InfoSec Specialist: Vulnerability & Monitoring

Sherpa 6, Inc.; Springfield (VA); On-site; USD 105,000 - 125,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

Retirement plan

Paid time off

Job summary

Sherpa 6, Inc. Information Security Specialist position seeks to maintain the security posture of internal systems and ensure compliant operations across domains.

The role collaborates with Security, IT, and leadership to support vulnerability management, audits, incident response, and secure system operations. Requirements include a Bachelor's degree and 3–5 years in information security, hands-on experience with Microsoft Defender, Intune, Purview, SIEM, and enterprise Windows/Linux security.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 3-5 years of experience in information security or cybersecurity operations.
• Experience with Microsoft Defender, Intune, and Purview.
• Strong understanding of software and system vulnerability management.
• Experience with SIEM tools and log aggregation.
• Experience managing the security of Windows and Linux systems in an Enterprise environment.
• Experience implementing and maintaining STIGS or CIS Benchmarks.

Responsibilities

• Manage system vulnerabilities, including scanning, prioritization, and remediation.
• Support patching and configuration enforcement through endpoint management solutions
• Provide continuous monitoring of information systems, ensuring audit logs are collected, reviewed, and anomalous activity is identified and mitigated.
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services.
• Configure and tune alerting and automated response capabilities for security events.
• Perform incident response and reporting for cybersecurity events including malware, phishing, unauthorized access, and data exfiltration.
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure
• Ensure all system security documentation (e.g., SSPs, baselines, policies, procedures) is current and audit-ready.
• Assist in development and maintenance of security policies, standards, and technical controls.
• Review and assess security impact of system changes as part of change control processes
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms.
• Conduct user activity monitoring and support investigations related to potential insider threat or policy violations.
• Run security awareness initiatives, including phishing simulations and training activities.
• Prepare reports on the status of vulnerabilities, incidents, and overall security posture.

Job description

Sherpa 6, Inc. Information Security Specialist position seeks to maintain the security posture of internal systems and ensure compliant operations across domains.

The role collaborates with Security, IT, and leadership to support vulnerability management, audits, incident response, and secure system operations. Requirements include a Bachelor's degree and 3–5 years in information security, hands-on experience with Microsoft Defender, Intune, Purview, SIEM, and enterprise Windows/Linux security.