Senior Information Security Specialist

• Lead information system security activities throughout the system lifecycle
• Manage and support Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes
• Develop, review, and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and related cybersecurity documentation
• Conduct security assessments, compliance reviews, vulnerability analyses, and risk assessments
• Evaluate implemented security controls and recommend corrective actions and improvements
• Identify, document, track, and support remediation of security vulnerabilities and compliance deficiencies
• Support continuous monitoring activities and maintain awareness of system security posture
• Coordinate with system owners, engineers, developers, administrators, and stakeholders to ensure security requirements are integrated throughout the system lifecycle
• Advise leadership on cybersecurity risks, compliance requirements, and security strategies
• Support incident response activities, security investigations, and remediation efforts
• Ensure compliance with cybersecurity policies, regulations, standards, and contractual requirements
• Support cybersecurity audits, inspections, and authorization reviews
• Prepare security reports, briefings, risk assessments, and recommendations for leadership and customers
• Provide technical guidance and mentorship to cybersecurity personnel

• Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field
• Ten (10) years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field
• Advanced knowledge of information assurance and cybersecurity principles
• Advanced knowledge of Risk Management Framework (RMF) processes and security authorization requirements
• Knowledge of NIST, DoD, and federal cybersecurity policies, standards, and regulations
• Knowledge of security controls, vulnerability management, risk assessment, and compliance methodologies
• Ability to identify, assess, and mitigate cybersecurity risks and vulnerabilities
• Ability to interpret and apply security policies, standards, and procedures
• Strong analytical, organizational, and problem-solving skills
• Ability to evaluate security control effectiveness and recommend improvements
• Strong written and verbal communication skills
• Ability to communicate effectively with both technical and non-technical audiences
• Ability to prepare and review security documentation, assessments, and reports
• Ability to lead cybersecurity efforts and coordinate activities among multiple stakeholders
• Ability to obtain and maintain a government security clearance if required
• Must meet applicable DoD 8140 workforce qualification requirements if required by contract

• Master's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related discipline
• Experience supporting Department of Defense or Federal Government programs
• Experience leading RMF and Assessment & Authorization activities
• Experience developing and maintaining cybersecurity documentation and authorization packages
• Experience supporting continuous monitoring and vulnerability management programs
• Experience conducting cybersecurity assessments, inspections, audits, and compliance reviews
• Experience mentoring cybersecurity and information assurance professionals

• Support critical government and customer missions through strong cybersecurity leadership
• Play a key role in protecting information systems, networks, and sensitive data
• Lead compliance, authorization, and risk management initiatives that impact mission success
• Collaborate with experienced cybersecurity, engineering, and technology professionals
• Expand your expertise across multiple cybersecurity disciplines
• Mentor and support the development of cybersecurity talent
• Build a rewarding career in a collaborative and mission-focused environment

• Professional office and technical work environments
• Work may be performed at company facilities, customer locations, or designated project sites as needed
• Regular use of computers, cybersecurity tools, and communication systems
• Frequent collaboration with engineers, administrators, program leaders, customers, and stakeholders

• Medical Insurance
• Dental Insurance
• Vision Insurance

• Paid Holidays

• Additional company-sponsored benefits

If you're an experienced cybersecurity professional looking to lead security initiatives, support mission-critical systems, and help organizations manage risk and maintain compliance, we encourage you to apply.

Join PEMCCO and help protect the systems, networks, and information that support mission success.

PEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.