Senior IT Cyber Security Specialist

Innoflight LLC • San Diego, CA

5d • $135,000 - $160,000 • Onsite

About The Position

The Senior IT Cyber Security Specialist protects Innoflight’s secure network infrastructure and mission-critical systems. The role leads cybersecurity initiatives by implementing the Risk Management Framework (RMF), maintaining compliance with DoD security requirements, and strengthening the organization’s cyber posture. The specialist works with engineering, IT, government customers, and security teams to safeguard enterprise systems, mentor junior cybersecurity professionals, and help ensure technologies remain secure, resilient, and mission ready. An active Top Secret U.S. Security Clearance is required.

The position leads RMF compliance; develops and maintains security documentation and eMASS authorization packages; performs vulnerability scanning, system hardening, patch management, and remediation; and administers enterprise cybersecurity technologies. It also provides secure-architecture guidance, investigates security incidents, develops procedures and technical documentation, supports end users, collaborates across organizational and government teams, and advises leadership on cybersecurity risks and initiatives.

The role requires seven or more years of progressive IT or cybersecurity experience. A bachelor’s degree in a related field is preferred, though equivalent experience will be considered. The position must meet DoD 8570.1-M IAM Level III certification requirements, such as CISSP, CISM, or GSLC.

The starting base salary is $135,000–$160,000 per year, depending on job-related knowledge, skills, and experience. The position includes a 9/80 schedule with every other Friday off. The role is listed as onsite.

Requirements

• Seven or more years of progressive IT or cybersecurity experience; DoD, federal, or defense contractor experience is preferred.
• Strong experience securing and administering Linux systems, such as RHEL or Ubuntu, including Bash or other shell scripting for automation.
• Strong understanding of Identity and Access Management (IAM) principles and technologies.
• Solid knowledge of Linux and Windows file system permissions, access control, and configuration management.
• Familiarity with RMF, NIST SP 800-171, CMMC Level 2, DISA STIGs, and supporting ATO packages through eMASS.
• Experience administering network security technologies, including firewalls, VPNs, VLANs, intrusion prevention systems, SIEM platforms, endpoint protection, and vulnerability management tools.
• Ability to support compliance reviews, implement security mitigations, and maintain comprehensive technical documentation.
• Must meet DoD 8570.1-M IAM Level III certification requirements, such as CISSP, CISM, or GSLC.
• Excellent communication, organizational, analytical, and problem-solving skills.
• Active Top Secret U.S. Security Clearance required.
• Applicants must be authorized to work for any employer in the U.S.; the employer does not sponsor or take over sponsorship of employment visas.
• Must successfully complete a pre-hire background check that includes criminal search, education certification, and employment verification.

Nice To Haves

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field; equivalent experience will be considered.
• Experience in DoD, federal, or defense contractor environments.
• Extensive experience implementing RMF, supporting ATO packages, and maintaining compliance with NIST SP 800-171, CMMC Level 2, DISA STIGs, and DoD cybersecurity requirements.
• Experience securing Linux and Windows environments and administering enterprise security technologies, including SIEM, firewalls, endpoint protection, IAM, and vulnerability management tools.
• Experience with Linux administration, Bash scripting, vulnerability remediation, system hardening, and automation to improve operational efficiency.
• Ability to communicate with technical and non-technical stakeholders, mentor cybersecurity professionals, and provide strategic guidance in a fast-paced defense environment.

Responsibilities

• Lead all phases of RMF compliance, including system categorization, security control implementation, assessment, authorization, and continuous monitoring.
• Develop and maintain System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), Risk Assessment Reports (RARs), and other RMF artifacts; support ATO and IATT packages through eMASS.
• Perform vulnerability scanning, system hardening, patch management, and remediation using Nessus, HBSS, and other approved cybersecurity solutions.
• Monitor and manage cybersecurity technologies, including SIEM platforms, intrusion prevention systems, firewalls, endpoint protection, email security, VPNs, and user behavior analytics.
• Provide technical guidance to ensure networks, servers, and applications comply with cybersecurity standards and organizational security requirements.
• Investigate cybersecurity events, conduct root cause analysis, recommend corrective actions, and strengthen system resilience against emerging threats.
• Create and maintain standard operating procedures, technical documentation, network diagrams, and security processes.
• Collaborate with IT, Engineering, Industrial Security, Physical Security, Special Programs, and government customers to align cybersecurity objectives.
• Support end users with endpoint configuration, access provisioning, incident troubleshooting, and cybersecurity awareness.
• Mentor junior cybersecurity team members, support project execution, and advise leadership on cybersecurity risk, compliance, and strategic initiatives.
• Support compliance reviews, implement security mitigations, and maintain comprehensive technical documentation.

Benefits

• Profit-sharing bonus and cash performance bonus.
• 401(k) with 3% company match and automatic enrollment.
• Medical, dental, vision, HSA, and life insurance.
• 10 paid holidays and 120 hours of PTO starting in year one.
• Ancillary benefits including critical illness, accident, disability, legal, and pet insurance.
• 9/80 work schedule with every other Friday off.
• Tuition reimbursement.
• Internal Ask Me Anything sessions and weekly Lunch & Learns.
• Professional development opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior