Information Security Risk Specialist-Junior

Apex Systems; Patuxent Highland (MD); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Medical Insurance

401K with match

HSA

Employee discounts

Certification discounts

On-demand training

Job summary

Everforth Apex is seeking an Information Security Risk Specialist-Junior to support RMF-based risk management for military clients. The role involves collecting technical and personnel details to identify cyber risks and develop mitigation plans, working with RMF artifacts and security controls.

The position emphasizes hands-on experience with RMF processes, SCAP-based vulnerability management, and collaboration with military leaders to improve cyber resilience.

Qualifications

• 3+ years leading RMF with full lifecycle implementation and ownership of POA&Ms.
• Experience with eMASS/ACAS, scan result analysis, inventories, and vulnerability management.

Responsibilities

• Lead and execute RMF across all steps and ensure SOP compliance.
• Use eMASS and ACAS to analyze scans and manage inventories and vulnerabilities.
• Review and enforce STIGs using STIG Viewer.
• Develop SAPs and SARs per RMF requirements.
• Manage Ports, Protocols, and Services Management (PPSM).
• Operate in a structured, compliance-driven environment with minimal supervision.

Skills

Risk management

Security governance

Policy comprehension

Structured environment

Education

Bachelor's degree in Cybersecurity

Tools

eMASS

ACAS

STIG Viewer

HBSS

SCAP

POA&Ms management

Job description

Job#: 3044399

Job Description:

Information Security Risk Specialist-Junior

Location: Patuxent River, Maryland (4 days Onsite)

Clearance: Active Secret Required; Top Secret Preferred

Role Overview

Cyber threats are a constant and evolving challenge. As an Information Security Risk Specialist, you will help break down complex threats into manageable plans of action. You will assist military leaders in discovering their cyber risks, understanding applicable policies, and developing mitigation plans by gathering technical and personnel details from subject matter experts. This role provides an opportunity to build experience in a strategic information security capacity while developing skills in cybersecurity.

Key Responsibilities

• Lead and execute the Risk Management Framework (RMF), including full lifecycle implementation across all RMF steps, application of SOPs and cybersecurity directives, and ownership of Plans of Action and Milestones (POA&Ms).
• Utilize eMASS and ACAS for analysis and prioritization of scan results, development and maintenance of hardware and software inventories, and vulnerability management using SCAP, VRAM, and HBSS.
• Review, interpret, and enforce Security Technical Implementation Guides (STIGs) using STIG Viewer.
• Develop and support Security Assessment Plans (SAPs) and Security Assessment Reports (SARs) in alignment with RMF requirements.
• Manage Ports, Protocols, and Services Management (PPSM).
• Operate in a structured and compliance-driven environment, executing established cybersecurity processes with minimal supervision.

Required Qualifications

• 3+ years of experience leading and executing the Risk Management Framework (RMF), including full lifecycle implementation, application of SOPs and cybersecurity directives, and ownership of Plans of Action and Milestones (POA&Ms).
• Experience with eMASS and ACAS, including analysis and prioritization of scan results, development and maintenance of hardware and software inventories, and vulnerability management using SCAP, VRAM and HBSS.
• Experience reviewing, interpreting, and enforcing Security Technical Implementation Guides (STIGs) using STIG Viewer.
• Experience developing and supporting Security Assessment Plans (SAPs) and Security Assessment Reports (SARs).
• Knowledge of Ports, Protocols, and Services Management (PPSM).
• Ability to operate in a structured and compliance-driven environment while executing established cybersecurity processes with minimal supervision.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering.
• DoD 8140 or 752- Cyber Policy and Strategy Planner Certification.

Preferred Qualifications

• Master’s degree.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.