Information Security Specialist - Senior

TekSynap•Annapolis Junction, MD

9d•$150,000 - $200,000•Onsite

About The Position

We are seeking an Information Security Specialist - Senior to join our team supporting the Defense Intelligence Agency (DIA) CIO Infrastructure Services (CIS) contract in Annapolis Junction, Maryland. The DIA CIO Infrastructure Services program provides secure enterprise infrastructure engineering and operations across classified environments. This position supports continuous monitoring, authorization-to-operate (ATO) lifecycle activities, security architecture, incident analysis, and the security operation of assigned information systems in coordination with Government leads, system owners, service lanes, and engineering personnel. TekSynap is a fast-growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers.

Requirements

Active TS/SCI clearance. A polygraph will be required for this position and must be obtained and maintained throughout the period of performance.
Compliance with DoD 8140 and other certification or training requirements assigned to the work role; ability to maintain required technical and security training throughout performance.
Bachelor's degree (or equivalent) in cybersecurity, information assurance, information systems, computer science, or a related discipline, plus at least six years of relevant experience.
Education and experience equivalencies are acceptable: high school diploma/GED plus 10 years, associate degree plus 8 years, master's degree plus 4 years, or PhD plus 2 years of relevant experience.
Demonstrated senior-level authority in solving unusually complex cybersecurity and information-assurance problems and developing innovative, mission-appropriate solutions.
Progressively responsible information-assurance experience supporting ICD 503 certification and accreditation and the DoD Risk Management Framework.
Working knowledge of DoDI 8510.01, FISMA, NIST SP 800-37, NIST SP 800-53, NIST SP 800-39, NIST SP 800-30, CNSSI 1253, DISA STIGs, ATO lifecycle management, and POA&M development.
Hands-on experience with XACTA or a comparable authorization repository, Splunk or similar log-analysis platforms, vulnerability-scanning tools, security monitoring, and assigned system technologies.
Strong written and oral communication skills and demonstrated ability to coordinate across Government, engineering, operations, cybersecurity, service-owner, and audit organizations.
U.S. Citizenship
Active TS/SCI security clearance required. A polygraph will be required for every position and must be obtained and maintained throughout the period of performance. The employee must maintain SCI access and all customer-mandated system and facility access.

Responsibilities

Monitor, analyze, and detect cybersecurity events and incidents across assigned systems and networks; coordinate escalation and response with Operations, Cyber, and service-lane leads.
Support integrated cyber defense and maintain security toolsets for continuous monitoring and ongoing authorization.
Determine security requirements by evaluating mission needs, standards, architectures, integration risks, vulnerabilities, and threat information.
Design, implement, and integrate secure DoD architectures and system components across computing, network, enclave, and platform IT environments.
Advise Government representatives, system owners, and service leads on accreditation, threats, security posture, ongoing activities, and POA&Ms.
Maintain XACTA authorization records, network diagrams, vulnerability scans, STIG checklists, hardware/software inventories, SCRM certificates, and POA&M artifacts.
Oversee day-to-day security operations and verify that assigned systems operate, recover, and are disposed of in accordance with approved authorization packages and DIA policy.
Develop POA&Ms, waivers, exceptions, and risk-acceptance documentation; coordinate RMF approvals with ISSEs and system subject-matter experts.
Conduct periodic security reviews and coordinate changes required by notifications, baseline updates, audit findings, or ATO conditions.
Monitor recovery activities and confirm that security features and configurations are restored to the approved authorization baseline.
Audit Splunk or similar logs and support authorization of SolarWinds, SCOM, SCORCH, AppDynamics, and related monitoring integrations.
Develop and execute security test scripts, vulnerability and risk assessments, incident-response analyses, and mitigation recommendations.
Maintain security policies, procedures, test results, and technical documentation; support audits, reviews, training, and continuous improvement.
Coordinate secure system decommissioning and communicate complex security matters to technical staff, leadership, and Government representatives.