Information Security Specialists (Intermediate/Senior)

Koitecc Solutions; Orlando (FL); On-site; USD 85,000 - 110,000; Full time

Job summary

Koitecc Solutions Information Security Specialist (Intermediate/Senior) role focuses on protecting enterprise information systems by implementing cybersecurity programs, RMF activities, vulnerability management, and compliance initiatives. It ensures confidentiality, integrity, and availability of information while supporting assessments, accreditation, and continuous monitoring.

The position requires collaboration with engineering, systems administration, and operations teams to strengthen

Qualifications

• Minimum 4 years of cybersecurity, information assurance, or information security experience.
• Active DoD Secret Clearance required.
• IAT Level II certification required.
• Experience with RMF, vulnerability management, and compliance initiatives.
• Strong ability to document and communicate security controls and findings.

Responsibilities

• Develop, maintain, and enforce information security policies, standards, and procedures.
• Support RMF certification, accreditation, and information assurance activities.
• Develop and maintain cybersecurity and IA program plans.
• Conduct security assessments to identify risks and vulnerabilities.
• Collaborate with engineering, systems administration, and operations to strengthen security posture.
• Track and remediate vulnerabilities and POA&Ms.
• Support continuous monitoring, security audits, and compliance assessments.

Skills

Security policy development

Risk management

Vulnerability management

RMF compliance

Security assessments

Documentation & reporting

Education

DoD 8570/8140 IAT Level II Certification

Microsoft 365 MD-102 (Endpoint Administrator Associate)

Tools

MD-102 Certification

RMF tooling

Job description

Job Summary

The Information Security Specialist (Intermediate/Senior) is responsible for protecting enterprise information systems by implementing and maintaining cybersecurity programs, Risk Management Framework (RMF) activities, vulnerability management, and compliance initiatives. The role ensures the confidentiality, integrity, and availability of information systems while supporting security assessments, accreditation efforts, continuous monitoring, and regulatory compliance.

Key Responsibilities

• Develop, maintain, and enforce information security policies, standards, and procedures.


• Ensure compliance with cybersecurity regulations, directives, and security requirements.


• Support Risk Management Framework (RMF), certification, accreditation, and information assurance activities.


• Develop and maintain cybersecurity and Information Assurance (IA) program plans.


• Conduct security assessments to identify risks, vulnerabilities, and security violations.


• Support system authorization and accreditation processes.


• Integrate cybersecurity requirements into continuity of operations (COOP) and contingency plans.


• Maintain cybersecurity documentation, policies, and operational procedures.


• Collect and report cybersecurity compliance metrics and required documentation.


• Track and remediate vulnerabilities, IAVMs, and ICVMs.


• Develop and manage Plans of Action and Milestones (POA&Ms).


• Support continuous monitoring, security audits, inspections, and compliance assessments.


• Collaborate with engineering, systems administration, and operations teams to strengthen security posture.

Required Qualifications

• Intermediate Level


• U.S. Citizenship with an active DoD Secret Clearance.


• Minimum 4 years of experience in cybersecurity, information assurance, or information security.


• DoD 8570/8140 IAT Level II Certification (CompTIA Security+ or equivalent).


• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102).


• Experience supporting RMF, vulnerability management, compliance initiatives, and cybersecurity operations.


• Ability to obtain required baseline certification within six months of hire.

Preferred Qualifications

• Experience with DoD cybersecurity policies and NIST security standards.


• Experience supporting certification and accreditation activities.


• Knowledge of enterprise vulnerability management and compliance programs.


• Experience with continuous monitoring and security auditing.


• Strong analytical, documentation, communication, and problem-solving skills.