Cybersecurity Specialist

ManTech; United States; Remote; USD 80,000 - 120,000; Full time

Job summary

An innovative firm is looking for a dedicated Cybersecurity Specialist to enhance their security posture. In this remote role, you'll leverage your extensive experience with NIST standards to manage risks and vulnerabilities effectively. Your expertise will be crucial in refining processes, preparing Security Control Assessments, and ensuring compliance with various frameworks. This position offers the opportunity to make a significant impact while working independently and collaborating with cross-functional teams. If you have a passion for cybersecurity and a desire to protect critical information, this role is perfect for you.

Qualifications

• 10+ years of experience with NIST SP 800-37 and related policies.
• Experience with system security, risk management, and third-party management.

Responsibilities

• Serve as a Subject Matter Expert on Cybersecurity projects.
• Implement processes to assess systems and track vulnerabilities.

Skills

NIST SP 800-37 Risk Management Framework

System Security Plans (SSPs)

Cyber Security Assessment and Management (CSAM)

Risk Management

Information Assurance

Third-party Management

Risk Remediation

Tools

Qmulos

Job description

Job Title: Cybersecurity Specialist

ManTech is seeking a motivated, career and customer-oriented Cybersecurity Specialist to join our team. This position is currently remote, with potential changes at the customer's discretion.

Responsibilities include but are not limited to:

1. Serving as a Subject Matter Expert on projects related to Cybersecurity or enterprise risk management.
2. Refining and implementing processes and methodologies to assess internal and external/third-party systems, tracking shortcomings and weaknesses through Plans of Action and Milestones (POA&Ms), and supporting risk-based decision making.
3. Preparing and maintaining current POA&Ms, identifying vulnerabilities, proposing mitigations, estimating costs, and tracking mitigation progress.
4. Initiating POA&M processes, maintaining dashboards, producing reports, ensuring data quality, reviewing artifacts, identifying overdue POA&Ms, conducting root cause analysis, and coordinating with relevant teams for risk acceptance and configuration updates.
5. Supporting ongoing tasks related to the Risk Management Framework (RMF), including Security Control Assessments, Assessments and Authorizations, and continuous monitoring.

Minimum Qualifications:

• 10+ years of experience with NIST SP 800-37 Risk Management Framework, 800-60, 800-53, 800-53A, FIPS199, FISMA, FedRAMP, and related policies.
• Experience with system/application security, risk management, information assurance, third-party management, and risk remediation.
• Experience developing and maintaining System Security Plans (SSPs), POA&Ms, and executive briefings.
• Ability to work independently under general supervision.

Preferred Qualifications:

• 10+ years as a Subject Matter Expert with NIST SP 800-37 and related guidance.
• 5+ years using the Cyber Security Assessment and Management (CSAM) tool.
• 5+ years developing SSPs, POA&Ms, and executive briefings.
• 2+ years of experience with Qmulos.

Clearance Requirements:

Must be a U.S. Citizen and able to obtain a Public Trust clearance prior to starting.

Physical Requirements:

Ability to remain stationary for 50% of the time, with occasional movement within the office for accessing files, equipment, or communicating via various methods, including delivering presentations.