Cybersecurity Specialist

lockcoretech; San Diego (CA); Ibrido; USD 80.000 - 105.000; Tempo pieno

Descrizione del lavoro

Locked Core Tech is seeking a Cybersecurity Specialist to support the Naval Medical Center San Diego. The role focuses on cybersecurity assessments, vulnerability management, system hardening, patching, and RMF across a diverse enterprise IT environment.

Remote CONUS work with occasional travel may be required to meet contract needs. Ideal candidates will have DoD cybersecurity operations experience, IA expertise, and compliance with NIST/FIPS standards.

Competenze

• Five years in DoD cybersecurity/IA.
• CISSP or equivalent certification.
• Able to qualify for IAT Level II per DoD 8570.01-M and 8140.

Mansioni

• Perform cybersecurity scanning and vulnerability assessments.
• Identify and remediate vulnerabilities from scans.
• Apply patches and configuration changes to stay compliant.
• Support RMF documentation and authorization packages.
• Coordinate remediation and accreditation activities.
• Document risk decisions and corrective actions.
• Support DoD RMF across the system lifecycle.
• Provide RMF services for IT/IS subject to FISMA.

Conoscenze

CISSP

DoD 8570

RMF

NIST SP 800-37

Threat assessment

Vulnerability mgmt

IA principles

Communication skills

DoD architecture

Descrizione del lavoro

Locked Core Tech is a federally recognized SBA Disadvantaged and 8(a) Certified Small Business that specializes in IT security, innovative technology, and healthcare services. The company provides tailored, high-performance solutions to federal, state, and local government clients as well as private enterprises.

The company delivers comprehensive turnkey solutions from procurement through sustainment, working with leading technology manufacturers to develop customized client solutions. Locked Core Tech values integrity, compassion, collaboration, diversity, and excellence, offering employees competitive compensation and opportunities for professional growth in an inclusive environment.

Cybersecurity Specialist

Location: Remote CONUS (Support of Naval Medical Center San Diego)
Job Type: Full-Time
Certification Requirement: CISSP or DoD-approved equivalent certification required. Ability to qualify for and maintain an IAT Level II position.
Travel: Occasional travel may be required based on contract needs

Position Summary

We are seeking an experienced Cybersecurity Specialist to support the Information Management Department (IMD) at Naval Medical Center San Diego (NMCSD). This role is responsible for conducting cybersecurity assessments, vulnerability management, system hardening, patch management, and Risk Management Framework (RMF) activities across a diverse enterprise IT environment.

The ideal candidate will possess extensive experience in DoD cybersecurity operations, Information Assurance (IA), vulnerability remediation, and federal compliance standards. This position plays a critical role in protecting mission-essential information systems and ensuring compliance with DoD, NIST, FIPS, and federal cybersecurity requirements.

Work Location

This is a fully remote position . The selected candidate must maintain a secure and professional home office environment and have reliable high-speed internet access. The employee must be available during normal business hours and capable of supporting government and customer requirements through virtual collaboration tools. Occasional travel may be required for meetings, training, audits, or other mission-related activities.

Primary Responsibilities

Cybersecurity Operations

• Perform cybersecurity scanning and vulnerability assessments on networked devices.
• Identify, analyze, and remediate vulnerabilities discovered through security scans and assessments.
• Apply security patches, updates, and configuration changes to maintain compliance and mitigate risk.
• Monitor and support security compliance initiatives across enterprise environments.
• Provide RMF services for IT and Information Systems (IS) subject to FISMA requirements.
• Implement and maintain NIST SP 800-37 Risk Management Framework processes throughout the system lifecycle.
• Continue and support RMF efforts already initiated by the customer or other entities.
• Develop and maintain RMF documentation, security controls, and authorization packages.
• Coordinate remediation efforts and support system accreditation and authorization activities.

Vulnerability Management

• Follow established issue resolution processes for identified vulnerabilities and security findings.
• Document risk-based decisions, risk acceptance actions, corrective actions, and remediation efforts.
• Create and maintain Plans of Action and Milestones (POA&M).
• Conduct validation testing and security retesting following remediation activities.
• Provide documentation and audit trails to support RMF and compliance efforts.

Infrastructure Security

• Scan, secure, and patch:
• Windows Servers
• Windows Workstations
• Apple macOS Systems
• VMware Infrastructure
• Cisco and Brocade Network Switches
• HP and Ricoh Printers
• EMC and Nimble SAN Storage Systems
• Wired and Wireless Network Devices
• Other Enterprise-Attached Devices

Security Consulting & Program Support

• Serve as a cybersecurity subject matter expert (SME) to technical and program teams.
• Conduct security inspections, assessments, surveys, and assistance visits.
• Collaborate with infrastructure, networking, and systems teams to strengthen enterprise security posture.
• Support security planning, policy implementation, and cybersecurity program evaluation.
• Communicate technical risks and recommendations to stakeholders and leadership.

Required Qualifications

• Minimum of five (5) years of experience applying cybersecurity or Information Assurance (IA) principles within a DoD environment.
• CISSP certification or DoD-approved equivalent certification.
• Ability to qualify for and maintain an IAT Level II position in accordance with DoD 8570.01-M and DoD 8140 requirements.
• Demonstrated expert-level knowledge of DoD and DHA cybersecurity architecture, Information Assurance principles, and enterprise security operations.
• Proven ability to serve as a cybersecurity Subject Matter Expert (SME), providing technical guidance and recommendations to stakeholders, system owners, and leadership.
• Demonstrated experience supporting security accreditation, authorization, and certification processes within federal or DoD environments.
• Experience integrating cybersecurity requirements with broader IT, infrastructure, networking, and systems operations.
• Demonstrated expertise with:
• NIST Cybersecurity Framework
• FISMA compliance requirements
• DoD cybersecurity policies and procedures
• Vulnerability management and remediation
• Security accreditation and authorization processes
• Information Security (IS) program management
• Demonstrated ability to coordinate and conduct security surveys, inspections, and assistance visits.
• Strong oral and written communication skills.

Preferred Qualifications

• Experience supporting Navy, Defense Health Agency (DHA), or other DoD healthcare environments.
• Experience supporting DHA information systems, cybersecurity programs, and enterprise IT environments.
• Experience with enterprise vulnerability scanning and remediation tools.
• Experience supporting Authority to Operate (ATO) packages.
• Experience serving in a cybersecurity leadership, lead analyst, or SME capacity.
• Experience advising system owners, program managers, and senior leadership on cybersecurity risk and compliance matters.
• Knowledge of cybersecurity auditing, compliance reviews, and inspections.
• Familiarity with enterprise storage, virtualization, and networking technologies.
• Active security clearance or ability to obtain one, if required by the program.

Knowledge, Skills, and Abilities

• Expert understanding of DoD and DHA IT architectures, cybersecurity requirements, Information Assurance principles, and enterprise infrastructure protection strategies.
• Expert knowledge of system certification, accreditation, authorization, and RMF processes.
• Strong knowledge of federal cybersecurity regulations, standards, and best practices.
• Ability to evaluate, plan, direct, and support Information Security programs for federal information systems.
• Ability to integrate cybersecurity requirements with broader IT and infrastructure operations.
• Ability to analyze emerging technologies and assess their impact on cybersecurity, compliance, and business operations.
• Ability to plan, coordinate, and manage cybersecurity initiatives and projects.
• Excellent verbal and written communication skills.
• Strong analytical and problem-solving abilities.
• Ability to communicate technical concepts and risks to both technical and non-technical audiences.
• Ability to independently manage workload and meet project deadlines in a remote environment.

Physical Requirements

• Prolonged periods of sitting and working at a computer workstation.
• Frequent use of a computer, keyboard, mouse, telephone, and video conferencing tools.
• Ability to read and analyze technical documentation, reports, diagrams, and security findings.
• Ability to communicate effectively in person, over the phone, and through virtual collaboration platforms.
• May occasionally be required to stand, walk, bend, reach, and lift or carry items weighing up to 20 pounds.
• Ability to travel occasionally to customer or government facilities as required.
• Ability to maintain focus and efficiently perform detailed analytical work for extended periods.

The pay range for this role is:

80,000 - 105,000 USD per year (Remote (United States))