Cybersecurity Specialist

Interactive Process Technology LLC•Bath Township, OH

12d•Onsite

About The Position

IPT Associates (IPTA) is seeking a Cybersecurity Specialist to support cybersecurity operations, security engineering, risk management, compliance, and incident response. The role implements and maintains safeguards across enterprise, cloud, network, application, and data environments; supports the Risk Management Framework (RMF) lifecycle and Authority to Operate process; and develops and reviews authorization artifacts and technical assessments. The specialist evaluates security controls and configurations, scans for vulnerabilities, analyzes findings and risk, and coordinates remediation with system owners and other stakeholders. The position applies security engineering throughout the system lifecycle, monitors and investigates security events, supports incident response, and assesses compliance with applicable Department of War, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational requirements. It also supports identity and access management, evaluates cloud and container security, assesses Zero Trust implementation, and prepares reports, briefings, dashboards, procedures, and status updates. The role is at Wright-Patterson AFB and is contingent upon contract award; the actual job description may vary based on contract requirements and organizational needs.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalent relevant education, training, and experience may be considered.
Relevant experience supporting cybersecurity operations, security engineering, RMF, system authorization, assessment and compliance, vulnerability management, or incident response in complex enterprise environments.
Working knowledge of the NIST Risk Management Framework and security guidance, including NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-160, CNSSI 1253, DoDI 8510.01, and applicable DoW and Air Force cybersecurity requirements.
Experience developing or reviewing authorization artifacts, assessing security controls, documenting evidence, managing POA&Ms, and supporting continuous monitoring activities.
Hands-on knowledge of vulnerability scanning, secure configuration assessment, STIGs, patch and remediation tracking, network and endpoint security, log analysis, and cybersecurity incident handling.
Familiarity with eMASS and one or more SIEM, vulnerability management, endpoint security, cloud security, container security, asset discovery, or compliance automation platforms.
Understanding of TCP/IP networking, common operating systems, identity and access management, multifactor authentication, encryption, secure system administration, and defense-in-depth principles.
Ability to analyze technical findings, assess risk, prioritize remediation, preserve evidence when required, and communicate clear recommendations to technical and nontechnical stakeholders.
Strong technical writing, collaboration, analytical, and problem-solving skills, with the ability to produce accurate reports and work effectively across multidisciplinary Government and contractor teams.
Current Security+ certificate, in accordance with DoDM 8140.03, plus required operating system or platform credential.
Active Secret security clearance; ability to obtain and maintain additional access or a higher-level clearance when required by the assigned program.
Ability to obtain and maintain required Common Access Card, system access, and annual security, privacy, CUI, and role-based training requirements.

Nice To Haves

CISSP or equivalent certification is preferred.

Responsibilities

Implement and maintain cybersecurity safeguards for enterprise, cloud, network, application, and data environments.
Support the RMF lifecycle and Authority to Operate process, including system categorization, control selection and implementation, assessment preparation, authorization package development, and continuous monitoring.
Develop, maintain, and review RMF artifacts, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, architecture documentation, and authorization status reports.
Conduct security control assessments, configuration reviews, vulnerability scans, software and container security testing, log analysis, and other technical evaluations.
Analyze security findings, determine risk and mission impact, recommend remediation, and track vulnerabilities and corrective actions through closure with relevant stakeholders.
Apply security engineering throughout the system lifecycle, including requirements analysis, secure architecture and design reviews, control implementation, system hardening, STIG validation, and security testing.
Monitor and analyze alerts, events, threat information, and system activity; investigate suspected incidents; preserve relevant evidence; and support containment, eradication, recovery, root-cause analysis, and after-action reporting.
Assess compliance with DoW, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational cybersecurity policies, standards, and technical guidance.
Support identity, credential, and access management, including multifactor authentication, identity lifecycle management, federation, single sign-on, privileged access, and least-privilege enforcement.
Evaluate cloud and containerized environments for secure configuration and compliance across applicable AWS, Azure, or Google Cloud services, and advise engineering teams on secure migration and deployment practices.
Use and support cybersecurity systems, including eMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting tools.
Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation capabilities.
Prepare vulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, procedures, and status updates for technical and leadership audiences.
Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks, standards, knowledge articles, training, and security awareness activities.