IT Cybersecurity Specialist

Graham Technologies•Fort Lee, VA

1d•$115,000 - $135,000•Onsite

About The Position

Graham Technologies is seeking an experienced IT Cybersecurity Specialist to provide cybersecurity engineering, Risk Management Framework support, continuous monitoring, vulnerability management, incident response, and authorization support for a Federal information system. The specialist will help maintain a secure, compliant, and resilient operating environment.

Requirements

Minimum five (5) years of professional cybersecurity experience.
Experience supporting RMF, security authorization, continuous monitoring, vulnerability management, or incident response activities.
Experience applying NIST SP 800-53 controls and maintaining cybersecurity documentation.
Experience supporting Federal information systems or regulated environments.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.
Active Secret clearance.
Active CompTIA Security+ or higher
Experience with vulnerability scanners, SIEM platforms, GRC tools, ticketing systems, and Microsoft collaboration tools.

Nice To Haves

Experience securing cloud-native, ServiceNow, DevSecOps, or CI/CD environments.
Experience with supply-chain risk management, Zero Trust, penetration testing, or application security.
Master's degree in Cybersecurity, Information Assurance, or a related discipline.
CISSP, CASP+, CCSP, CISM, CySA+, or equivalent advanced certification.

Responsibilities

Support the development, maintenance, and assessment of security authorization documentation, including the System Security Plan, security controls, assessment artifacts, and supporting evidence.
Apply the Risk Management Framework and applicable NIST security and privacy controls throughout the system lifecycle.
Coordinate continuous monitoring activities, vulnerability scanning, remediation tracking, and monthly Plan of Action and Milestones updates.
Develop and maintain access-control, role-based access, incident-response, contingency, and security operating procedures.
Analyze security findings, assess risk, recommend corrective actions, and verify remediation effectiveness.
Support security engineering reviews for cloud, platform, application, API, and DevSecOps implementations.
Coordinate incident triage, containment, investigation, documentation, and recovery activities.
Support static and dynamic application security testing, penetration-testing coordination, and secure-code review activities.
Maintain audit-ready cybersecurity documentation and respond to security assessments, reviews, and data calls.
Collaborate with system owners, developers, administrators, project managers, and Government cybersecurity stakeholders.