Cybersecurity Specialist

This is a fully remote position, open to applicants in Maryland, +1 more state.

📋 Description

• Assist in the implementation, monitoring, and documentation of federal cybersecurity, privacy, and compliance requirements for Grants.gov applications, platform services, chatbot functionalities, integrations, and associated support systems.

• Participate in Authority to Operate activities, which include updating security documentation, collecting control evidence, preparing assessments, tracking remediation, and coordinating with federal security stakeholders.

• Oversee and support POA&M activities by monitoring findings, coordinating with remediation owners, documenting milestones, validating closure evidence, and communicating risk statuses.

• Facilitate vulnerability management tasks, including reviewing scans, triaging issues, planning remediation, tracking exceptions, coordinating patches, and verifying resolved findings.

• Aid in security monitoring, coordinating intrusion detection, managing incident responses, notifications, reporting, conducting root cause analysis, and recommending measures to reduce recurrence.

• Collaborate with development, operations, cloud, database, network, and application platform teams regarding releases, configuration changes, deployments, maintenance, and enhancements.

• Assess system changes, technical designs, operational procedures, and documentation for security implications, compliance alignment, and updates to security artifacts.

• Support disaster recovery, continuity of operations, backup recovery demonstrations, and contingency planning from a security and compliance viewpoint.

• Maintain security documentation, control implementation details, risk registers, incident reports, remediation plans, operating procedures, and compliance evidence.

• Assist in transition-in and transition-out activities related to security documentation, accounts, certificates, licenses, support systems, inventories, controls, and operational security responsibilities.

• Prepare and convey security status, risks, issues, remediation progress, incident impacts, control gaps, and compliance suggestions to executive, federal, technical, and non-technical audiences.

• Collaborate with federal security stakeholders, system owners, ISSOs, architects, developers, operations personnel, cloud teams, database administrators, testers, IV&V partners, helpdesk staff, and program leadership.

⛳️ Requirements

• Bachelor's degree; an additional four years of experience will be considered in lieu of a degree.

• Five or more years of experience in supporting cybersecurity, information assurance, compliance, risk management, or security operations for enterprise systems, federal IT programs, or mission-critical applications.

• Experience in supporting ATO activities, security documentation, collecting control evidence, preparing assessments, continuous monitoring, managing POA&M, or tracking remediation.

• Working knowledge of FISMA, NIST 800-53, FedRAMP, privacy requirements, security assessment processes, and risk management practices.

• Experience in coordinating vulnerability management, patch remediation, security findings, exception requests, scan analysis, incident response, and compliance evidence across technical teams.

• Ability to collaborate with federal security stakeholders, ISSOs, system owners, developers, testers, operations teams, cloud teams, database administrators, helpdesk partners, IV&V teams, and other contractors.

• Understanding of security control implementation, evidence collection, assessment readiness, and continuous monitoring.

• Familiarity with POA&M tracking, vulnerability remediation, risk acceptance, exception management, and closure validation.

• Comprehension of incident response, notification, root cause analysis, security monitoring, and corrective action planning.

• Knowledge of Secure SDLC, DevSecOps practices, release coordination, configuration management, and change impact analysis.

• Familiarity with security documentation, risk reporting, compliance dashboards, and stakeholder communications.

• Experience with vulnerability scanners, ticketing systems, GRC platforms, Jira, Azure DevOps, Confluence, SharePoint, Microsoft Teams, or similar platforms.

• Strong communication, analytical, documentation, coordination, and problem-solving skills.

• Must be eligible to obtain and maintain a Federal or DoD Public Trust; approved adjudication required prior to onboarding.

• Relevant certifications such as Security+, CISSP, CISM, CAP, CGRC, AWS Security Specialty, AWS Solutions Architect, ITIL, SAFe, DevSecOps, or equivalent are preferred but not mandatory.

🏝️ Benefits

• Medical, Rx, Dental & Vision Insurance.

• Personal and Family Sick Time & Company Paid Holidays.

• Parental Leave.

• 401(k) Retirement Plan.

• Group Term Life and Travel Assistance.

• Voluntary Life and AD&D Insurance.

• Health Savings Account.

• Health Care & Dependent Care Flexible Spending Accounts.

• Transit and Parking Commuter Benefits.

• Short-Term & Long-Term Disability.

• Tuition Reimbursement, Personal Development, Certifications & Learning Opportunities.

• Employee Referral Program.

• Corporate Sponsored Events & Community Outreach.

• Care.com annual membership.

• Employee Assistance Program.

• Supplemental Benefits via Corestream (Critical Care, Hospital Indemnity, Accident Insurance, Legal Assistance, and ID theft protection, etc.).

• This position may qualify for a discretionary variable incentive bonus.

• Flexible benefits package.