Federal Security Specialist: FedRAMP, NIST & DevSecOps

BTI; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Business Technology Integrators (BTI) seeks a Security Specialist to establish and monitor security posture in alignment with NIST SP 800-53 (Moderate), FISMA, and FedRAMP. The role develops SSP/SAR/POA&M, integrates SAST/DAST/IAST into CI/CD, and coordinates remediation of vulnerabilities to protect FTI and sensitive data.

You will work with cross-functional teams to ensure secure features and AI enablement tools comply with controls and authorization requirements.

Qualifications

• Undergraduate degree in Cybersecurity, CS, or Information Systems.
• CISSP, CISM, or CCS(CP) or equivalent security certs.
• 8+ years in information security with FISMA/FedRAMP work.
• Experience SSP/SAR/POA&M development per NIST SP 800-53.
• Experience integrating SAST/DAST/IAST in DevSecOps pipelines.
• Experience with FTI protection per IRS Publication 1075.
• Cloud security in AWS and multi-environment architectures.
• Ability to assess AI tool security and data handling.

Responsibilities

• Support security posture establishment, operation, and monitoring per NIST/FedRAMP.
• Develop and maintain SSP, SAR, and POA&M tracking; plan contingencies.
• Integrate scanning tools into CI/CD; review and remediate findings.
• Coordinate penetration testing and document findings and mitigations.
• Protect FTI and sensitive data; enforce encryption and access controls.
• Support breach notification, logging standards, and incident testing.
• Collaborate with dev, infra, and AI teams to assess security of new features.

Skills

NIST SP 800-53

DevSecOps CI/CD

AWS Security

FTI protection

Audit logging

Incident response

Technical writing

Education

Bachelors in Cybersecurity / CS

Tools

Tenable

Trend Micro

AWS Security Tools

Security Hub / GuardDuty

Snyk.io

Job description

Business Technology Integrators (BTI) seeks a Security Specialist to establish and monitor security posture in alignment with NIST SP 800-53 (Moderate), FISMA, and FedRAMP. The role develops SSP/SAR/POA&M, integrates SAST/DAST/IAST into CI/CD, and coordinates remediation of vulnerabilities to protect FTI and sensitive data.

You will work with cross-functional teams to ensure secure features and AI enablement tools comply with controls and authorization requirements.