IT Cybersecurity Specialist (San Diego)

West 4th Strategy; San Diego (CA); On-site; USD 125,000 - 180,000; Full time

Job summary

West 4th Strategy seeks an IT Cybersecurity Specialist in San Diego to secure the ServiceNow platform for the Blue UAS Cleared List. You will architect security controls, maintain SSP/RMF artifacts, and manage POA&M to remediate vulnerabilities and sustain Authority to Operate.

The role requires DoD-aligned qualifications, FedRAMP High experience, and ServiceNow GRC/IRM expertise, with a focus on static and dynamic controls across IL4/IL5 environments.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline.
• Minimum of five (5) years of practical experience.
• Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels for Security Architecture and Engineering.
• Experience applying NIST SP 800-53 controls and RMF to achieve ATO.
• Experience securing ServiceNow in FedRAMP High and DoD IL4/IL5 environments with ACLs, scripts, and authentication integration.
• Experience with ServiceNow GRC/IRM or SecOps modules is highly preferred.

Responsibilities

• Architects and implements ServiceNow security controls including RBAC, ACLs, Data Policies, and Edge Encryption.
• Enforces data segregation between IL4 and IL5 environments.
• Creates and maintains detailed RBAC schema and governance artifacts.
• Coordinates with Government IT PM and AO to ensure cybersecurity protocols are followed.
• Develops and updates SSP and RMF artifacts mapping to NIST controls.
• Tracks POA&M within ServiceNow GRC/IRM to remediate vulnerabilities with deadlines.
• Monitors and reports SARs, vulnerability scans, and code promotion compliance.
• Ensures personnel meet DoD 8140.03 qualifications and certs; provides documentation on request.

Skills

RBAC

ACLs

Data policies

Edge encryption

NIST SP 800-53

NIST SP 800-161

RMF

FedRAMP High

ServiceNow

GRC/IRM

Education

Bachelor's degree in Cybersecurity or related field

Tools

ServiceNow

GRC/IRM

Job description

IT Cybersecurity Specialist

We need an experienced IT Cybersecurity Specialist at the Defense Contract Management Agency (DCMA). This role secures the ServiceNow platform that underpins the Blue UAS Cleared List, the program responsible for vetting commercial drone systems for security risk before they are approved for military and government use. In this role, you will architect and implement ServiceNow specific security controls, develop and maintain the System Security Plan and RMF artifacts, and track the POA&M to remediate identified vulnerabilities and maintain the system's Authority to Operate. This is a full-time opportunity. We can offer a competitive salary, and a comprehensive benefits package.

RESPONSIBILITIES

• Architects and implements ServiceNow specific security controls, including RBAC, ACLs, Data Policies, and Edge Encryption, aligned to the DoD Zero Trust Strategy
• Enforces strict data segregation between IL4 (Public) and IL5 (CAC Authenticated) environments
• Creates and maintains a detailed schema and RBAC matrix outlining all roles, groups, ACLs, and data segregation rules
• Coordinates with the Government's IT Program Manager and Authorizing Official (AO) to ensure required cybersecurity protocols are maintained and followed
• Develops and continuously updates a comprehensive System Security Plan (SSP) and all required RMF artifacts, mapping ServiceNow configurations to NIST SP 800-53 and NIST SP 800-171/172
• Actively tracks, manages, and updates the Plan of Action and Milestones (POA&M) within ServiceNow GRC/IRM to document, report, and remediate identified vulnerabilities within Government provided suspense dates
• Conducts continuous monitoring and provides ongoing Security Assessment Reports (SAR) documenting vulnerability scans, penetration test reviews, and compliance checks prior to code promotion
• Ensures all personnel meet applicable qualifications and certification requirements outlined in DoDM 8140.03
• Provides documentation of personnel certifications and qualifications upon request by the CO or COR

BACKGROUND/REQUIRED EXPERIENCE

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline
• Minimum of five (5) years of practical experience
• Active qualification aligning with DoDM 8140.03 DCWF Work Roles and Proficiency Levels (Foundational and Residential) appropriate for Security Architecture and Engineering (e.g., Security Architect, DCWF 651)
• Demonstrated expertise applying NIST SP 800-53 controls, NIST SP 800-161 (SCRM), and navigating the DoW Risk Management Framework (RMF) to achieve an Authority to Operate (ATO)
• Demonstrated experience securing ServiceNow instances in a FedRAMP High and DoD IL4/IL5 environment, including configuring ACLs, Client Scripts, Data Policies, and integrating DoW E-ICAM/CAC authentication
• Experience with ServiceNow GRC/IRM or SecOps modules highly preferred

LOCATION

• San Diego, CA – DCMA Facility

CLEARANCE

• Active or interim DoW security clearance; favorably adjudicated Tier 3 background investigation required
• Must be a US Citizen

CLIENT

• Defense Contract Management Agency (DCMA), Unmanned Systems-Experimental (US-X) command

HOURS

• 40 hours per week
• 8 hours per day

EMPLOYMENT CLASSIFICATION

• Employment Classification Eligibility – W2

RELOCATION

• Not eligible for relocation benefits

COMPENSATION

• Salary range: $125,000 – $180,000
• Benefits: Benefits package includes options for health, dental, and vision insurance coverage; 401k contribution options. Full benefits brochure available for review.

West 4th Strategy is an Equal Opportunity (EEO) employer. All qualified applicants will receive consideration for employment without regard to race, color, creed, religion, gender, sexual orientation, ancestry, national origin, age, marital status, mental disability, physical disability, medical condition, pregnancy, political affiliation, military or veteran status, or any other basis prohibited by federal or state law.

Other Considerations:

This position is W-2 only; no Corp-to-Corp or 1099 candidates.Relocation will not be offered. This position requires access to Department of Justice facilities and systems. As a condition of employment, selected candidates must complete and receive favorable adjudication from a federal government background investigation as required by the U.S. Department of Justice. Individual’s primary workstation is located in an office area. The noise level in this environment is low to moderate. Regularly required to sit for extended periods up to 80% of the time; frequently required to move about to access file cabinets and use office equipment such as PC, copier, fax, telephone, cell phone, etc. Occasionally required to reach overhead, bend, and lift objects of up to 10 lbs. Specific vision abilities required by this job include the use of computer monitor screens up to 80% of the time.