Information Security Specialist

PEMCCO; Washington (District of Columbia); On-site; USD 69,000 - 102,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Paid Time Off

Paid Holidays

Employee Assistance Program

Company Benefits

Job summary

PEMCCO is seeking an Information Security Specialist to support security controls, RMF, and continuous monitoring for government systems in Washington, DC. You will work with engineers, system administrators, software developers, and stakeholders to ensure compliance with cybersecurity requirements and protect sensitive data.

This role offers opportunities to expand expertise in vulnerability management, security assessments, and RMF activities while contributing to mission-critical programs and

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field
• Three years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field
• Knowledge of NIST, DoD, and federal cybersecurity requirements
• Ability to obtain and maintain a government security clearance if required

Responsibilities

• Support the implementation and maintenance of information security controls and safeguards
• Assist with RMF and A&A activities
• Review system security documentation for accuracy and compliance
• Conduct security assessments, vulnerability scans, and risk analyses
• Coordinate with engineers and stakeholders to ensure security requirements are integrated throughout the system lifecycle
• Maintain security records, reports, and compliance documentation
• Support cybersecurity audits, inspections, and authorization activities

Skills

Analytical skills

Communication skills

Independent work

Education

Bachelor's degree in Cybersecurity/Information Assurance/Information Systems/IT/CS/Engineering

Master's degree in Cybersecurity/Information Assurance/Information Systems (preferred)

Tools

RMF tools

Job description

Pay: $44.85-$74.00 hourly, depending on experience

Benefits: Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits

Security Clearance: Ability to obtain and maintain a government security clearance if required

Are you passionate about cybersecurity, compliance, and protecting critical systems from evolving threats?

PEMCCO is seeking an Information Security Specialist to support the security, compliance, and continuous monitoring of information systems that support critical government missions. This role is ideal for a cybersecurity professional who enjoys vulnerability management, security assessments, Risk Management Framework (RMF) activities, and helping organizations maintain strong security postures in complex environments.

This opportunity is a strong fit for candidates with experience in information assurance, information security, cybersecurity, system security, RMF, compliance, vulnerability management, continuous monitoring, or cybersecurity operations.

About PEMCCO

PEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve mission success. We offer opportunities to work on impactful projects, collaborate with experienced teams, and contribute to innovative solutions that support critical government operations.

Job Overview

As an Information Security Specialist, you will support the implementation, assessment, and maintenance of security controls that protect information systems, networks, and sensitive data. You will work closely with engineers, system administrators, software developers, and stakeholders to ensure systems comply with cybersecurity requirements and are protected against emerging threats.

This role offers an excellent opportunity to expand your cybersecurity expertise while supporting mission-critical systems, compliance initiatives, and security programs.

What You'll Do

• Support the implementation and maintenance of information security controls and safeguards
• Assist with Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities
• Review system security documentation for accuracy, completeness, and compliance
• Conduct security assessments, vulnerability scans, and risk analyses
• Identify, document, track, and support remediation of security vulnerabilities and deficiencies
• Support the development and maintenance of System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and related security documentation
• Monitor compliance with applicable cybersecurity policies, standards, and regulations
• Support continuous monitoring activities and security posture assessments
• Coordinate with engineers, administrators, developers, and stakeholders to ensure security requirements are incorporated throughout the system lifecycle
• Assist with incident response, security investigations, and remediation activities
• Maintain security records, reports, and compliance documentation
• Support cybersecurity audits, inspections, and authorization activities

What You Bring

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field
• Three (3) years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field
• Knowledge of information assurance and cybersecurity principles
• Knowledge of Risk Management Framework (RMF) processes and security compliance requirements
• Knowledge of security controls, vulnerability management, and risk assessment methodologies
• Knowledge of NIST, DoD, and federal cybersecurity requirements
• Ability to identify, analyze, and document security risks and vulnerabilities
• Ability to interpret and apply security policies, standards, and procedures
• Strong analytical and problem-solving skills
• Strong written and verbal communication skills
• Ability to prepare and maintain security documentation
• Ability to work independently and collaboratively within a multidisciplinary team
• Proficiency with standard office software and cybersecurity tools
• Ability to obtain and maintain a government security clearance if required
• Must meet applicable DoD 8140 workforce qualification requirements if required by contract

Preferred Experience

• Master's degree in Cybersecurity, Information Assurance, Information Systems, or a related technical discipline
• Experience supporting Department of Defense or Federal Government programs
• Experience supporting RMF and Assessment & Authorization activities
• Experience developing and maintaining security documentation
• Experience supporting vulnerability management, compliance, or continuous monitoring initiatives
• Experience supporting cybersecurity assessments, audits, or accreditation activities

Why Join PEMCCO?

• Support critical government and customer missions through strong cybersecurity practices
• Help protect information systems, networks, and sensitive data from evolving cyber threats
• Work alongside experienced cybersecurity, engineering, and technology professionals
• Gain experience with RMF, compliance, vulnerability management, and security assessments
• Expand your expertise across multiple cybersecurity disciplines
• Contribute to meaningful projects that directly support mission success
• Build a rewarding career in a collaborative and mission-focused environment

Work Environment

• Professional office and technical work environments
• Work may be performed at company facilities, customer locations, or designated project sites as needed
• Regular use of computers, cybersecurity tools, and communication systems
• Frequent collaboration with engineers, administrators, developers, customers, and stakeholders

Benefits

• Medical Insurance
• Dental Insurance
• Vision Insurance
• Paid Time Off
• Paid Holidays
• Employee Assistance Program
• Additional company-sponsored benefits

Equal Opportunity Employer

PEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.