Cybersecurity Specialist

About the company

IPT Associates

What you'll do

• Are curious and excited about technology
• Implement andmaintaincybersecurity safeguards for enterprise, cloud, network, application, and data environments, including firewalls, intrusion detection and prevention systems, security information and event management tools, endpoint protections, and Defensive Cyber Operations platforms.
• Support the full Risk Management Framework lifecycle and Authority to Operate process, including system categorization, controlselectionand implementation, assessment preparation, authorization package development, and continuous monitoring.
• Develop,maintain, and review RMF artifacts such as System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, architecture documentation, and authorization status reports.
• Conduct security control assessments, configuration reviews, vulnerability scans, software and container security testing, log analysis, and other technical evaluations using approved tools, processes, and environments.
• Analyze findings,determineriskand mission impact, recommend practical remediation, and track vulnerabilities and corrective actions through closure in coordination with system owners, administrators, developers, ISSMs, assessors, and authorizing officials.
• Apply security engineering principles throughout the system lifecycle, including security requirements analysis, secure architecture and design reviews, control implementation, system hardening, STIG validation, and security testing.
• Monitor and analyze alerts, events, threat information, and system activity; investigate suspected incidents; preserve relevant evidence; support containment, eradication, recovery, root-cause analysis, and after-action reporting.
• Assess compliance withDoW, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational cybersecurity policies, standards, and technical guidance.
• Support identity, credential, and access management capabilities, including multifactor authentication, identity lifecycle management, federation, single sign-on, privileged access, and least-privilege enforcement.
• Evaluate cloud and containerized environments for secure configuration and compliance across applicable AWS, Azure, or Google Cloud services, and advise engineering teams on secure migration and deployment practices.
• Use and support cybersecurity systems such aseMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting tools.
• Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation capabilities.
• Prepareaccuratevulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, procedures, and status updates for technical and leadership audiences.
• Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks, standards, knowledge articles, training, and security awareness activities.

What you need

• Are curious and excited about technology
• Implement andmaintaincybersecurity safeguards for enterprise, cloud, network, application, and data environments, including firewalls, intrusion detection and prevention systems, security information and event management tools, endpoint protections, and Defensive Cyber Operations platforms.
• Support the full Risk Management Framework lifecycle and Authority to Operate process, including system categorization, controlselectionand implementation, assessment preparation, authorization package development, and continuous monitoring.
• Develop,maintain, and review RMF artifacts such as System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, architecture documentation, and authorization status reports.
• Conduct security control assessments, configuration reviews, vulnerability scans, software and container security testing, log analysis, and other technical evaluations using approved tools, processes, and environments.
• Analyze findings,determineriskand mission impact, recommend practical remediation, and track vulnerabilities and corrective actions through closure in coordination with system owners, administrators, developers, ISSMs, assessors, and authorizing officials.
• Apply security engineering principles throughout the system lifecycle, including security requirements analysis, secure architecture and design reviews, control implementation, system hardening, STIG validation, and security testing.
• Monitor and analyze alerts, events, threat information, and system activity; investigate suspected incidents; preserve relevant evidence; support containment, eradication, recovery, root-cause analysis, and after-action reporting.
• Assess compliance withDoW, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational cybersecurity policies, standards, and technical guidance.
• Support identity, credential, and access management capabilities, including multifactor authentication, identity lifecycle management, federation, single sign-on, privileged access, and least-privilege enforcement.
• Evaluate cloud and containerized environments for secure configuration and compliance across applicable AWS, Azure, or Google Cloud services, and advise engineering teams on secure migration and deployment practices.
• Use and support cybersecurity systems such aseMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting tools.
• Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation capabilities.
• Prepareaccuratevulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, procedures, and status updates for technical and leadership audiences.
• Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks, standards, knowledge articles, training, and security awareness activities.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalent relevant education, training, and experience may be considered.
• Relevant experience supporting cybersecurity operations, security engineering, RMF, system authorization, assessment and compliance, vulnerability management, or incident response in complex enterprise environments.
• Working knowledge of the NIST Risk Management Framework and security guidance, including NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-160, CNSSI 1253, DoDI 8510.01, and applicableDoWand Air Force cybersecurity requirements.
• Experience developing or reviewing authorization artifacts, assessing security controls, documenting evidence, managing POA&Ms, and supporting continuous monitoring activities.
• Hands-on knowledge of vulnerability scanning, secure configuration assessment, STIGs, patch and remediation tracking, network and endpoint security, log analysis, and cybersecurity incident handling.
• Familiarity witheMASSand one or more SIEM, vulnerability management, endpoint security, cloud security, container security, asset discovery, or compliance automation platforms.
• Understanding ofTCP/IP networking, common operating systems, identity and access management, multifactor authentication, encryption, secure system administration, and defense-in-depth principles.
• Ability to analyze technical findings, assess risk, prioritize remediation, preserve evidence whenrequired, and communicate clear recommendations to technical and nontechnical stakeholders.
• Strong technical writing, collaboration, analytical, and problem-solving skills, with the ability to produceaccuratereports and work effectively across multidisciplinary Government and contractor teams.
• Current Security+ certificate (CISSP or equivalent preferred),in accordance withDoDM 8140.03, plusrequiredoperating system or platform credential.
• Active Secret security clearance required; ability to obtain andmaintainadditionalaccess or a higher-level clearance when required by the assigned program.
• Ability to obtain andmaintainrequired Common Access Card, system access, and annual security, privacy, CUI, and role-based training requirements.
• Education: a bachelor's degree

Key skills

Keywords for your resumePro

The words this employer's screening is likely to look for.