Cybersecurity Specialist

Interactive Process Technology LLC; Bath Township (OH); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

IPT Associates (IPTA) in Ohio is seeking a Cybersecurity Specialist to join our team at Wright-Patterson AFB. You will implement safeguards across enterprise, cloud, network, application, and data environments, including firewalls, IDS/IPS, SIEM, and endpoint protections, while supporting RMF and Authority to Operate activities.

You will develop, review, and maintain artifacts, perform vulnerability scans and security testing, analyze findings, and coordinate remediation with system owners and

Responsabilités

• Implement and maintain cybersecurity safeguards for enterprise, cloud, network, application, and data environments, including firewalls, IDS/IPS, SIEM, endpoint protections, and Defensive Cyber Operations platforms.
• Support RMF lifecycle and Authority to Operate processes, including system categorization, control selection/implementation, assessment prep, authorization packages, and continuous monitoring.
• Develop, maintain, and review RMF artifacts such as System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, and architecture documentation.
• Conduct security control assessments, configuration reviews, vulnerability scans, software/container security testing, log analysis, and other technical evaluations.
• Analyze findings, determine risk/mission impact, recommend remediation, and track vulnerabilities through closure with system owners and stakeholders.
• Apply security engineering principles across the lifecycle: requirements analysis, secure architecture/design reviews, control implementation, system hardening, STIG validation, and testing.
• Monitor alerts, events, threat information, and system activity; investigate incidents; preserve evidence; support containment/recovery and root-cause analysis.
• Assess compliance with DoW, DoD/AF, NIST, CNSS, FISMA, and organizational cybersecurity policies and guidance.
• Support identity, credential, and access management capabilities including MFA, lifecycle, federation, SSO, privileged access, and least-privilege enforcement.
• Evaluate cloud/container environments for secure configuration across AWS/Azure/Google Cloud; advise on secure migration and deployment practices.
• Use and support cybersecurity systems such as eMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting.
• Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation.
• Prepare vulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, and status updates for technical and leadership audiences.
• Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks and training.

Description du poste

Cybersecurity Specialist

Wright-Patterson AFB

At IPT Associates (IPTA), we enjoy solving real-world problems with technology. We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it’s a government or business organization, we focus on understanding the need and building something that works.

Our Team

At IPTA, everything starts with our people. We're big believers that when you invest in your team, great things happen. That's why we encourage learning, growth, and trying new things-even if you don't have all the answers yet.

Our culture is rooted in fierce determination, fearless integrity, and passionate service-but we also like to keep things collaborative, supportive, and down-to-earth.

We're looking for people who:

• Are curious and excited about technology
• Like solving problems and figuring things out
• Can take initiative but also enjoy working with a team
• Want to keep learning, growing, and challenging themselves

If you're someone who's eager to jump in, learn something new, and make an impact—you'll fit right in here.

This position is contingent upon contract award and the actual job description may vary based on specific contract requirements and organizational needs.

Responsibilities:

• Implement and maintain cybersecurity safeguards for enterprise, cloud, network, application, and data environments, including firewalls, intrusion detection and prevention systems, security information and event management tools, endpoint protections, and Defensive Cyber Operations platforms.
• Support the full Risk Management Framework lifecycle and Authority to Operate process, including system categorization, control selection and implementation, assessment preparation, authorization package development, and continuous monitoring.
• Develop, maintain, and review RMF artifacts such as System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, architecture documentation, and authorization status reports.
• Conduct security control assessments, configuration reviews, vulnerability scans, software and container security testing, log analysis, and other technical evaluations using approved tools, processes, and environments.
• Analyze findings, determine risk and mission impact, recommend practical remediation, and track vulnerabilities and corrective actions through closure in coordination with system owners, administrators, developers, ISSMs, assessors, and authorizing officials.
• Apply security engineering principles throughout the system lifecycle, including security requirements analysis, secure architecture and design reviews, control implementation, system hardening, STIG validation, and security testing.
• Monitor and analyze alerts, events, threat information, and system activity; investigate suspected incidents; preserve relevant evidence; support containment, eradication, recovery, root-cause analysis, and after-action reporting.
• Assess compliance with DoW, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational cybersecurity policies, standards, and technical guidance.
• Support identity, credential, and access management capabilities, including multifactor authentication, identity lifecycle management, federation, single sign-on, privileged access, and least-privilege enforcement.
• Evaluate cloud and containerized environments for secure configuration and compliance across applicable AWS, Azure, or Google Cloud services, and advise engineering teams on secure migration and deployment practices.
• Use and support cybersecurity systems such as eMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting tools.
• Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation capabilities.
• Prepare accurate vulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, procedures, and status updates for technical and leadership audiences.
• Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks, standards, knowledge articles, training, and security awareness activities.

Requirements:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalent relevant education, training, and experience may be considered.
• Relevant experience supporting cybersecurity operations, security engineering, RMF, system authorization, assessment and compliance, vulnerability management, or incident response in complex enterprise environments.
• Working knowledge of the NIST Risk Management Framework and security guidance, including NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-160, CNSSI 1253, DoDI 8510.01, and applicable DoW and Air Force cybersecurity requirements.
• Experience developing or reviewing authorization artifacts, assessing security controls, documenting evidence, managing POA&Ms, and supporting continuous monitoring activities.
• Hands-on knowledge of vulnerability scanning, secure configuration assessment, STIGs, patch and remediation tracking, network and endpoint security, log analysis, and cybersecurity incident handling.
• Familiarity with eMASS and one or more SIEM, vulnerability management, endpoint security, cloud security, container security, asset discovery, or compliance automation platforms.
• Understanding of TCP/IP networking, common operating systems, identity and access management, multifactor authentication, encryption, secure system administration, and defense-in-depth principles.
• Ability to analyze technical findings, assess risk, prioritize remediation, preserve evidence when required, and communicate clear recommendations to technical and nontechnical stakeholders.
• Strong technical writing, collaboration, analytical, and problem-solving skills, with the ability to produce accurate reports and work effectively across multidisciplinary Government and contractor teams.
• Current Security+ certificate (CISSP or equivalent preferred), in accordance with DoDM 8140.03, plus required operating system or platform credential.
• Active Secret security clearance required; ability to obtain and maintain additional access or a higher-level clearance when required by the assigned program.
• Ability to obtain and maintain required Common Access Card, system access, and annual security, privacy, CUI, and role-based training requirements.

IPTA is an Equal Opportunity Employer. All employment decisions are based on individual merit, including qualifications, experience, performance, and business needs, consistent with applicable federal laws and federal contracting requirements. IPTA provides equal opportunity and utilizes merit-based principles to make employment-related decisions.

#clearance