Security Specialist Lead - C

Telos Corporation • Virginia Beach, VA

47d • Onsite

About The Position

The most security-conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security. Be a part of the Telos culture and see what sets us apart! Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k. Our employees enjoy more than just a great work environment! This position will be based at Virginia Beach, VA.

Requirements

• Education: Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Computer Science, or related technical field.
• Experience: Minimum 10 years of professional experience in information assurance, cybersecurity management, or system accreditation (8 years with Master's; 15 years without degree accepted).
• Certifications:
• Must hold a DoD 8570.01-M IAM Level III certification (e.g., CISM, CISSP (or Associate), GSLC, or CCISO).
• Must meet DFARS 252.239-7001 Information Assurance training and certification requirements.
• Clearance: Active SECRET security clearance with ability to obtain and maintain TS/SCI if required.
• The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.
• Telos maintains a drug-free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.
• Telos Corporation participates in the E-Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security ("DHS") of your authorization to work in the United States.

Nice To Haves

• Expertise with DoD RMF toolsets (eMASS, VRAM, XACTA, ACAS, STIG Viewer).
• Working knowledge of NIST SP 800-37 Rev 2, 800-53 Rev 5, 800-171, and CNSSI 1253.
• Experience coordinating with Authorizing Officials (AOs), SCA representatives, and Cybersecurity Technical Authorities (CTA).
• Familiarity with NAVSEA Red Team/Blue Team assessments and NAVWAR CS TA validation processes.
• Demonstrated leadership or mentoring experience in multi-disciplinary cybersecurity teams.
• Strategic mindset for balancing risk management and mission effectiveness.
• Excellent oral and written communication skills for interfacing with technical and executive stakeholders.
• Highly organized, with the ability to manage multiple systems and deadlines simultaneously.
• Proven record of supporting continuous ATO compliance and implementing measurable security improvements.

Responsibilities

• Lead the development and maintenance of RMF authorization packages including System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, Continuous Monitoring plans, and Risk Assessments.
• Ensure system compliance with DoD 8570.01-M, CNSSI 1253, NIST SP 800-53, and SECNAV 5239.3 series policies.
• Advise government stakeholders on cybersecurity posture, risk prioritization, and ATO/ATC sustainment strategies.
• Review and approve security documentation prepared by lower-tier analysts or engineers.
• Serve as the technical liaison between system owners, accrediting authorities, and NAVSEA Red Team / Blue Team representatives.
• Perform comprehensive security assessments, vulnerability scans, and control validations using eMASS, ACAS, STIG Viewer, and Security Compliance Checker tools.
• Direct STIG implementation and configuration management of enclave networks, servers, and mission systems.
• Evaluate cross-domain interfaces and coordinate with Navy Cross Domain Security Office (NCDSO) for TAB and DSAWG approval documentation.
• Review system and software architectures to identify weaknesses, misconfigurations, or risks to confidentiality, integrity, and availability.
• Develop and recommend countermeasures to mitigate identified vulnerabilities and maintain zero-trust principles.
• Maintain system accreditation status through recurring assessments, configuration audits, and vulnerability reporting in VRAM.
• Manage Information Assurance Vulnerability Alert (IAVA) compliance across assigned systems and ensure timely remediation.
• Oversee incident response, investigation, and reporting in accordance with DoN Cyber Incident Handling procedures.
• Support re-certification efforts and contribute to the improvement of RMF processes and templates.

Benefits

• generous paid time off
• medical
• dental
• vision
• tuition reimbursement
• 401k
• salary commensurate with experience and benefits to meet your needs for today and the future.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Number of Employees: 501-1,000 employees