Information Security Specialists (Intermediate/Senior)

The Information Security Specialist (Intermediate/Senior) is responsible for protecting enterprise information systems by implementing and maintaining cybersecurity programs, Risk Management Framework (RMF) activities, vulnerability management, and compliance initiatives. The role ensures the confidentiality, integrity, and availability of information systems while supporting security assessments, accreditation efforts, continuous monitoring, and regulatory compliance.

• Develop, maintain, and enforce information security policies, standards, and procedures.
• Ensure compliance with cybersecurity regulations, directives, and security requirements.
• Support Risk Management Framework (RMF), certification, accreditation, and information assurance activities.
• Develop and maintain cybersecurity and Information Assurance (IA) program plans.
• Conduct security assessments to identify risks, vulnerabilities, and security violations.
• Support system authorization and accreditation processes.
• Integrate cybersecurity requirements into continuity of operations (COOP) and contingency plans.
• Maintain cybersecurity documentation, policies, and operational procedures.
• Collect and report cybersecurity compliance metrics and required documentation.
• Track and remediate vulnerabilities, IAVMs, and ICVMs.
• Develop and manage Plans of Action and Milestones (POA&Ms).
• Support continuous monitoring, security audits, inspections, and compliance assessments.
• Collaborate with engineering, systems administration, and operations teams to strengthen security posture.

• U.S. Citizenship with an active DoD Secret Clearance.
• Minimum 4 years of experience in cybersecurity, information assurance, or information security.
• DoD 8570/8140 IAT Level II Certification (CompTIA Security+ or equivalent).
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102).
• Experience supporting RMF, vulnerability management, compliance initiatives, and cybersecurity operations.
• Ability to obtain required baseline certification within six months of hire.

• Experience with DoD cybersecurity policies and NIST security standards.
• Experience supporting certification and accreditation activities.
• Knowledge of enterprise vulnerability management and compliance programs.
• Experience with continuous monitoring and security auditing.
• Strong analytical, documentation, communication, and problem-solving skills.