Senior Security Specialist

ERG • Indian Head, MD

4d • $120,000 - $145,000 • Onsite

About The Position

ERG is seeking a Senior Security Specialist to oversee information assurance and cybersecurity compliance across Navy systems and environments. This role ensures that all systems adhere to DoD and Navy cybersecurity policy, Risk Management Framework (RMF) requirements, and established security best practices. The ideal candidate brings deep expertise in cybersecurity governance, auditing, and compliance within high security DoD environments.

This is a fulltime onsite position at the Naval Surface Warfare Center (NSWC) Indian Head. Indian Head, MD, is approximately 30 miles from Washington, DC, 25 miles from Alexandria, VA, and 60 miles from Fredericksburg, VA.

Requirements

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, or related field
• 8+ years of professional experience in cybersecurity, information assurance, or security compliance
• DoD‑approved IAM certifications (e.g., CAP, CISSP, GSLC, or similar)
• Strong understanding of RMF, NIST SP 800‑53 controls, and ATO processes
• Experience conducting audits, assessments, and security compliance reviews
• Familiarity with eMASS, continuous monitoring tools, and federal compliance frameworks
• Excellent communication, documentation, and organizational skills
• Must currently hold or maintain a Department of Defense Top investigation/privileged access eligibility (T5 (SSBI) clearance)
• Must be a U.S. citizen as this position is not eligible for Limited Access Authorizations

Nice To Haves

• Experience supporting U.S. Navy systems or other DoD cybersecurity programs
• Knowledge of system engineering, platform security, and secure configuration standards

Responsibilities

• Implement and enforce cybersecurity policies, procedures, and security controls across Navy systems
• Conduct security audits, inspections, and compliance assessments to validate adherence to DoD and Navy cybersecurity requirements
• Support RMF lifecycle activities, including control implementation, evidence collection, documentation updates, and stakeholder coordination
• Contribute to ATO package development, POA&M management, and ongoing authorization efforts
• Perform continuous monitoring of cybersecurity controls and system security posture
• Ensure organizational alignment with DoD, Navy, and federal cybersecurity directives, standards, and best practices
• Develop and maintain security documentation, including SSPs, assessment reports, and compliance artifacts
• Provide cybersecurity guidance and mentorship to engineering and program teams

Benefits

• health and dental insurance
• life insurance
• long-term disability
• educational benefits
• FSAs
• a generous 401k plan
• profit sharing
• an EAP
• 11-20 paid vacation days per year
• 10 paid holidays per year
• 56 hours or more of sick leave (based on the state you work in) per year (pro-rated for part-time)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1-10 employees