IT Cybersecurity Specialist

Graham Tech; Fort Lee (NJ); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Four Weeks PTO (First Year)

Eleven Federal Holidays

Health, Dental, Vision, Life Insurance

401(k) with Employer Contributions

Flexible Schedules

Education Reimbursement

Job summary

Graham Technologies is seeking a senior cybersecurity professional to support RMF, security authorization, and continuous monitoring for government systems. You will develop and maintain security documentation, coordinate vulnerability management, and lead incident response efforts across cloud, on-prem, and DevSecOps environments.

The role requires 5+ years of experience, active Secret clearance, and strong knowledge of NIST controls.

Qualifications

• Minimum five years of professional cybersecurity experience.
• Experience supporting RMF, security authorization, and continuous monitoring.
• Experience applying NIST SP 800-53 controls.
• Experience supporting Federal information systems or regulated environments.

Responsibilities

• Support development, maintenance, and assessment of security documentation (SSP, controls, assessment artifacts).
• Apply RMF and NIST controls across the system lifecycle.
• Coordinate continuous monitoring, vulnerability scanning, remediation tracking, and PoA&M updates.
• Develop and maintain access-control, RBAC, incident-response, and contingency procedures.
• Analyze findings, assess risk, and verify remediation effectiveness.
• Support security engineering reviews for cloud, platform, app, API, and DevSecOps.
• Coordinate incident triage, containment, investigation, and recovery activities.
• Coordinate static/dynamic testing, pen-testing coordination, and secure-code reviews.
• Maintain audit-ready cybersecurity documentation and respond to data calls.
• Collaborate with system owners, developers, admins, managers, and Government stakeholders.

Skills

RMF experience

NIST SP 800-53

Incident response

Cybersecurity documentation

Govt/regulatory knowledge

Education

Bachelors in Cybersecurity/IT/CS/Engineering

Masters in Cybersecurity/IA

Tools

Vulnerability scanners

SIEM platforms

GRC tools

Ticketing systems

Microsoft collaboration tools

Job description

Location

• Fort Lee, VA

Key Responsibilities

• Support the development, maintenance, and assessment of security authorization documentation, including the System Security Plan, security controls, assessment artifacts, and supporting evidence.
• Apply the Risk Management Framework and applicable NIST security and privacy controls throughout the system lifecycle.
• Coordinate continuous monitoring activities, vulnerability scanning, remediation tracking, and monthly Plan of Action and Milestones updates.
• Develop and maintain access-control, role-based access, incident-response, contingency, and security operating procedures.
• Analyze security findings, assess risk, recommend corrective actions, and verify remediation effectiveness.
• Support security engineering reviews for cloud, platform, application, API, and DevSecOps implementations.
• Coordinate incident triage, containment, investigation, documentation, and recovery activities.
• Support static and dynamic application security testing, penetration-testing coordination, and secure-code review activities.
• Maintain audit-ready cybersecurity documentation and respond to security assessments, reviews, and data calls.
• Collaborate with system owners, developers, administrators, project managers, and Government cybersecurity stakeholders.

Required Skills

Experience

• Minimum five (5) years of professional cybersecurity experience.
• Experience supporting RMF, security authorization, continuous monitoring, vulnerability management, or incident response activities.
• Experience applying NIST SP 800-53 controls and maintaining cybersecurity documentation.
• Experience supporting Federal information systems or regulated environments.

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.

Clearance

• Active Secret clearance.

Certifications / Tools

• Active CompTIA Security+ or higher
• Experience with vulnerability scanners, SIEM platforms, GRC tools, ticketing systems, and Microsoft collaboration tools.

Desired Skills

Experience

• Experience securing cloud-native, ServiceNow, DevSecOps, or CI/CD environments.
• Experience with supply-chain risk management, Zero Trust, penetration testing, or application security.

Education

• Master's degree in Cybersecurity, Information Assurance, or a related discipline.

Certifications

• CISSP, CASP+, CCSP, CISM, CySA+, or equivalent advanced certification.

Compensation

At Graham Technologies, we believe in treating everyone with fairness and respect. Our compensation package is designed to ensure fair pay for work, reflecting our commitment to integrity.

Many IT companies offer similar services, but what truly sets us apart is our people! We care deeply about our employees and consistently show our appreciation-not just for the final outcomes, but also for the effort and dedication shown every step of the way. Additionally, our generous benefits package supports our team members in living fulfilling and prosperous lives.

Here are just a few highlights of what we offer:

• Four Weeks of Accrued PTO in the First Year
• Eleven Paid Federal Holidays
• Comprehensive Health, Dental, Vision, and Life Insurance
• 401(k) Plan with Annual Employer Contributions
• Flexible Schedules
• Reimbursements for Continued Education and Training

Why Graham Technologies?

Our core values define who we are:

• Value our Customers
• Care about our Employees
• Passionate about Innovation
• Believe in a Strong Work Ethic
• Rely on Teamwork
• Integrity Matters

Founded in 2007, GTech is a consulting services firm passionate about delivering tailored solutions that meet our clients' needs and maximize the value of their investments. We achieve this by providing top-notch professionals across the IT industry. Our team embodies integrity, commitment, and reliability, which are at the heart of everything we do.

We are also dedicated to fostering a culture of support for our employees-the lifeblood of our business. At Graham Technologies, we've built a family-oriented environment where team members are encouraged to maintain a healthy work-life balance, pursue their passions, and grow professionally through flexible schedules, continued education, and a strong sense of community.