Security Specialist – IE Web

This is a fully remote position, open to applicants in United States.

📋 Description

• Offer technical and operational assistance to guarantee that Cloud One or Cloud One Pathfinder systems are secure, dependable, and resilient.

• Identify and resolve security concerns, develop security automation, and respond to emerging threats.

• Conduct routine project tasks addressing specific cybersecurity challenges.

• Assist in the planning, design, development, testing, demonstration, and integration of information systems.

• Create System Security Plans utilizing the DoD Risk Management Framework (RMF).

• Execute STIG reviews, remediation actions, and document results.

• Incorporate electronic processes and methodologies to tackle system and cybersecurity issues.

• Lead the mitigation of vulnerabilities identified through security scans.

• Formulate and enforce policies and procedures that align with business needs and end-user requirements.

• Specify system requirements, technical standards, and functional tests.

• Develop specifications, prototypes, or initial user manuals as necessary.

• Supervise and direct the work of others when needed.

• Collaborate with project managers, developers, and end-users to ensure application designs fulfill business requirements.

• Design, plan, and coordinate application systems and programming tasks.

• Aid in assessment and authorization processes for DoD information systems.

• Utilize eMASS to document the results of security control tests.

• Create and update RMF artifacts for NIST security control families.

• Apply RMF, eMASS, ACAS, and Air Force A&A processes.

⛳️ Requirements

• Must be a US Citizen.

• Eligibility to obtain and maintain a Public Trust/NACI position.

• Bachelor's degree required.

• Active/current IAM Level II certification: CAP, CASP+ CE, CISM, CISSP, GSLC, or CCISO.

• Minimum of 10 years of relevant experience.

• Experience in meeting technical requirements pertinent to cybersecurity roles, responsibilities, technical system functionalities, and processes.

• Experience in establishing and managing Impact Level (IL) 2, IL4, and IL5 environments.

• Familiarity with secure enclave architecture and deployment.

• Understanding of infrastructure and security KPIs and metrics.

• Capability to implement security monitoring techniques, including anomaly detection and threat analysis.

• Familiarity with DevOps pipelines and CI/CD practices.

• Strong communication skills for engaging with stakeholders, senior leadership, technical teams, and governance bodies.

• Ability to document and articulate technical and governance outcomes clearly and succinctly.

• Team collaboration abilities across departments and with Capability Delivery Teams (CDTs).

• Extensive experience with the DoD Risk Management Framework (RMF), including eMASS.

• Preferred but not mandatory: experience with ticket management, meeting facilitation, Agile methodologies, Jira workflows, Jira/Bitbucket integrations, CDT onboarding and migration, TIMs, and migration task lifecycle management.

🏝️ Benefits

• Competitive compensation.

• Outstanding benefits.

• Challenging work assignments.

• Opportunities for advancement and career growth.