Cybersecurity Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform cybersecurity scanning and vulnerability assessments on networked devices.

• Detect, analyze, and address vulnerabilities identified through security scans and assessments.

• Implement security patches, updates, and configuration modifications.

• Oversee and assist with security compliance initiatives across enterprise environments.

• Deliver RMF services for IT and Information Systems governed by FISMA requirements.

• Execute and uphold NIST SP 800-37 RMF processes throughout the system lifecycle.

• Sustain and support RMF efforts initiated by the customer or other organizations.

• Create and maintain RMF documentation, security controls, and authorization packages.

• Coordinate remediation initiatives and assist with system accreditation and authorization activities.

• Adhere to issue resolution protocols for vulnerabilities and security findings.

• Document risk-based decisions, actions for risk acceptance, corrective measures, and remediation efforts.

• Develop and manage Plans of Action and Milestones (POA&M).

• Conduct validation testing and security retesting following remediation.

• Provide documentation and audit trails for RMF and compliance initiatives.

• Scan, secure, and patch Windows Servers, Windows Workstations, Apple macOS Systems, VMware Infrastructure, Cisco and Brocade Network Switches, HP and Ricoh Printers, EMC and Nimble SAN Storage Systems, wired and wireless network devices, and other enterprise-attached devices.

• Act as a cybersecurity subject matter expert for technical and program teams.

• Carry out security inspections, assessments, surveys, and assistance visits.

• Collaborate with infrastructure, networking, and systems teams to enhance the enterprise security posture.

• Assist with security planning, policy execution, and cybersecurity program evaluation.

• Communicate technical risks and recommendations to stakeholders and leadership.

• Support the Information Management Department at Naval Medical Center San Diego.

⛳️ Requirements

• At least five (5) years of experience applying cybersecurity or Information Assurance (IA) principles in a DoD environment.

• CISSP certification or DoD-approved equivalent certification is mandatory.

• Capability to qualify for and maintain an IAT Level II position per DoD 8570.01-M and DoD 8140 requirements.

• In-depth knowledge of DoD and DHA cybersecurity architecture, Information Assurance principles, and enterprise security operations.

• Experience acting as a cybersecurity Subject Matter Expert (SME).

• Background in supporting security accreditation, authorization, and certification processes within federal or DoD settings.

• Experience in integrating cybersecurity requirements with IT, infrastructure, networking, and systems operations.

• Proficiency in the NIST Cybersecurity Framework.

• Proficiency in NIST SP 800-37 Risk Management Framework (RMF).

• Proficiency in FISMA compliance requirements.

• Proficiency in Federal Information Processing Standards (FIPS).

• Proficiency in DoD cybersecurity policies and procedures.

• Proficiency in vulnerability management and remediation.

• Proficiency in security accreditation and authorization processes.

• Proficiency in Information Security (IS) program management.

• Ability to coordinate and conduct security surveys, inspections, and assistance visits.

• Excellent oral and written communication skills.

• Preferred: experience supporting the Navy, Defense Health Agency (DHA), or other DoD healthcare environments.

• Preferred: experience with enterprise vulnerability scanning and remediation tools.

• Preferred: experience assisting with Authority to Operate (ATO) packages.

• Preferred: experience in cybersecurity leadership, lead analyst, or SME roles.

• Preferred: active security clearance or ability to obtain one if required by the program.

• Expert understanding of DoD and DHA IT architectures and enterprise infrastructure protection strategies.

• Strong knowledge of federal cybersecurity regulations, standards, and best practices.

• Ability to assess, plan, direct, and support Information Security programs for federal information systems.

• Ability to analyze emerging technologies and evaluate their cybersecurity and compliance impact.

• Ability to plan, coordinate, and manage cybersecurity initiatives and projects.

• Strong analytical and problem-solving skills.

• Ability to convey technical concepts and risks to both technical and non-technical audiences.

• Ability to independently manage workload and adhere to project deadlines in a remote setting.

• Ability to occasionally travel to customer or government facilities as required.

🏝️ Benefits

• Competitive compensation.

• Opportunities for professional development.

• Inclusive work environment.

• Fully remote work arrangement.

• Secure home office setup and reliable high-speed internet support.

• Occasional travel for meetings, training, audits, or mission-related activities.