Federal Security Specialist - Enterprise & Cloud

Lexical Intelligence; Bethesda (MD); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

Health and dental insurance for you &/

Retirement and HSA

Paid federal holidays (11)

Job summary

Lexical Intelligence is seeking Security Specialists I–III to support federal security programs at NIH/NLM in Bethesda, MD. You will work on ATO lifecycle, SSP development, vulnerability management, and incident response across on-prem and cloud environments, collaborating with DevOps, developers, data scientists, and clinical informatics experts.

Ideal candidates have strong knowledge of FISMA/NIST, hands-on practice with vulnerability tools, and experience communicating security concepts to

Qualifications

• Experience with Federal Information Security Modernization Act (FISMA) and related compliance frameworks.
• Experience supporting or maintaining Authority to Operate (ATO) documentation and SSPs.
• Strong ability to communicate security concepts to non-technical audiences.

Responsibilities

• Support or lead cybersecurity and risk management activities across NLM enterprise systems and applications.
• Assist in ATO documentation lifecycle and SSP updates.
• Lead vulnerability assessments, incident response, and remediation in line with government policies.
• Coordinate with federal security officials and cross-functional teams on security posture.

Skills

Federal information security

NIST SP 800-53/64/88/171

AO/SSP processes

Cloud security (AWS/GCP/Azure)

Incident response

Vulnerability scanning

Education

Bachelor's degree in Computer Science, Information Security, IT, or related field

Advanced degree preferred

Tools

Tenable Security Center

Nessus

Prowler

Checkmarx

OWASP tools

Job description

Lexical Intelligence is seeking Security Specialists I–III to support federal security programs at NIH/NLM in Bethesda, MD. You will work on ATO lifecycle, SSP development, vulnerability management, and incident response across on-prem and cloud environments, collaborating with DevOps, developers, data scientists, and clinical informatics experts.

Ideal candidates have strong knowledge of FISMA/NIST, hands-on practice with vulnerability tools, and experience communicating security concepts to