IT Security Specialist

Job Summary

Supporting timely and high-quality security assessments, the full-time IT Security Specialist II will operate security scanning tools, assess vulnerabilities, and maintain security artifacts in a remote environment.

Key responsibilities

• Conduct security assessments for High and Moderate systems under the Risk Management Framework (RMF)
• Evaluate security controls and operate security scanning and monitoring tools
• Maintain security artifacts and CSAM records while supporting POA&M remediation and evidence retesting

Required qualifications

• Familiarity with NIST, FISMA, STIG, and agency-specific security requirements
• Experience with security scanning and monitoring tools
• Knowledge of risk management frameworks and security assessment processes
• Ability to collaborate with system teams and federal stakeholders
• Understanding of vulnerability assessment and remediation techniques