Information Security Specialist with Security Clearance

Sherpa 6, Inc.; Springfield (VA); On-site; USD 105,000 - 125,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Job summary

Sherpa 6 is seeking a cybersecurity professional to manage vulnerabilities and monitor security across enterprise systems. You will implement patches, enforce configurations, and analyze logs from endpoints, servers, identity systems, and cloud services to detect and mitigate threats.

The role requires 3–5 years in information security, experience with Microsoft security tools, and familiarity with STIGS or CIS Benchmarks.

Qualifications

• Bachelor’s degree in computer science, IT, cybersecurity or a related field.
• 3–5 years of experience in information security or cybersecurity operations.
• Experience with Microsoft security technologies (Defender, Intune, Purview).
• Understanding of vulnerability management and incident response.
• Experience with log aggregation and SIEM tools.
• Experience securing Windows and Linux in an enterprise environment.
• Familiarity with STIGS or CIS Benchmarks.

Responsibilities

• Manage system vulnerabilities, including scanning, prioritization, and remediation.
• Support patching and configuration enforcement through endpoint management solutions.
• Monitor information systems; review audit logs and mitigate anomalies.
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services.
• Tune alerting and automated response for security events.
• Perform incident response and reporting for cybersecurity events.
• Maintain POA&M and track remediation to closure.
• Keep security documentation current and audit-ready.
• Develop and maintain security policies, standards, and controls.
• Review security impact of system changes in change control processes.
• Recommend and implement security configurations across Microsoft 365, endpoints, and identity platforms.
• Monitor user activity and support investigations into insider threat or policy violations.
• Run security awareness initiatives, including phishing simulations and training.
• Prepare reports on vulnerabilities, incidents, and overall security posture.

Skills

Vulnerability management

Log analysis

Incident response

Security monitoring

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

Microsoft Defender

Microsoft Intune

Microsoft Purview

SIEM tools

Endpoint management solutions

Job description

Travel Requirement: Up to 10% Security Clearance: Must be able to obtain & maintain Secret clearance Citizenship: US Citizenship required

Responsibilities

Manage system vulnerabilities, including scanning, prioritization, and remediation.

• Support patching and configuration enforcement through endpoint management solutions
• Provide continuous monitoring of information systems, ensuring audit logs are collected, reviewed, and anomalous activity is identified and mitigated.
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services.
• Configure and tune alerting and automated response capabilities for security events.
• Perform incident response and reporting for cybersecurity events including malware, phishing, unauthorized access, and data exfiltration.
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Ensure all system security documentation (e.g., SSPs, baselines, policies, procedures) is current and audit-ready.
• Assist in development and maintenance of security policies, standards, and technical controls.
• Review and assess security impact of system changes as part of change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms.
• Conduct user activity monitoring and support investigations related to potential insider threat or policy violations.
• Run security awareness initiatives, including phishing simulations and training activities.
• Prepare reports on the status of vulnerabilities, incidents, and overall security posture.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field
• 3-5 years of experience in information security or cybersecurity operations
• Experience with Microsoft security technologies, including Microsoft Defender, Microsoft Intune, and Microsoft Purview.
• In depth understanding of software and system vulnerability management.
• Experience with log aggregation, SIEM tools, or advanced threat detection
• Experience with managing the security of Windows and Linux systems in an Enterprise environment.
• Experience implementing and maintaining STIGS or CIS Benchmarks

Preferred Experience

• Industry certifications such as Security+, CISSP, or equivalent
• Experience supporting CMMC/NIST 800-171 or NIST 800-53/RMF
• Familiarity with endpoint management and configuration baselines across enterprise systems
• Experience working in a regulated environment handling Controlled Unclassified Information (CUI)
• Experience with managing MacOS systems in an Enterprise environment
• Experience maintaining security controls and working on a change control board.
• Experience leveraging AI tools in an enterprise setting.
• Experience as a COMSEC custodian

About Sherpa 6

At Sherpa 6 we love to solve problems and provide the best solutions for our customers. Our approach to a problem is to find a user-focused and design-driven solution that is simple yet functional and effective. We are a group of enthusiastic forward-thinkers who are excited to build amazing solutions with bleeding-edge technology. We hire people who are forward thinkers, passionate about what they do, love to collaborate and want to constantly learn. We enjoy what we do and we're not afraid to put the extra effort in to accomplish the mission; call us Sherpas. As a Service-Disabled Veteran Owned Small Business, we know what it means to serve. We have made it our mission to be the leaders in solutions that protect and give our Warfighters the edge they need when put into harm's way.

Background Screening/Check/Investigation: Successful completion of a background screening/check/investigation will/may be required as a condition of hire.

ADA: Sherpa 6 will make reasonable accommodations in compliance with the Americans with Disabilities Act 1990

EEO/AA: Sherpa 6 does not discriminate based on race, color, national origin, sex, religion age, disability, sexual orientation, gender identity, veteran status, height, weight, or marital status in employment or the provision of services and is an equal access/opportunity/affirmative action employer.

Benefits

Benefits: We offer a competitive benefits package, covering the cost of medical for you and your family; we also offer dental, vision, health and wellness benefits and a generous retirement savings plan. We believe that our employees can manage their workload and their personal life, therefore we extend a generous PTO policy. This allows our employees to balance their lives as they see fit.

Salary

Salary Range: The proposed salary range is reflective across all Sherpa 6 locations, years of experience and skill levels. Salary negotiations will be based on a host of factors including but not limited to your geographic location, prior experience, relevant skills, education, and certifications. Salary Description $105,000-$125,000