IT Security Operations Specialist

Tharros; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Job summary

Tharros is seeking an IT Security Operations Specialist to run daily IT security programs inside DHS SCIFs in Washington, DC. You will handle SCI incident reporting, privileged user tracking, removable media management, and training outreach.

Qualifications include a BS in IT/cybersecurity or equivalent, 3+ years in IT security operations, and an active TS clearance with SCI eligibility. On-site role with DHS support and routine coordination with security teams.

Qualifications

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science, or equivalent experience.
• Minimum 6 years in IT or security operations.
• Minimum 3 years in IT security operations, SCIF compliance, or security program administration.
• Active Top Secret clearance with SCI eligibility.
• Knowledge of IC 500-18 removable media requirements.
• Knowledge of SCIF IT equipment entry/exit, sanitization, and decommissioning.

Responsibilities

• Run day-to-day IT security programs inside DHS SCIFs, including incident reporting and privileged user tracking.
• Report SCI IT security incidents to DHS Enterprise SOC and IC Security Coordination Center.
• Maintain the privileged user database and issue training memos and reminders.
• Coordinate with ISSOs, ISSMs, SOC analysts, system administrators, and other security stakeholders to investigate incidents.
• Develop and deliver security awareness training and materials for non-technical audiences.
• Produce IT security tips, newsletters, and briefings for staff.

Skills

Security Incident Reporting

GRC Tools

SCIF Compliance

Removable Media Management

Incident Response

Microsoft Office

Communication

Team Coordination

Education

BS degree in IT, Cybersecurity, Information Systems, or Computer Science

Tools

GRC software & tools

SCIF security procedures

Microsoft Excel

Job description

Tharros is looking for courageous team members that enable government missions to move forward with confidence.

Who We Are

At Tharros, expertise, confidence and continuous advancement are at the foundation of what we do. With us, you work with the world’s preeminent vulnerability experts to not only advance government missions, but also your own career path. We’re looking for confident leaders to grow and evolve as we do, protecting our nation’s protectors with cutting-edge cybersecurity tools.

Seeing everything includes seeing everyone. Tharros moves missions forward with a courageous team of experts and a variety of perspectives.

Outperform

Lead with Growth

Dare to Secure

At Tharros, we have exceptional benefits because our employees’ success is our success. We support our team members’ growth with training opportunities, tools and resources.

Outperform the Expected

Tharros sets high standards because we know our team can meet and exceed them. We anticipate success, expect exceptional results and ensure impact for everyone.

Lead with Continuous Growth

When our employees grow, everyone thrives. As the leaders in vulnerability research, we grow capability for our clients and our employees.

Dare to Secure Anything

At the cutting-edge of cybersecurity technology, Tharros dares to create tools that will have maximum mission impact. Our company culture reflects this confidence.

Benefits of Working with Tharros

Moving boldly forward requires a strong foundation. Tharros provides foundational benefits that help our employees grow and thrive.

To be the best, you join the best. Tharros offers competitive compensation and comprehensive benefits including medical, dental, vision and disability coverage, savings & retirement and paid leave.

At Tharros, leaders develop leaders. Working at Tharros gives our employees access to resources and expertise found nowhere else, and we nurture the future leaders in cybersecurity from within our ranks.

We’re not afraid to show our commitment to growing our Tharros team. We offer generous referral bonuses to employees who help us reach hiring goals.

Training & Certification Reimbursement

Tharros is always advancing. We offer an education reimbursement benefit of up to $5,250 per year to help our employees thrive.

Breaking Barriers to Cybersecurity Success

Our people-first culture enables more flexibility for our employees to find success in cyber fields. At Tharros, there are no barriers between you, the world’s leading cybersecurity experts, and our customers.

Tharros supports the Department of Homeland Security (DHS) with cybersecurity services across its Intelligence Enterprise. To support this mission, we have an immediate opening for an IT Security Operations Specialist.

In this role, you will run day-to-day IT security programs inside DHS SCIFs, including SCI incident reporting, privileged user tracking, removable media management, equipment entry/exit and decommissioning, and IT security training and outreach. This position is on-site in a Government SCIF in Washington, DC.

• Identify, record, and report SCI IT security incidents in the GRC tool and to the DHS Enterprise SOC and IC Security Coordination Center.
• Maintain the privileged user database; issue annual training memos and 30/60/90-day compliance reminders.

Monitor and identify potential SCI IT security incidents, including unauthorized access, security policy violations, suspicious system activity, data spillage, unauthorized media usage, and potential compromises of classified information systems.

Document, categorize, and track security incidents within the Governance, Risk, and Compliance (GRC) tool, ensuring accurate incident descriptions, supporting evidence, affected systems, severity assessments, and remediation activities.

Report identified or suspected security incidents to the DHS Enterprise Security Operations Center (SOC) and Intelligence Community Security Coordination Center (IC SCC) in accordance with established reporting timelines, escalation procedures, and classification requirements.

Coordinate with Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), SOC analysts, system administrators, and other security stakeholders to investigate incidents, assess potential impacts, and support containment and remediation efforts.

Maintain comprehensive incident records, including investigative findings, corrective actions, incident status, and closure documentation, to support compliance reviews, audits, and continuous monitoring requirements.

• Administer the Removable Media Program in accordance with IC 500-18, including training, waivers, Rules of Behavior, and tracking.
• Inspect IT equipment entering and exiting SCIFs; review pre-procurement and PED request forms.
• Coordinate sanitization and decommissioning in accordance with DHS 4300C and NSA/CSS Policy Manual 9-12.
• Manage daily operations of the SCIF compliance oversight program (ICOP) and ISCR/ISSO designations.
• Develop and update annual SCI IT security awareness, removable media, and privileged user training; deliver classroom sessions.
• Produce IT security tips, newsletters, surveys, and briefings for non-technical audiences.

Requirements:

• BS degree in Information Technology, Cybersecurity, Information Systems, or Computer Science OR minimum of 6 years' experience in IT or security operations.
• Minimum of 3 years' experience in IT security operations, SCIF compliance, or security program administration.
• Active Top Secret clearance with contingency on DOD CAS granting SCI eligibility.
• Knowledge of IC 500-18 removable media requirements.
• Knowledge of SCIF IT equipment entry/exit, sanitization, and decommissioning procedures.
• Knowledge of security incident reporting and handling processes.
• Skill in maintaining compliance databases and producing metrics reports.
• Skill in developing training materials and briefing non-technical audiences.
• Ability to manage multiple recurring compliance programs and deadlines.
• Proficient in Microsoft Office Suite, including Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communication skills.
• Experience with NSA/CSS media sanitization procedures.
• LMS administration or instructional design experience.
• Familiarity with COMSEC to serve as a backup for two-person integrity.
• CompTIA Security+ certification.

Equal Opportunity Employment

Tharros is committed to implementing employment programs and policies dedicated to equal employment opportunity and nondiscrimination. Learn more today.