IT Security Specialist

Requirements

• Lead application security efforts across enterprise systems, including SAST, DAST, and manual source code reviews
• Design, implement, and manage enterprise-wide Application Security programs
• Integrate security testing into CI/CD pipelines
• Develop security architectures and technical solutions for cloud-hosted applications
• Evaluate and implement security controls for Azure and Microsoft 365 environments
• Monitor, detect, and respond to security incidents and vulnerabilities
• Conduct cyber threat, risk, and vulnerability assessments
• Administer and maintain security tools, including patching, upgrades, and integrations
• Develop security metrics, dashboards, and compliance reporting
• Participate as a member of the Incident Response Team
• Support operational implementation of FISMA, NIST, and OMB cybersecurity requirements
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and Continuous Monitoring Plans
• Conduct security audits, assessments, and system reviews
• Ensure compliance with federal cybersecurity policies and standards
• Partner with IT, engineering, and business teams to implement secure solutions
• Provide expert cybersecurity guidance to technical and non-technical stakeholders
• Manage IT security awareness and training initiatives
• Support security-related service requests and ticket resolution to meet SLAs

Benefits

• Comprehensive health, dental, and vision coverage
• 401(k) retirement plans