Information Security Specialist

PEMCCO•Washington, DC

1d•Hybrid

About The Position

PEMCCO is seeking an Information Security Specialist to support the security, compliance, and continuous monitoring of information systems that support critical government missions. This role is ideal for a cybersecurity professional who enjoys vulnerability management, security assessments, Risk Management Framework (RMF) activities, and helping organizations maintain strong security postures in complex environments. This opportunity is a strong fit for candidates with experience in information assurance, information security, cybersecurity, system security, RMF, compliance, vulnerability management, continuous monitoring, or cybersecurity operations. PEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve mission success. We offer opportunities to work on impactful projects, collaborate with experienced teams, and contribute to innovative solutions that support critical government operations. As an Information Security Specialist, you will support the implementation, assessment, and maintenance of security controls that protect information systems, networks, and sensitive data. You will work closely with engineers, system administrators, software developers, and stakeholders to ensure systems comply with cybersecurity requirements and are protected against emerging threats. This role offers an excellent opportunity to expand your cybersecurity expertise while supporting mission-critical systems, compliance initiatives, and security programs.

Requirements

Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field
Three (3) years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field
Knowledge of information assurance and cybersecurity principles
Knowledge of Risk Management Framework (RMF) processes and security compliance requirements
Knowledge of security controls, vulnerability management, and risk assessment methodologies
Knowledge of NIST, DoD, and federal cybersecurity requirements
Ability to identify, analyze, and document security risks and vulnerabilities
Ability to interpret and apply security policies, standards, and procedures
Strong analytical and problem-solving skills
Strong written and verbal communication skills
Ability to prepare and maintain security documentation
Ability to work independently and collaboratively within a multidisciplinary team
Proficiency with standard office software and cybersecurity tools
Ability to obtain and maintain a government security clearance if required
Must meet applicable DoD 8140 workforce qualification requirements if required by contract

Nice To Haves

Master's degree in Cybersecurity, Information Assurance, Information Systems, or a related technical discipline
Experience supporting Department of Defense or Federal Government programs
Experience supporting RMF and Assessment & Authorization activities
Experience developing and maintaining security documentation
Experience supporting vulnerability management, compliance, or continuous monitoring initiatives
Experience supporting cybersecurity assessments, audits, or accreditation activities

Responsibilities

Support the implementation and maintenance of information security controls and safeguards
Assist with Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities
Review system security documentation for accuracy, completeness, and compliance
Conduct security assessments, vulnerability scans, and risk analyses
Identify, document, track, and support remediation of security vulnerabilities and deficiencies
Support the development and maintenance of System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and related security documentation
Monitor compliance with applicable cybersecurity policies, standards, and regulations
Support continuous monitoring activities and security posture assessments
Coordinate with engineers, administrators, developers, and stakeholders to ensure security requirements are incorporated throughout the system lifecycle
Assist with incident response, security investigations, and remediation activities
Maintain security records, reports, and compliance documentation
Support cybersecurity audits, inspections, and authorization activities