Sr. IT Cyber Security Specialist

Innoflight LLC•San Diego, CA

4d•$135,000 - $160,000•Onsite

About The Position

As a Senior IT Cyber Security Specialist, you will play a critical role in protecting Innoflight's secure network infrastructure and mission-critical systems. You'll lead cybersecurity initiatives by implementing the Risk Management Framework (RMF), maintaining compliance with DoD security requirements, and strengthening the organization's overall cyber posture. Working closely with engineering, IT, government customers, and security teams, you'll safeguard enterprise systems, mentor junior cybersecurity professionals, and ensure our technologies remain secure, resilient, and mission ready. An Active Top Secret U.S. Security Clearance required.

Requirements

Cybersecurity & Compliance: Extensive experience implementing RMF, supporting ATO packages, and maintaining compliance with NIST SP 800-171, CMMC Level 2, DISA STIGs, and DoD cybersecurity requirements.
Enterprise Security Administration: Skilled in securing Linux and Windows environments while administering enterprise security technologies including SIEM, firewalls, endpoint protection, IAM, and vulnerability management tools.
Automation & Technical Problem Solving: Experienced with Linux administration, Bash scripting, vulnerability remediation, system hardening, and implementing automation that improves operational efficiency.
Leadership & Collaboration: Able to communicate effectively with technical and non-technical stakeholders, mentor cybersecurity professionals, and provide strategic guidance in a fast-paced defense environment.
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field preferred; equivalent experience will be considered.
7 or more years of progressive IT or cybersecurity experience, preferably within DoD, federal, or defense contractor environments.
Strong experience securing and administering Linux systems (e.g., RHEL, Ubuntu), including Bash or other shell scripting for automation.
Strong understanding of Identity and Access Management (IAM) principles and technologies.
Solid knowledge of Linux and Windows file system permissions, access control, and configuration management.
Familiarity with RMF, NIST SP 800-171, CMMC Level 2, DISA STIGs, and supporting ATO packages through eMASS.
Experience administering network security technologies including firewalls, VPNs, VLANs, intrusion prevention systems, SIEM platforms, endpoint protection, and vulnerability management tools.
Ability to support compliance reviews, implement security mitigations, and maintain comprehensive technical documentation.
Must meet DoD 8570.1-M IAM Level III certification requirements (e.g., CISSP, CISM, GSLC).
Excellent communication, organizational, analytical, and problem-solving skills.
Active Top Secret U.S. Security Clearance required.

Responsibilities

Leads RMF Compliance: Executes all phases of the Risk Management Framework (RMF), including system categorization, security control implementation, assessment, authorization, and continuous monitoring to maintain compliance with DoD cybersecurity requirements.
Manages Security Documentation: Develops and maintains System Security Plans (SSPs), Plan of Action & Milestones (POA&Ms), Risk Assessment Reports (RARs), and other RMF artifacts while supporting Authorization to Operate (ATO) and Interim Authority to Test (IATT) packages through eMASS.
Strengthens Enterprise Security: Performs vulnerability scanning, system hardening, patch management, and remediation activities using tools such as Nessus, HBSS, and other approved cybersecurity solutions.
Administers Security Technologies: Monitors and manages enterprise cybersecurity tools including SIEM platforms, intrusion prevention systems (IPS), firewalls, endpoint protection, email security, VPNs, and user behavior analytics to protect critical infrastructure.
Supports Secure System Architecture: Provides technical guidance to ensure networks, servers, and applications are designed and maintained in compliance with cybersecurity standards and organizational security requirements.
Responds to Security Incidents: Investigates cybersecurity events, performs root cause analysis, recommends corrective actions, and helps strengthen long-term system resilience against emerging threats.
Develops Cybersecurity Standards: Creates and maintains standard operating procedures, technical documentation, network diagrams, and security processes that support operational excellence and regulatory compliance.
Collaborates Across the Organization: Partners with IT, Engineering, Industrial Security, Physical Security, Special Programs, and government customers to ensure cybersecurity objectives are aligned across the organization.
Supports End Users: Assists with endpoint configuration, access provisioning, incident troubleshooting, and cybersecurity awareness to help maintain a secure and productive computing environment.
Provides Technical Leadership: Mentors junior cybersecurity team members, supports project execution, and advises leadership on cybersecurity risk, compliance, and strategic initiatives that protect Innoflight's mission-critical systems

Benefits

Profit-Sharing Bonus
Cash Performance Bonus
401(k) with 3% company match
Comprehensive medical, dental, vision, HSA & life insurance
10 paid holidays
120 hours PTO (starting in year one)
Access to ancillary benefits such as critical illness, accident, disability, legal and pet insurance.
Tuition reimbursement
Internal "Ask Me Anything" sessions
Weekly “Lunch & Learns”