Senior Information Security (INFOSEC) Specialist

Acquired Data Solutions•Washington, DC

1d•Onsite

About The Position

ADS is seeking a Senior Information Security (INFOSEC) Specialist to support enterprise cybersecurity, Risk Management Framework (RMF), cloud security, and Information Assurance (IA) activities across secure and unclassified environments. This role is responsible for maintaining secure, compliant information systems, supporting cloud Authorizations to Operate (ATOs), implementing cybersecurity best practices, and ensuring compliance with DoD and NIST security requirements. The position also supports cloud modernization, continuous monitoring, vulnerability management, and DevSecOps initiatives.

Requirements

Bachelor’s degree in information systems engineering, computer science, engineering, business or other related fields, and at least 12 year of experience (with 10 years of related, specialized technical experience)
Experience implementing DoD Risk Management Framework (RMF) and supporting ATOs.
Knowledge of NIST RMF, NIST SP 800-53, DISA STIGs, and DoD cybersecurity policies.
Experience with cloud security, vulnerability management, and continuous monitoring.
Familiarity with AWS or other cloud environments.
Strong technical writing, communications, and problem-solving skills.
DoD Top Secret Clearance or ability to obtain and maintain a DoD Top Secret Clearance.

Nice To Haves

CISSP, CAP, Security+, CASP+, AWS Security Specialty, or equivalent certification.
Experience with AWS GovCloud.
Experience using Burg Suite, Checkmarx, Nessus, or similar security tools.
Experience with DevSecOps and secure software development.
Knowledge of Zero Trust Architecture and Continuous ATO (cATO).
Experience supporting federal DoD enterprise IT environments.

Responsibilities

Lead RMF implementation and support system Authorizations to Operate (ATOs).
Develop and maintain RMF documentation, including SSPs, POA&Ms, SARs, network diagrams, and security procedures.
Support cloud security, cloud migrations, and cloud ATO compliance.
Perform vulnerability assessments, security scanning, and risk analysis.
Monitor security findings, coordinate remediation efforts, and support continuous monitoring activities.
Maintain compliance with DoD, DISA, and NIST cybersecurity requirements.
Support DevSecOps, secure application development, and automated security testing.
Coordinate cybersecurity activities with enterprise IT teams, cloud providers, and other stakeholders.
Support incident response, change management, disaster recovery, and contingency planning.
Provide technical guidance on cybersecurity, RMF, and security engineering best practices.