Senior Cybersecurity Specialist

VMD Corp•Glen Burnie, MD

5d•Hybrid

About The Position

As a Senior Cybersecurity Specialist, you will provide security and compliance expertise and leadership in support of multiple IT projects, programs, and initiatives. You will support assessment and authorization (A&A), determine current security postures, track vulnerabilities and POA&Ms, and identify potential cybersecurity risks. The role includes working with system owners and technical teams to assess and remediate security findings, develop RMF documentation and procedures, and communicate risk and compliance to senior leaders. You will also serve as a key member of the incident response team, respond to and triage security incidents, and continually improve cybersecurity risk assessment and POA&M processes. The position is hybrid, with two to three days onsite, requires periodic on-call coverage, and involves little travel (less than 10%). The minimum clearance to start is Secret, and applicants must be U.S. citizens.

Requirements

At least 10 years of cybersecurity and compliance experience.
Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification.
Strong leadership and interpersonal skills to facilitate collaboration across stakeholders.
Ability to work independently and define appropriate methods and procedures.
Understanding of cybersecurity principles and control guidance.
Effective writing skills for documenting issues and recommendations.
Strong customer relationship-building ability.
Bachelor’s degree; additional years of experience may substitute for the degree.
At least 10 years of overall experience and 10 years of specific experience in the field.
U.S. citizenship.
Secret clearance required to start.
Ability to provide periodic on-call coverage.
High attention to detail, personal accountability, integrity, and a demonstrated passion for cybersecurity.
Ability to take ownership of systems, assessments, deadlines, and deliverables with limited supervision.
Ability to connect compliance control requirements to practical cybersecurity outcomes.
Comfort working in a customer-facing environment and representing the organization professionally during reviews, audits, assessments, and status meetings.
Ability to manage multiple priorities, deadlines, assessments, and documentation efforts, including competing requirements with short timelines.

Responsibilities

Lead and participate in meetings to review systems and technology for compliance.
Perform risk assessments based on Federal guidelines and industry best practices.
Help teams identify vulnerabilities and recommend ways to reduce cybersecurity risk.
Develop and improve control-specific procedures for RMF control families by interpreting NIST requirements, identifying system-specific implementation needs, and documenting procedures that support mission operations and defensible compliance.
Report cybersecurity risk and compliance to executives and senior leaders.
Analyze technical and control-based vulnerabilities and develop actionable remediation plans and mitigation strategies.
Create, maintain, and track POA&Ms with system owners and technical teams, documenting corrective actions and mitigations, monitoring remediation progress, and supporting timely closure of findings.
Support remediation of control-based POA&Ms by analyzing weaknesses, recommending corrective actions or mitigations, coordinating with technical teams, and reviewing closure evidence.
Author A&A documentation and foundational RMF documentation to support system authorization.
Continually improve cybersecurity risk assessment and POA&M processes and programs.
Aggregate and track cybersecurity POA&Ms and risks across projects, teams, and programs.
Respond to and triage security incidents as a key member of the incident response team.
Communicate cybersecurity best practices based on policies, standards, and controls.