Cyber Security Specialist 1

ARA Career•Pinehurst, NC

6d•$66 - $72•Remote

About The Position

Our company is preparing to support a mission-critical Team Awareness Kit (TAK) Server environment for the Department of the Interior’s Office of Wildland Fire (OWF). This system provides real-time situational awareness to firefighters, pilots, emergency managers, and partner agencies operating in dynamic and high-risk environments. We are seeking a Cyber Security Specialist to support the hands-on implementation and day-to-day operation of cybersecurity controls within a FISMA High cloud-hosted TAK Server platform . This role is ideal for a cybersecurity professional who enjoys working close to the systems, executing security tasks, and keeping environments compliant, monitored, and resilient. The Cyber Security Specialist works alongside Cyber Security Engineers, infrastructure teams, and operations staff to ensure that approved security controls are properly implemented, maintained, and continuously monitored. This role is execution-focused and operational in nature, with clear procedures, playbooks, and technical guidance provided. Due to the nature of the work, candidates must be US citizens. While the role may allow for remote work, such arrangements are contingent upon operational requirements and may be changed. This offer is contingent upon contract award and in certain cases approval of your qualifications for the position by the Prime contractor and the government agency. What You’ll Be Doing Cyber Security Specialists are trusted with the day-to-day security health of the TAK Server environment . Your work ensures that security controls function as designed and that issues are identified and addressed quickly. Key responsibilities include:

Requirements

Education- Associate's or Bachelor’s degree or higher in: Cybersecurity Information Technology Information Systems Network or Systems Administration (or 16-18 years of experience in lieu of a degree)
Experience- 12-14 years of progressive cybersecurity experience with an associates degree OR 8-10 years with a bachelors degree
Cybersecurity operations
System or network administration with security responsibilities
SOC or security monitoring roles
Practical experience performing: User account and access management System hardening and patching Log review and alert handling
Exposure to regulated or compliance-driven environments (FISMA, FedRAMP, or similar)
Technical Skills- Working knowledge of: NIST 800-53 security controls Secure configuration practices Basic incident response procedures
Hands-on experience with: Security monitoring or SIEM tools Vulnerability scanning tools Cloud platforms (AWS, Azure, or GovCloud preferred)

Nice To Haves

Familiarity with Kubernetes or containerized environments is a plus, but not required
Prior experience supporting federal, state, or mission-oriented systems
Experience following runbooks, SOPs, and security playbooks
Comfort working in a 24/7 operational or on-call support environment
Strong written documentation skills
Certifications such as: CompTIA Security+ CompTIA CySA+ AWS or Azure foundational certifications
Behaviors- Detail-Oriented – Takes pride in doing tasks correctly and consistently Team Player – Works well with engineers, operators, and government partners Dependable – Follows through on assigned tasks and responsibilities Process-Focused – Comfortable working within established procedures and controls
Motivations- Hands-On Work – Enjoys working directly with systems and tools Mission Support – Motivated by contributing to public safety and emergency response Learning & Growth – Interested in developing deeper cybersecurity expertise Making an Impact – Finds satisfaction in keeping critical systems secure and operational

Responsibilities

Implementing and maintaining cybersecurity controls aligned with: FISMA High NIST 800-53 Rev. 5
Applying and maintaining secure configuration baselines using: DISA STIGs CIS Benchmarks Program-approved hardening standards
Performing identity and access management (IAM) activities, including: User onboarding and offboarding Role-based access assignments Support for federated TAK environments
Operating security monitoring tools by: Reviewing logs and alerts Triaging security events Escalating incidents per established procedures
Supporting vulnerability scanning and configuration compliance checks
Assisting with remediation efforts under the direction of Cyber Security Engineers
Executing patching and security updates for TAK Server components and supporting infrastructure
Supporting incident response activities by: Collecting logs and evidence Executing containment or mitigation actions as directed
Maintaining security artifacts and evidence to support RMF and ATO requirements
Verifying backups, audit logging, and disaster recovery processes