Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
$110к-155к/год
$100к$120кмедиана$140к
По похожим ролям (50) ~ $120к/год
На СНГ рынке: $2.4к/мес ($2к - $2.9к)
80
Хорошая вакансия
развернуть
Обязанности в области киберрисков описаны четко, используются актуальные федеральные стандарты и есть опыт наставничества, но обязательный допуск Top Secret и работа на площадках клиента сужают круг подходящих специалистов.
Cyber Risk Management Specialist II (Cybersecurity): Assessing the security posture, compliance, vulnerabilities, and access risks of federal information systems with an accent on NIST RMF, NIST SP 800-53, FISMA, and CVSS-based risk scoring. Focus on documenting findings, briefing stakeholders, maintaining POA&M items and risk registers, and driving remediation plans through closure.
Location: Martinsburg, West Virginia, United States; New Carrollton, Maryland, United States; onsite presence at client facilities as directed. U.S. Citizenship and Top Secret clearance are required.
Salary: $110,000–$155,000 annually.
Company
hirify.global delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments, including cybersecurity, AI/ML, cloud, and IT modernization.
What you will do
Assess the operational security posture of information systems, components, applications, and programs supporting a large federal agency and its 24x7x365 SOC.
Evaluate compliance with approved security policies and technical controls, including risks to confidentiality, integrity, and availability.
Analyze vulnerability, configuration, access, and threat data to identify and prioritize risks to data exposure.
Recommend, document, and brief stakeholders on remediation options.
Work with program teams to execute remediation plans, validate closure, and maintain POA&M items, risk registers, and supporting evidence.
Analyze vulnerability reporting related to active threats, incident response, and SOC awareness, while mentoring junior specialists.
Requirements
Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 4+ years of relevant professional experience; three additional years of relevant experience may substitute for the degree.
Proficiency applying technical principles to assess information system confidentiality, integrity, and availability.
Working knowledge of NIST RMF, NIST SP 800-53, and FISMA.
Experience with vulnerability management tools and CVSS risk scoring.
Experience documenting findings and briefing stakeholders on remediation.
U.S. Citizenship and Top Secret clearance are required.
Nice to have
CompTIA Security+, CySA+, CAP/CGRC, CISA, or similar certifications.
Experience with federal A&A/ATO and continuous monitoring.
Experience with GRC tools such as CSAM, Xacta, or ServiceNow GRC.
Active Top Secret clearance.
Culture & Benefits
Family-focused culture and dynamic, productive work environment.
Flexible schedules and teleworking options.
Medical insurance, including HSA-eligible plans, plus employer-paid dental and vision options.
Employer-sponsored short-term disability, long-term disability, and life insurance.
5% 401(k) company match, paid holidays, PTO accrual, and paid parental leave.
Professional development, career growth opportunities, and team and company-wide events.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →