a reinstatement, which changes what any employer can offer you and when.
  • Do not resign into a gap. A preliminary determination granted under your current employer does not follow you; the new employer requests its own from scratch.
  • Price the ceiling, not the base. Federal GS-15 pay in this locality caps at $197,200. Corridor commercial bands do not cap, which is the structural reason the move is usually upward.
  • Explore on a no-names basis. This bench is small and knows itself. Our lateral-move decision guide covers how to test a market without putting a current seat at risk.

The service view of this book, with the full brief-to-close process, sits on our Baltimore in-house counsel recruiting page, and the senior end of it on our general counsel search page for the same metro. Companies building a legal function from nothing rather than adding a seat to an existing one should start with the first general counsel guide instead; the sequencing questions there come before anything on this page.

Common questions about cleared in-house legal hiring in Maryland

What does a security clearance attorney cost a Maryland employer in 2026?

Disclosed employer bands in the corridor run from about $133,050 to $335,300 for cleared in-house counsel. Northrop Grumman’s Linthicum Heights export and import counsel role, which requires an active Secret clearance, was posted in a $222,700–$335,300 band in August 2026; its broader Mission Systems corporate counsel seat, which prefers Secret and asks for seven or more years of experience, was posted at $133,050–$275,000. For comparison, a Columbia-based cybersecurity vendor advertised public-sector corporate counsel at a $128,000–$170,000 base with no clearance stated. Bureau of Labor Statistics data for 2025, published through O*NET, put the median lawyer wage in the Baltimore-Columbia-Towson metro at $132,400. The cleared band does not begin where the uncleared band ends; it begins near the same place and runs far higher.

How long does it take to fill a cleared in-house legal seat near Fort Meade?

Budget two clocks. Sartori’s Baltimore in-house desk works to a typical 8 to 16 week timeline, and the clearance-conditioned seats we closed ran past it. The search itself behaves normally: a shortlist of commercial, contracts or privacy lawyers in a corridor this dense is not hard to assemble. Eligibility is the second clock, and it is the one that decides the start date. For the 2024 fiscal year, government reporting under the fastest-90% method recorded initial Top Secret cases at 155 to 183 days end to end against a 114-day goal, and initial Secret cases at 87 to 96 days against a 74-day goal. A company that has not decided whether it will sponsor, and whether it can live with an interim determination, has not really opened the search.

Can our company sponsor a lawyer’s clearance, or must they already hold one?

You can sponsor — but only if you already hold a facility clearance and a contract that requires access. Under 32 CFR 117.9(a)(10), a contractor cannot apply for its own entity eligibility; a government contracting activity or an already-cleared contractor has to sponsor it. The requirement then flows down through the DD Form 254 attached to the contract, which is the instrument that tells you what level of access the work actually needs. An individual cannot buy, rent or carry a clearance independently of that chain. If your company does not hold the facility clearance, the honest answer is that you are hiring an already-cleared lawyer or you are not hiring a cleared lawyer at all.

Does a clearance transfer when a lawyer changes employers?

Sometimes in a day, sometimes not at all. The Defense Counterintelligence and Security Agency reported an average of one day for a straight transfer of trust in its FY26 Q1 reporting, which is the best case and a real one. The exceptions are what break searches. Security Executive Agent Directive 7, effective 9 November 2018, lists seven grounds on which a receiving agency may require fresh vetting, and separately provides that a polygraph is reciprocal only where it is current and of the type required — so a counterintelligence-scope examination does not satisfy an employer that needs full scope. A Government Accountability Office review published 22 January 2024 found that 28 of 31 surveyed agencies said their systems sometimes lacked the information needed to make a reciprocity decision.

Which Maryland companies actually employ cleared in-house counsel?

Four groups, all with Maryland addresses. Defense primes and systems integrators — Northrop Grumman’s Mission Systems campus at Linthicum sits inside a Maryland workforce the state put above 13,000 in 2022. Publicly traded cybersecurity vendors headquartered in the state, such as Tenable in Columbia and ZeroFox in Baltimore, run their own legal functions and disclose the roles in filings. Real estate and colocation operators serving classified workloads, including COPT Defense Properties in Columbia, whose FY2024 portfolio included 31 single-tenant data centers. And operational-technology and industrial-control security vendors, including a Hanover-based industrial cyber firm. The Fort Meade Alliance counted 284 member organizations in its FY2026 impact report.

Should we hire this seat in-house, or send the work to outside counsel?

Send it out while the volume is episodic; bring it in when a personal signature is involved. The CMMC program rule requires a named senior official to affirm continuing compliance annually in the Supplier Performance Risk System, and DFARS 252.204-7012 requires a cyber incident report within 72 hours of discovery. Neither of those is a matter you can brief out at the moment it arises. The Department of Justice recovered roughly $51.8 million across eight to nine cyber-related False Claims Act settlements in fiscal 2025, against about $15.6 million the year before. When the person who signs is your executive, the lawyer who reads it before they sign generally needs to be your employee, in your building, cleared to see the underlying facts.

09 Sources

Every external figure on this page has a source.

Clearance mechanics and processing times come from the regulations themselves and from published government reporting. Employer bands come from postings seen in August 2026. Compensation survey figures come from a job board's own survey of cleared professionals and are labeled as such wherever they appear.

Sources & further reading

41 references
  1. Sartori & Partners — Baltimore Legal Talent Research Programme (250 structured interviews; ~6,500 lawyers mapped; quarterly surveys since 2019; mandate telemetry) sartoriglobal.com ↗
  2. eCFR — 32 CFR Part 117, National Industrial Security Program Operating Manual (sponsorship at 117.9(a)(10); DCSA at 117.6(b)) ecfr.gov ↗
  3. Washington Headquarters Services — DD Form 254 Instructions (April 2018, updated 11 July 2026) esd.whs.mil ↗
  4. Trusted Workforce 2.0 Quarterly Progress Report, January 2025 (FY24 end-to-end timeliness, fastest-90% method) assets.performance.gov ↗
  5. Trusted Workforce 2.0 Quarterly Progress Report, FY25 Q4 / FY26 Q1 legacy metrics (investigation phase, inventory, transfer of trust) assets.performance.gov ↗
  6. GAO-25-107325 — Federal Workforce: Observations on Implementation of Trusted Workforce 2.0 (9 May 2025) gao.gov ↗
  7. GAO-26-107100 — Personnel Security Clearances: Actions Needed to Address Significant Data Reliability Issues (December 2025) gao.gov ↗
  8. GAO-24-105669 — Personnel Vetting: Actions Needed to Improve Reciprocity Data (22 January 2024) gao.gov ↗
  9. Security Executive Agent Directive 7 — Reciprocity of Background Investigations and National Security Adjudications (effective 9 November 2018) cdse.edu ↗
  10. DoDM 5200.02 — Procedures for the DoD Personnel Security Program (3 April 2017, Change 1, 29 October 2020) esd.whs.mil ↗
  11. 2017 National Security Adjudicative Guidelines Job Aid — the 13 SEAD 4 guidelines nationalinsiderthreatsig.org ↗
  12. Federal Register — Cybersecurity Maturity Model Certification (CMMC) Program final rule, 32 CFR Part 170 (15 October 2024) federalregister.gov ↗
  13. Federal Register — DFARS: Assessing Contractor Implementation of Cybersecurity Requirements, 252.204-7021 (10 September 2025) federalregister.gov ↗
  14. Acquisition.gov — DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting acquisition.gov ↗
  15. Acquisition.gov — FAR 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment acquisition.gov ↗
  16. US Department of Justice — False Claims Act settlements and judgments exceed $6.8 billion in fiscal year 2025 justice.gov ↗
  17. CISA — Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA) program page cisa.gov ↗
  18. GSA — FedRAMP milestones, including FY25 authorization volume (11 August 2025) gsa.gov ↗
  19. Maryland Comptroller — Federal impact dashboard (five-year average federal spending and employment through 2024) dashboards.marylandtaxes.gov ↗
  20. Maryland Department of Commerce — Military, Federal and Defense industry page (installations, Fort Meade tenants, FY2023 DoD spending rank) business.maryland.gov ↗
  21. Maryland Department of Commerce — Northrop Grumman's Maryland footprint grows with new space assembly and test hub (2022) business.maryland.gov ↗
  22. Fort Meade Alliance — 2026 Impact Report (member organizations) ftmeadealliance.org ↗
  23. Tenable Holdings — Annual report on Form 10-K, filed 27 February 2026 (Columbia, Maryland headquarters) investors.tenable.com ↗
  24. Tenable — Chief legal officer and general counsel appointment announcement (31 October 2022) tenable.com ↗
  25. Tenable — Corporate counsel, public sector posting (company job board, August 2026) job-boards.greenhouse.io ↗
  26. ClearanceJobs — Maryland counsel and attorney postings (Northrop Grumman bands, seen August 2026) clearancejobs.com ↗
  27. Lockheed Martin — Associate general counsel, Bethesda posting (indexed August 2026; employer page returned 404 on later fetch) lockheedmartinjobs.com ↗
  28. O*NET Online — Maryland lawyer wages, SOC 23-1011 (BLS 2025 data) onetonline.org ↗
  29. BLS Occupational Employment and Wage Statistics, May 2023 — Baltimore-Columbia-Towson, MD bls.gov ↗
  30. BLS Occupational Employment and Wage Statistics, May 2023 — Washington-Arlington-Alexandria, DC-VA-MD-WV bls.gov ↗
  31. American Bar Association — 2024 National Lawyer Population Survey (Maryland resident active attorneys) nysba.org ↗
  32. ClearanceJobs — 2026 security clearance compensation survey release (31 March 2026) news.clearancejobs.com ↗
  33. ClearanceJobs — How clearance level affects compensation (13 May 2026) news.clearancejobs.com ↗
  34. ClearanceJobs — How long does it take to process a security clearance, April 2025 update (the competing average-days figure) news.clearancejobs.com ↗
  35. ClearanceJobs — Seven reasons a clearance might not transfer (20 July 2025) news.clearancejobs.com ↗
  36. ClearanceJobs — Changing jobs while a clearance is processing (12 July 2026) news.clearancejobs.com ↗
  37. DoD Office of Inspector General — DODIG-2022-002 (21 October 2021), NSA Office of General Counsel attorney supervision media.defense.gov ↗
  38. DoD Office of General Counsel — Deputy General Counsel (Intelligence) ogc.osd.mil ↗
  39. FedWeek — 2026 General Schedule locality pay table, Washington-Baltimore-Arlington fedweek.com ↗
  40. Sartori & Partners — In-house counsel recruiting in Baltimore  ↗
  41. Sartori & Partners — Is privacy and data protection law hiring in 2026?  ↗

Processing figures use two different methods that must not be blended: a fastest-90-percent measure in government quarterly reporting, and a straight average reported separately. A December 2025 GAO review found most sampled clearance statistics inaccurate or incomplete, so all such figures are directional. Employer bands are advertised ranges, not salaries paid; the Bethesda associate general counsel posting was indexed in August 2026 and its employer page later returned an error, and it sits outside the Fort Meade corridor in any case. Compensation-tier and premium figures come from a cleared-careers job board's own survey of cleared professionals across all occupations, not from agency wage data and not from a lawyer sample. Cleared-population totals are contested between secondary summaries of the same report. Judge advocate corps headcounts are secondary and approximate. CIRCIA had not been finalized as of August 2026.

Our own numbers — the interview cohort, the mandate telemetry, the counter-offer incidence and the offer-to-acceptance window — come from the continuous research program described on our research page, which sets out the cohorts, the survey waves and the mapping coverage behind every Sartori figure quoted above.

A quiet conversation

Filling a cleared legal seat in the Fort Meade corridor?

We map in-house legal talent across Baltimore, Columbia, Annapolis Junction and the Fort Meade corridor, and we are as willing to tell you a requisition is over-specified as to open a search. Confidential, no obligation.