Cyber Security Specialist

advance programs•Columbia, MD

11h•$110,000 - $150,000•Onsite

About The Position

Advanced Programs Inc. (API) is hiring a Cybersecurity Specialist to lead its CMMC and Controlled Unclassified Information (CUI) compliance program and support day-to-day security operations. The role works alongside Systems Administrators and Helpdesk staff to maintain a secure, audit-ready defense contractor environment. The position is full-time, onsite, and 40 hours per week. The technology environment includes Microsoft 365 GCC High, Microsoft Defender, Arctic Wolf, Intune, Entra ID, Fortinet, VMware, Veeam, and NetSuite. The specialist will also support—and may be appointed as—the Information System Security Officer (ISSO) for the company’s classified information system. The role leads CMMC Level 2 and NIST SP 800-171 compliance, manages CUI handling and the CUI boundary, and coordinates monitoring, incident response, vulnerability management, security controls, documentation, and employee awareness. It also supports classified-system security responsibilities under 32 CFR Part 117 (NISPOM), coordinating with the ISSM and FSO. Candidates need an active DoD security clearance or the ability to obtain one; ISSO duties require an active clearance at the classified system’s level.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, or a related discipline with 3–5 years of IT and/or cybersecurity experience, or equivalent training, experience, and certification.
Working knowledge of NIST SP 800-171, CMMC 2.0, DFARS 252.204-7012, and CUI handling requirements.
Knowledge of Microsoft Defender XDR, Secure Score, and Purview (sensitivity labels and DLP) in Microsoft 365 GCC High.
Knowledge of MDR/SOC workflows and SIEM log analysis.
Knowledge of Entra ID and Intune security, including conditional access, MFA, compliance policies, and configuration baselines.
Knowledge of vulnerability scanning and remediation tracking.
Knowledge of firewall and network security fundamentals, including segmentation, VPN, and TCP/IP.
Knowledge of Windows Server, Active Directory, and Group Policy security and audit logging.
Ability to write clear, accurate policies, procedures, and audit evidence suitable for assessment.
Ability to explain security requirements in plain language to users and leadership, verbally and in writing.
Ability to define problems, collect data, establish facts, and draw valid, concise conclusions.
Ability to remain calm and methodical during security incidents and follow documented procedures.
Ability to manage multiple compliance deadlines and projects of varying length.
Ability to exercise discretion and sound judgment with sensitive and classified information.
Positive, self-motivated approach and ability to complete tasks independently and as part of a team.
Active DoD security clearance or ability to obtain one; ISSO duties require an active clearance at the classified system’s level.

Nice To Haves

Experience at a DoD contractor or in a regulated environment.
Certifications such as Sec+, CySA+, CISSP, Microsoft Security Operations Analyst (SC-200), or CMMC Certified Professional (CCP).
PowerShell scripting.
Familiarity with NIST SP 800-53, 32 CFR Part 117 (NISPOM), or DCSA assessment processes.
Experience with Tenable/Nessus or similar vulnerability scanning tools, Arctic Wolf or similar MDR, and Fortinet or similar firewall technology.

Responsibilities

Lead the company’s CMMC Level 2 and NIST SP 800-171 compliance program; maintain the SSP, POA&Ms, and SPRS score, and prepare for a C3PAO assessment.
Manage the identification, marking, handling, and flow of CUI, including the CUI boundary across Microsoft 365 GCC High and on-premises systems.
Serve as the primary contact for Arctic Wolf MDR; triage and respond to alerts and escalations, maintain sensor and agent coverage, and track findings to closure.
Administer Microsoft Defender and Microsoft Secure Score; tune policies, investigate incidents, and drive remediation of recommendations.
Run vulnerability management by reviewing scan results, prioritizing findings by risk, coordinating patching with Systems Administrators, and verifying remediation.
Lead incident response by maintaining the response plan, conducting tabletop exercises, coordinating investigations, and meeting DFARS 252.204-7012 72-hour reporting requirements.
Review firewall rules, conditional access policies, Intune baselines, backups, and audit logging against NIST 800-171 controls; document findings and track them to closure.
Assist with or serve as ISSO for the classified information system under 32 CFR Part 117 (NISPOM), including continuous monitoring, audit log review, account and access management, security review of system changes, and assessment documentation in coordination with the ISSM and FSO.
Respond to customer and supplier security assessments and questionnaires, and conduct security reviews of new software, vendors, and services.
Develop and maintain security policies, procedures, and compliance evidence; deliver security awareness and phishing training to employees.
Partner with IT staff on secure configuration of new systems, software approval, and onboarding and offboarding access controls.
Perform additional tasks, projects, and assignments as requested by the IT Manager.