Information Systems Security Specialist (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Information Systems Security Specialist (Cybersecurity): Managing the full Risk Management Framework (RMF) lifecycle for critical DHS IT systems with an accent on Assessment and Authorization (A&A) processes. Focus on implementing security standards, performing risk assessments, and ensuring system compliance through ATO efforts.
Location: Must be based in Arlington, VA (Onsite)
Company
provides advanced cyber, data operations, and systems integration services for intelligence, defense, and commercial markets.
What you will do
- Manage the full Risk Management Framework (RMF) lifecycle for IT systems.
- Support the design, development, and implementation of security solutions for lab environments.
- Perform risk analyses and assessments to ensure compliance with DHS IT security standards.
- Collaborate with ISSM and CISO to respond to Data Calls and satisfy ATO requirements.
- Coordinate security infrastructure planning and define future security programs.
- Interface with senior management and clients to support project objectives and decision-making.
Requirements
- U.S. Citizenship required
- Active TS/SCI clearance required
- Ability to obtain DHS Suitability
- 5+ years of relevant experience in information security management.
- Hands-on experience with Linux or AWS.
- Strong knowledge of NIST RMF, A&A documentation, and POA&M management.
Nice to have
- Experience with RMF software like Xacta, Archer, or CSAM.
- Familiarity with vulnerability scanning tools (Nessus, Tenable, Wiz).
- Knowledge of SIEM tools (Splunk, ELK) and Zero Trust architectures.
- Certifications: CISSP, AWS, Cisco, or Microsoft.
Culture & Benefits
- Opportunity to work on high-impact national security missions.
- Collaborative team environment focused on innovation and problem-solving.
- Professional growth within a specialized cybersecurity and intelligence organization.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →