Senior Information Systems Security Specialist

Nightwing Intelligence Solutions•Sterling, VA

3d•Onsite

About The Position

Nightwing is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. Nightwing is seeking a cybersecurity engineer to support the design, development, and deployment of advanced cybersecurity capabilities in the customer environment supporting analysts and business continuity of the customer mission.

Requirements

U.S. Citizenship
Must have an active TS/SCI Secret clearance.
Must be able to obtain DHS Suitability.
6+ years of directly relevant experience in cybersecurity engineering.
Experience with NIST 800-53, RMF
Experience with AWS security
Experience with Splunk, Trellix and Nessus/Tenable
Must be able to work collaboratively across physical locations.

Nice To Haves

Experience with CISA programs or similar federal cybersecurity operations
Background in security assessment of malware analysis platforms
Experience with cloud security assessment and authorization
Knowledge of critical infrastructure security requirements
Experience with continuous monitoring and automated compliance tools
Familiarity with DevSecOps and security automation practices
Background in penetration testing or vulnerability assessment
Experience implementing automation solutions using OpenShift, Ansible, Docker, Kubernetes or related tools
Experience as a systems administrator with multiple operating systems to include Linux/Unix, Windows, MacOS.

Responsibilities

Lead implementation and maintenance of security controls aligned with NIST SP 800-53 and organizational requirements.
Designing and sustaining secure infrastructure solutions across Windows, macOS, Linux/Unix, and virtual environments.
Integrating and managing applications within container platforms, ensuring patching, hardening, and secure image lifecycle.
Implementing and validating access controls (RBAC/least privilege), privileged access management, backup/restore, and continuous monitoring.
Monitoring platform security posture, report findings, and escalate risks as needed.
Reviewing vulnerability assessments and prioritizing remediation using BOD 26-04 risk models.
Directing remediation activities, coordinating with asset owners, and tracking progress to ensure compliance with federal timelines.
Managing POA&M lifecycle, ensuring documentation and evidence support closure.
Supporting ISSO with security reporting and continuous monitoring.
Maintaining artifacts for ATO and control assessments, including configurations, scans, patch logs, inventories, and access reviews.
Updating and enforcing vulnerability management procedures; ensure actions are documented and auditable.
Identifying workflow improvements and staying current on relevant directives and best practices.