Cybersecurity Specialist

Interactive Process Technology•Wright-Patterson AFB, OH

About The Position

IPT Associates (IPTA) is hiring a Cybersecurity Specialist to support work at Wright-Patterson AFB. The position is contingent upon contract award, and the actual duties may vary based on contract requirements and organizational needs. The role supports cybersecurity operations and engineering across enterprise, cloud, network, application, and data environments, including Risk Management Framework (RMF) and Authority to Operate activities, security assessments, vulnerability management, incident response, and compliance. The specialist works with system owners, administrators, developers, Information System Security Managers, assessors, authorizing officials, and Government and contractor teams. An active Secret security clearance is required.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalent relevant education, training, and experience may be considered.
Relevant experience supporting cybersecurity operations, security engineering, RMF, system authorization, assessment and compliance, vulnerability management, or incident response in complex enterprise environments.
Working knowledge of the NIST Risk Management Framework and security guidance, including NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-160, CNSSI 1253, DoDI 8510.01, and applicable Department of War and Air Force cybersecurity requirements.
Experience developing or reviewing authorization artifacts, assessing security controls, documenting evidence, managing POA&Ms, and supporting continuous monitoring activities.
Hands-on knowledge of vulnerability scanning, secure configuration assessment, STIGs, patch and remediation tracking, network and endpoint security, log analysis, and cybersecurity incident handling.
Familiarity with eMASS and one or more SIEM, vulnerability management, endpoint security, cloud security, container security, asset discovery, or compliance automation platforms.
Understanding of TCP/IP networking, common operating systems, identity and access management, multifactor authentication, encryption, secure system administration, and defense-in-depth principles.
Ability to analyze technical findings, assess risk, prioritize remediation, preserve evidence, and communicate clear recommendations to technical and nontechnical stakeholders.
Strong technical writing, collaboration, analytical, and problem-solving skills, with the ability to produce accurate reports and work effectively across multidisciplinary Government and contractor teams.
Current Security+ certificate in accordance with DoDM 8140.03.
Active Secret security clearance required; ability to obtain and maintain additional access or a higher-level clearance when required by the assigned program.
Ability to obtain and maintain required Common Access Card, system access, and annual security, privacy, CUI, and role-based training requirements.

Nice To Haves

CISSP or equivalent certification preferred.
Operating system or platform credential.

Responsibilities

Implement and maintain cybersecurity safeguards for enterprise, cloud, network, application, and data environments.
Support the full RMF lifecycle and Authority to Operate process, including system categorization, control selection and implementation, assessment preparation, authorization package development, and continuous monitoring.
Develop, maintain, and review RMF artifacts, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, architecture documentation, and authorization status reports.
Conduct security control assessments, configuration reviews, vulnerability scans, software and container security testing, log analysis, and other technical evaluations using approved tools, processes, and environments.
Analyze findings, determine risk and mission impact, recommend remediation, and track vulnerabilities and corrective actions through closure with relevant stakeholders.
Apply security engineering principles throughout the system lifecycle, including security requirements analysis, secure architecture and design reviews, control implementation, system hardening, STIG validation, and security testing.
Monitor and analyze alerts, events, threat information, and system activity; investigate suspected incidents; preserve relevant evidence; and support containment, eradication, recovery, root-cause analysis, and after-action reporting.
Assess compliance with Department of War, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational cybersecurity policies, standards, and technical guidance.
Support identity, credential, and access management capabilities, including multifactor authentication, identity lifecycle management, federation, single sign-on, privileged access, and least-privilege enforcement.
Evaluate cloud and containerized environments for secure configuration and compliance across applicable AWS, Azure, or Google Cloud services, and advise engineering teams on secure migration and deployment practices.
Use and support cybersecurity systems such as eMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting tools.
Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation capabilities.
Prepare vulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, procedures, and status updates for technical and leadership audiences.
Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks, standards, knowledge articles, training, and security awareness activities.