Cyber Risk Management Specialist

Revolutional, LLC • New Carrollton, MD

6h • $110,000 - $155,000 • Onsite

About The Position

Revolutional is seeking a Cyber Risk Management Specialist II to assess the operational security posture of information systems, components, applications, and programs for a large federal agency supported by a 24x7x365 Security Operations Center (SOC). The role evaluates compliance with approved security policies and technical controls, assesses the risk of data exposure caused by weaknesses in platforms and access procedures, and recommends, documents, and briefs stakeholders on remediation options. The specialist works with program stakeholders to execute remediation plans and validate their closure, helping strengthen the organization’s compliance posture.

The position is full-time, based at client facilities in New Carrollton, Maryland, or Kearneysville, West Virginia, as directed. It requires U.S. citizenship and a Top Secret clearance. The listed salary range is $110,000–$155,000, with 0% travel.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and at least 4 years of relevant professional experience; three years of additional relevant experience may substitute for a degree.
• Proficiency applying technical principles to assess information system confidentiality, integrity, and availability.
• Working knowledge of NIST RMF, NIST SP 800-53, and FISMA.
• Experience with vulnerability management tools and risk scoring, including CVSS.
• Experience documenting findings and briefing stakeholders on remediation.
• U.S. citizenship and Top Secret clearance.

Nice To Haves

• Certifications such as CompTIA Security+, CySA+, CAP/CGRC, or CISA.
• Experience with federal A&A/ATO and continuous monitoring.
• Experience with GRC tools such as CSAM, Xacta, or ServiceNow GRC.
• Active Top Secret clearance.

Responsibilities

• Assess the operational security posture of information systems, components, applications, and programs.
• Evaluate compliance with approved security policies and technical controls.
• Assess the risk of data exposure through weaknesses in platforms, access procedures, and forms of access.
• Analyze vulnerability, configuration, and access data to identify and prioritize risk.
• Recommend, document, and brief organization stakeholders on remediation options.
• Work with program stakeholders to execute remediation plans and validate closure.
• Maintain POA&M items, risk registers, and supporting evidence.
• Analyze vulnerability reporting relevant to active threats, incident response, and SOC awareness.
• Mentor junior specialists.

Benefits

• Traditional and HSA-eligible medical insurance plans.
• 100% employer-paid dental and vision insurance options.
• 100% employer-sponsored short-term disability, long-term disability, and life insurance.
• 5% 401(k) company matching.
• Flexible schedules and teleworking options.
• Paid holidays and PTO accrual plans.
• Paid parental leave.
• Professional development and career growth opportunities.
• Team and company-wide events, recognition, and appreciation.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level