Cybersecurity Support Specialist

Nooks•Colorado Springs, CO

7h•$103,000 - $114,000

About The Position

Nooks is seeking a Cybersecurity Support Specialist to support the security and compliance of classified and unclassified systems at a single Nooks site, working alongside the site's Cybersecurity Lead. The role is an individual-contributor specialist position reporting to the Site IT/Cyber Manager. It is suited to someone with two to five years of hands-on cybersecurity, IT support, or system administration experience. The site's procedures are established but still maturing, so audits, incidents, and new system standups may shift priorities, and the specialist is expected to step in where security work needs attention. The specialist supports vulnerability scanning, patch verification, security configuration checks, DISA STIG implementation, remediation tracking, compliance documentation, user support, access control, incident response, and security awareness. The position works closely with the Cybersecurity Lead and IT Support Specialist, and coordinates with Security and Operations to help maintain site compliance with DoW requirements.

Requirements

2–5 years of experience in cybersecurity, IT support, or system administration.
DoD 8140.03/8570.01 Information Assurance Technical (IAT) Level II certification (e.g., CompTIA Security+), or ability to obtain one within six months of hire.
Hands-on experience with DISA STIGs and tools such as SCAP Compliance Checker and STIG Viewer.
Familiarity with access control, vulnerability management, system hardening, and Active Directory, including Group Policy Object (GPO) and Organizational Unit (OU) structure.
Foundational knowledge of Windows and Linux operating systems, networking, and common IT troubleshooting practices.
Associate's or Bachelor's degree in Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
Strong documentation habits, attention to detail, and clear communication across IT and security functions.
Must be eligible to work in the United States and capable of maintaining eligibility up to the TS/SCI level within 45 days of hire.

Nice To Haves

Familiarity with monitoring and scanning tools such as Tenable Nessus, ManageEngine, Splunk, antivirus platforms (e.g., ESET, Trellix), and other vulnerability and SIEM tools.
Prior DoW or cleared-environment exposure.

Responsibilities

Conduct vulnerability scans, patch verification, and security configuration checks under the direction of the site Cybersecurity Lead.
Monitor and audit the security posture of classified and unclassified systems, applying DISA Security Technical Implementation Guides (STIGs).
Track findings and remediation actions through closure and document them to organizational and DoD standards.
Maintain cybersecurity documentation, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), audit logs, and standard operating procedures.
Record compliance actions and evidence to keep the site ready for audits and self-inspections.
Keep cybersecurity artifacts organized and current for the Cybersecurity Lead and assessors.
Provide Tier 1 support for cybersecurity-related user requests and escalate issues requiring deeper analysis.
Manage user accounts, security groups, and permissions in partnership with the site's IT Support Specialist.
Support permissions reviews and implementation of access-control policies, including role-based access control.
Participate in incident response and continuous monitoring, including log collection, basic analysis, and security control status reporting.
Reinforce cybersecurity best practices with end users through daily interactions.
Collaborate with IT, personnel security, and physical security teams to keep site operations compliant with DoW requirements.
Coordinate daily account and access work with the site's Cybersecurity Lead and IT Support Specialist, and support site activities with the Site Lead.