Назад
Company hidden
7 дней назад

Cyber Risk Management Specialist II (Cybersecurity)

110 000 - 155 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Cyber Risk Management Specialist II (Cybersecurity): Assessing the security posture, compliance, vulnerabilities, and access risks of federal information systems with an accent on NIST RMF, NIST SP 800-53, FISMA, and CVSS-based risk scoring. Focus on documenting findings, briefing stakeholders, maintaining POA&M items and risk registers, and driving remediation plans through closure.

Location: Martinsburg, West Virginia, United States; New Carrollton, Maryland, United States; onsite presence at client facilities as directed. U.S. Citizenship and Top Secret clearance are required.

Salary: $110,000–$155,000 annually.

Company

hirify.global delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments, including cybersecurity, AI/ML, cloud, and IT modernization.

What you will do

  • Assess the operational security posture of information systems, components, applications, and programs supporting a large federal agency and its 24x7x365 SOC.
  • Evaluate compliance with approved security policies and technical controls, including risks to confidentiality, integrity, and availability.
  • Analyze vulnerability, configuration, access, and threat data to identify and prioritize risks to data exposure.
  • Recommend, document, and brief stakeholders on remediation options.
  • Work with program teams to execute remediation plans, validate closure, and maintain POA&M items, risk registers, and supporting evidence.
  • Analyze vulnerability reporting related to active threats, incident response, and SOC awareness, while mentoring junior specialists.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 4+ years of relevant professional experience; three additional years of relevant experience may substitute for the degree.
  • Proficiency applying technical principles to assess information system confidentiality, integrity, and availability.
  • Working knowledge of NIST RMF, NIST SP 800-53, and FISMA.
  • Experience with vulnerability management tools and CVSS risk scoring.
  • Experience documenting findings and briefing stakeholders on remediation.
  • U.S. Citizenship and Top Secret clearance are required.

Nice to have

  • CompTIA Security+, CySA+, CAP/CGRC, CISA, or similar certifications.
  • Experience with federal A&A/ATO and continuous monitoring.
  • Experience with GRC tools such as CSAM, Xacta, or ServiceNow GRC.
  • Active Top Secret clearance.

Culture & Benefits

  • Family-focused culture and dynamic, productive work environment.
  • Flexible schedules and teleworking options.
  • Medical insurance, including HSA-eligible plans, plus employer-paid dental and vision options.
  • Employer-sponsored short-term disability, long-term disability, and life insurance.
  • 5% 401(k) company match, paid holidays, PTO accrual, and paid parental leave.
  • Professional development, career growth opportunities, and team and company-wide events.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →