Federal Security Specialist: FedRAMP, NIST & DevSecOps

BTI

Washington (District of Columbia)

On-site

USD 150,000 - 190,000

Full time

6 days ago

Be an early applicant

Application generator

Get a reply from this employer — a resume and cover letter tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Business Technology Integrators (BTI) seeks a Security Specialist to establish and monitor security posture in alignment with NIST SP 800-53 (Moderate), FISMA, and FedRAMP. The role develops SSP/SAR/POA&M, integrates SAST/DAST/IAST into CI/CD, and coordinates remediation of vulnerabilities to protect FTI and sensitive data.

You will work with cross-functional teams to ensure secure features and AI enablement tools comply with controls and authorization requirements.

Qualifications

Undergraduate degree in Cybersecurity, CS, or Information Systems.
CISSP, CISM, or CCS(CP) or equivalent security certs.
8+ years in information security with FISMA/FedRAMP work.
Experience SSP/SAR/POA&M development per NIST SP 800-53.
Experience integrating SAST/DAST/IAST in DevSecOps pipelines.
Experience with FTI protection per IRS Publication 1075.
Cloud security in AWS and multi-environment architectures.
Ability to assess AI tool security and data handling.

Responsibilities

Support security posture establishment, operation, and monitoring per NIST/FedRAMP.
Develop and maintain SSP, SAR, and POA&M tracking; plan contingencies.
Integrate scanning tools into CI/CD; review and remediate findings.
Coordinate penetration testing and document findings and mitigations.
Protect FTI and sensitive data; enforce encryption and access controls.
Support breach notification, logging standards, and incident testing.
Collaborate with dev, infra, and AI teams to assess security of new features.