Cybersecurity Specialist

Locked Core Tech, LLC

10d•$80,000 - $105,000•Remote

About The Position

The Cybersecurity Specialist supports the Information Management Department at Naval Medical Center San Diego. The role conducts cybersecurity assessments, vulnerability management, system hardening, patch management, and Risk Management Framework (RMF) activities across an enterprise IT environment. It helps protect mission-essential information systems and maintain compliance with DoD, NIST, FIPS, and federal cybersecurity requirements. The position is fully remote within the continental United States. The employee must maintain a secure, professional home office with reliable high-speed internet, be available during normal business hours, and support government and customer requirements through virtual collaboration tools. Occasional travel may be required for meetings, training, audits, or other mission-related activities. The specialist provides cybersecurity and RMF support for IT and information systems subject to FISMA, including developing and maintaining RMF documentation, security controls, authorization packages, and POA&Ms. The role also advises technical and program teams, coordinates remediation and authorization activities, and communicates technical risks and recommendations to stakeholders and leadership.

Requirements

At least five years of experience applying cybersecurity or Information Assurance principles within a DoD environment.
CISSP certification or a DoD-approved equivalent certification.
Ability to qualify for and maintain an IAT Level II position in accordance with DoD 8570.01-M and DoD 8140 requirements.
Expert-level knowledge of DoD and DHA cybersecurity architecture, Information Assurance principles, and enterprise security operations.
Ability to serve as a cybersecurity subject matter expert and provide technical guidance and recommendations to stakeholders, system owners, and leadership.
Experience supporting security accreditation, authorization, and certification processes in federal or DoD environments.
Experience integrating cybersecurity requirements with IT, infrastructure, networking, and systems operations.
Expertise with the NIST Cybersecurity Framework, NIST SP 800-37 RMF, FISMA requirements, FIPS, DoD cybersecurity policies and procedures, vulnerability management and remediation, security accreditation and authorization, and Information Security program management.
Ability to coordinate and conduct security surveys, inspections, and assistance visits.
Strong oral and written communication skills.
Expert understanding of DoD and DHA IT architectures, cybersecurity requirements, Information Assurance principles, and enterprise infrastructure protection strategies.
Expert knowledge of system certification, accreditation, authorization, and RMF processes.
Strong knowledge of federal cybersecurity regulations, standards, and best practices.
Ability to evaluate, plan, direct, and support Information Security programs for federal information systems.
Ability to analyze emerging technologies and assess their impact on cybersecurity, compliance, and business operations.
Ability to plan, coordinate, and manage cybersecurity initiatives and projects.
Strong analytical and problem-solving abilities.
Ability to communicate technical concepts and risks to technical and non-technical audiences.
Ability to maintain focus and perform detailed analytical work for extended periods.

Nice To Haves

Experience supporting Navy, Defense Health Agency, or other DoD healthcare environments.
Experience supporting DHA information systems, cybersecurity programs, and enterprise IT environments.
Experience with enterprise vulnerability scanning and remediation tools.
Experience supporting Authority to Operate packages.
Experience in a cybersecurity leadership, lead analyst, or subject matter expert capacity.
Experience advising system owners, program managers, and senior leadership on cybersecurity risk and compliance matters.
Knowledge of cybersecurity auditing, compliance reviews, and inspections.
Familiarity with enterprise storage, virtualization, and networking technologies.
Active security clearance or ability to obtain one, if required by the program.

Responsibilities

Perform cybersecurity scanning and vulnerability assessments on networked devices.
Identify, analyze, and remediate vulnerabilities found through security scans and assessments.
Apply security patches, updates, and configuration changes to maintain compliance and mitigate risk.
Monitor and support security compliance initiatives across enterprise environments.
Provide RMF services for IT and information systems subject to FISMA requirements.
Implement and maintain NIST SP 800-37 RMF processes throughout the system lifecycle, including supporting efforts initiated by the customer or other entities.
Develop and maintain RMF documentation, security controls, and authorization packages.
Coordinate remediation efforts and support system accreditation and authorization activities.
Follow established issue-resolution processes for identified vulnerabilities and security findings.
Document risk-based decisions, risk acceptance actions, corrective actions, and remediation efforts.
Create and maintain Plans of Action and Milestones (POA&Ms).
Conduct validation testing and security retesting after remediation activities.
Provide documentation and audit trails to support RMF and compliance efforts.
Scan, secure, and patch Windows servers and workstations, Apple macOS systems, VMware infrastructure, Cisco and Brocade network switches, HP and Ricoh printers, EMC and Nimble SAN storage systems, wired and wireless network devices, and other enterprise-attached devices.
Serve as a cybersecurity subject matter expert to technical and program teams.
Conduct security inspections, assessments, surveys, and assistance visits.
Collaborate with infrastructure, networking, and systems teams to strengthen enterprise security posture.
Support security planning, policy implementation, and cybersecurity program evaluation.
Communicate technical risks and recommendations to stakeholders and leadership.
Independently manage workload and meet project deadlines in a remote environment.