Cybersecurity Specialist

ICF • Reston, VA

1d • Remote

About The Position

ICF is seeking an experienced Cybersecurity Specialist to support the design, implementation, and management of enterprise cybersecurity solutions for mission-critical federal systems. The successful candidate will provide technical expertise in information assurance, risk management, system security engineering, and secure systems architecture to ensure compliance with government security requirements and organizational cybersecurity standards. This role requires the ability to develop secure solutions, assess system risks, and support customers in implementing effective security policies and technologies across complex IT environments.

Requirements

• Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, or a related technical discipline.
• 5+ years of experience in cybersecurity, information assurance, or computer security engineering.
• US citizenship is required by government agency.
• Candidate must be able to obtain and maintain the required government security clearance.
• Candidate must reside in the U.S., be authorized to work in the U.S., and all work must be performed in the U.S.

Nice To Haves

• Experience designing and implementing secure enterprise systems and security architectures.
• Experience performing risk assessments, security analyses, and vulnerability evaluations.
• Strong knowledge of information assurance principles and cybersecurity frameworks.
• Experience supporting secure system development and systems engineering activities.
• Hands-on experience with: Multi-Level Security (MLS) concepts and secure system design, Risk Management Framework (RMF), NIST cybersecurity standards and guidance, Security architecture and systems engineering, Security controls implementation and assessment, Vulnerability assessment and remediation, Identity and Access Management (IAM), Secure network and system architecture, Cloud security (AWS, Microsoft Azure, and/or Google Cloud Platform), Security monitoring and incident response, Encryption, Public Key Infrastructure (PKI), and cryptographic technologies, Security documentation, accreditation, and compliance activities.
• Experience supporting Federal Government cybersecurity programs is preferred.
• Familiarity with FISMA, FedRAMP, NIST SP 800-53, and related federal security standards.
• Experience supporting Authority to Operate (ATO) processes and security authorization packages.
• Professional certifications such as CISSP, CISM, Security+, CASP+, GSLC, or equivalent is highly desirable.
• Experience working with secure enterprise applications, cloud environments, and specialized government systems.
• Strong analytical and critical thinking skills with the ability to assess and mitigate complex cybersecurity risks.
• Excellent verbal and written communication skills with the ability to communicate technical concepts to technical and non-technical stakeholders.
• Strong organizational skills with exceptional attention to detail.
• Ability to manage multiple priorities while maintaining compliance with security and regulatory requirements.
• Demonstrated ability to collaborate effectively with engineers, architects, developers, and program leadership.
• Commitment to continuous learning and staying current with emerging cybersecurity threats and technologies.
• Experience supporting distributed or remote technical teams is preferred.

Responsibilities

• Design, develop, engineer, and implement solutions that satisfy Multi-Level Security (MLS) and enterprise security requirements.
• Perform complex security risk analyses, risk assessments, and vulnerability evaluations.
• Establish and implement information assurance and cybersecurity requirements based on user needs, regulatory requirements, organizational policies, and mission objectives.
• Design and develop security features for enterprise system architectures and applications.
• Support the development, implementation, and maintenance of cybersecurity policies, standards, and procedures.
• Provide technical guidance to customers and program leadership on information assurance and cybersecurity best practices.
• Evaluate existing systems and recommend security enhancements to improve confidentiality, integrity, and availability.
• Collaborate with system architects, developers, and infrastructure teams to integrate security into system design and implementation.
• Support security authorization activities, documentation, and compliance efforts.
• Analyze security controls and recommend remediation strategies for identified risks and vulnerabilities.
• Support both commercial enterprise systems and specialized government systems requiring advanced security capabilities.
• Participate in security architecture reviews, system design reviews, and technology evaluations.
• Maintain security documentation, risk assessments, and compliance artifacts throughout the system lifecycle.
• Stay current with evolving cybersecurity threats, technologies, standards, and federal guidance.

Benefits

• Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior