IT Cybersecurity Specialist (San Diego)
About The Position
We need an experienced IT Cybersecurity Specialist at the Defense Contract Management Agency (DCMA). This role secures the ServiceNow platform that underpins the Blue UAS Cleared List, the program responsible for vetting commercial drone systems for security risk before they are approved for military and government use. In this role, you will architect and implement ServiceNow specific security controls, develop and maintain the System Security Plan and RMF artifacts, and track the POA&M to remediate identified vulnerabilities and maintain the system's Authority to Operate. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
- Minimum of five (5) years of practical experience
- Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect, DCWF 651)
- Demonstrated expertise applying NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)
- Demonstrated experience securing ServiceNow instances in a FedRAMP High and DoD IL4/IL5 environment, including configuring ACLs, Client Scripts, Data Policies, and integrating DoW E-ICAM/CAC authentication
- Active or interim DoW security clearance; favorably adjudicated Tier 3 background investigation required
- Must be a US Citizen
Nice To Haves
- Experience with ServiceNow GRC/IRM or SecOps modules highly preferred
Responsibilities
- Architects and implements ServiceNow specific security controls, including RBAC, ACLs, Data Policies, and Edge Encryption, aligned to the DoD Zero Trust Strategy
- Enforces strict data segregation between IL4 (Public) and IL5 (CAC Authenticated) environments
- Creates and maintains a detailed schema and RBAC matrix outlining all roles, groups, ACLs, and data segregation rules
- Coordinates with the Government's IT Program Manager and Authorizing Official (AO) to ensure required cybersecurity protocols are maintained and followed
- Develops and continuously updates a comprehensive System Security Plan (SSP) and all required RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172
- Actively tracks, manages, and updates the Plan of Action and Milestones (POA&M) within ServiceNow GRC/IRM to document, report, and remediate identified vulnerabilities within Government provided suspense dates
- Conducts continuous monitoring and provides ongoing Security Assessment Reports (SAR) documenting vulnerability scans, penetration test reviews, and compliance checks prior to code promotion
- Ensures all personnel meet applicable qualifications and certification requirements outlined in DoDM 8140.03
- Provides documentation of personnel certifications and qualifications upon request by the CO or COR
Benefits
- health, dental, and vision insurance coverage
- 401k contribution options
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
