Information Security Specialist II

About the role

The role utilizes the NIST Risk Management Framework (RMF) and continuous monitoring to secure assigned systems and ensure compliance with Federal, DoD, and organizational policies. It focuses on authoring security authorization documentation and guiding systems through the Authorization to Operate (ATO) process.

Key responsibilities

• Develop and maintain System Security Plans, Controls Testing Plans, and Security Assessment Reports.
• Conduct security testing and evaluation, load and assess STIG checklists and Nessus scan results.
• Manage continuous monitoring activities using ServiceNow and eMASS.
• Collaborate with application leads, system administrators, DBAs, developers, and testers to achieve and maintain compliance.
• Review technical configurations, support incident response, and maintain security protocols.

Required profile

• 2‑6 years of cybersecurity experience with an Associate’s degree or equivalent.
• Knowledge of NIST SP800‑37 RMF, ICD503, CNSSI1253, and SP800‑53.
• Ability to obtain and maintain a TS clearance, pass a polygraph, and be a U.S. citizen.
• Experience leading junior contributors and working under limited supervision.

Required skills

• NIST Risk Management Framework (RMF)
• ServiceNow and eMASS
• DISA STIGs and Nessus
• Security Content Automation Protocol (SCAP) tools
• Network analysis tools
• Anti‑virus applications, firewalls, and intrusion detection systems
• Security testing and evaluation methods
• Configuration management

What we offer

• Comprehensive benefits package including health and wellness programs.
• Mental health resources and employee assistance program.
• Retirement savings plans, life and disability insurance.
• Paid parental leave, paid time off, and tuition reimbursement.