Sr. Information Security Specialist

Goldbelt, Inc.•District of Columbia, DC

About The Position

CPMG is seeking a Sr. Cybersecurity Specialist to support the Surface Transportation Board (STB) with IT services, including user support and IT modernization efforts. The role focuses on supporting the Board’s cybersecurity activities, managing risk, and ensuring information systems meet applicable security requirements. The specialist will assess security infrastructure and documentation, support risk and incident management, contribute to audit reporting, and brief management on cybersecurity progress and status.

Requirements

At least 5–7 years of cybersecurity experience, focused on threat analysis, incident response, and risk management.
Proficiency with cybersecurity tools and technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection.
Strong understanding of network protocols, operating systems, and application security.
Excellent problem-solving skills and ability to work under pressure.
Ability to work independently and as part of a team.
Excellent verbal and written communication skills.
Proficiency with Microsoft Office products, including Word, Outlook, Excel, and PowerPoint.
Ability to obtain an interim and/or final Public Trust security clearance before entering duty and maintain the required clearance while employed.

Nice To Haves

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Relevant certifications.

Responsibilities

Perform gap analyses of current security infrastructure, strategies, plans, policies, and procedures.
Update information security documentation and support the Board’s cybersecurity efforts.
Ensure consistent application of information security standards and applicable FISMA and FedRAMP requirements across agency information systems.
Ensure new IT projects integrate FISMA requirements and standards during development.
Support risk management activities across identification, protection, detection, response, and recovery.
Manage the information security incident management program to prevent, detect, contain, and correct security breaches, threats, and vulnerabilities.
Participate in and support resolution of security and privacy violations or incidents.
Prepare and report information for internal and external audits.
Optimize IT processes to meet IT security-related goals and strategies.
Provide management briefing support on cybersecurity activity progress and status.