Computer Security Systems Specialist

ICF • Reston, VA

2d • Remote

About The Position

ICF is looking for an enthusiastic Computer Security System Specialist to join our team. If you are interested in designing, implementing, and managing enterprise security systems to protect organizational networks, systems, and data from cyber threats, then this may be the role for you. Job Location: This position requires that the job be performed in the United States. If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses, and also prohibits personal VPN connections. You may be asked to travel once a quarter to an office. Our core work hours are 10am - 4pm Eastern Time with the option to start earlier or work later depending on your time zone. What You Will Do: Design, implement, and maintain enterprise security solutions such as firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and security monitoring platforms. Monitor networks and systems for security threats and lead investigations of suspicious activities or incidents. Conduct vulnerability assessments, risk analyses, and penetration testing to identify and remediate security weaknesses. Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis. Develop, implement, and enforce information security policies, procedures, and standards. Manage and optimize Security Information and Event Management (SIEM) systems and other security monitoring tools. Collaborate with IT infrastructure, application, and cloud teams to ensure secure system architecture and deployments. Support regulatory compliance initiatives and security audits (e.g., internal or external). Provide guidance and mentorship to junior security analysts and IT staff on cybersecurity best practices. Research emerging cybersecurity threats, vulnerabilities, and mitigation strategies to proactively strengthen defenses. Participate in security awareness initiatives and training programs across the organization. What You Will Bring With You: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited university. 5+ years of experience in information security, cybersecurity operations, or network security. Strong knowledge of network security, system hardening, encryption, authentication, and access control mechanisms. Hands-on experience with security technologies such as SIEM, IDS/IPS, firewalls, endpoint detection and response (EDR), and vulnerability management tools. Experience investigating and responding to cybersecurity incidents. Strong analytical, troubleshooting, and problem-solving skills. Ability to communicate technical security concepts to both technical and non-technical stakeholders. Candidate must be able to obtain and maintain a Public Trust Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S. What We Would Like You To Bring With You: Professional certifications such as CISSP, CISM, CEH, CompTIA Security+, or GIAC certifications. Experience with cloud security platforms (AWS, Azure, or Google Cloud). Familiarity with security frameworks and standards such as NIST, ISO 27001, CIS Controls, or SOC 2. Experience with automation or scripting (Python, PowerShell, Bash) for security operations. Knowledge of DevSecOps or secure software development practices. Professional Skills: Highly effective analytical, problem-solving, and decision-making capabilities. Excellent communication and interpersonal skills to interface effectively at all levels of the business.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field from an accredited university.
• 5+ years of experience in information security, cybersecurity operations, or network security.
• Strong knowledge of network security, system hardening, encryption, authentication, and access control mechanisms.
• Hands-on experience with security technologies such as SIEM, IDS/IPS, firewalls, endpoint detection and response (EDR), and vulnerability management tools.
• Experience investigating and responding to cybersecurity incidents.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to communicate technical security concepts to both technical and non-technical stakeholders.
• Candidate must be able to obtain and maintain a Public Trust
• Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S.

Nice To Haves

• Professional certifications such as CISSP, CISM, CEH, CompTIA Security+, or GIAC certifications.
• Experience with cloud security platforms (AWS, Azure, or Google Cloud).
• Familiarity with security frameworks and standards such as NIST, ISO 27001, CIS Controls, or SOC 2.
• Experience with automation or scripting (Python, PowerShell, Bash) for security operations.
• Knowledge of DevSecOps or secure software development practices.

Responsibilities

• Design, implement, and maintain enterprise security solutions such as firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and security monitoring platforms.
• Monitor networks and systems for security threats and lead investigations of suspicious activities or incidents.
• Conduct vulnerability assessments, risk analyses, and penetration testing to identify and remediate security weaknesses.
• Lead incident response efforts, including containment, eradication, recovery, and post-incident analysis.
• Develop, implement, and enforce information security policies, procedures, and standards.
• Manage and optimize Security Information and Event Management (SIEM) systems and other security monitoring tools.
• Collaborate with IT infrastructure, application, and cloud teams to ensure secure system architecture and deployments.
• Support regulatory compliance initiatives and security audits (e.g., internal or external).
• Provide guidance and mentorship to junior security analysts and IT staff on cybersecurity best practices.
• Research emerging cybersecurity threats, vulnerabilities, and mitigation strategies to proactively strengthen defenses.
• Participate in security awareness initiatives and training programs across the organization.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level