IT Security Operations Specialist - Level II

Rividium; Washington (District of Columbia); On-site; USD 120,000 - 170,000; Full time

Job summary

RiVidium seeks an IT Security Operations Specialist Level II to support DHS Intelligence Enterprise security operations, including SCRM, incident management, IC PKI, and HSDN token lifecycle. You will work with ISSOs, ISSMs, and government stakeholders to ensure compliance with DHS 4300C, NIST, and IC policies.

Preferred candidates hold TS/SCI clearance, 3–5 years in federal security operations, and relevant certifications.

Qualifications

• Active TS/SCI clearance.
• 3–5 years of IT security operations or related experience.
• Knowledge of NIST SP 800-53, DHS 4300C, and IC security requirements.
• Experience with privileged access management, removable media control, SCIF procedures.
• Familiarity with IC PKI and HSDN token lifecycle.
• CompTIA Security+ or equivalent DoD 8570/8140 certification.
• Bachelor's degree in IT, cybersecurity, information systems, or related field.

Responsibilities

• Support daily IT security operations across the DHS Intelligence Enterprise.
• Perform SCRM activities: PED reviews, hardware risk assessments, equipment accountability reviews, documentation.
• Support IT security incident reporting and tracking per DHS 4300C and IC policies.
• Coordinate incident response activities and maintain incident records.
• Maintain the enterprise Privileged User database and generate reports.
• Administer removable media management, including registration and inventory.
• Manage IC PKI and HSDN token lifecycle: issuance, resets, recovery, replacement, reissuance, revocation.
• Face-to-face identity verification per FICAM and IC requirements.
• Prepare monthly IC PKI and HSDN metrics and token tracking reports.
• Participate in IC PKI working groups and communicate policy updates.

Skills

TS/SCI clearance

3-5 years IT security ops

FICAM principles

Education

Bachelor's degree or equivalent

Tools

ITSM tools

SCIF operations knowledge

Job description

IT Security Operations Specialist Level II

Full-Time/Part-Time Full-Time

Description

The IT Security Operations Specialist - Level II provides operational cybersecurity support for the Department of Homeland Security (DHS) Intelligence Enterprise (DHS IE) by performing day-to-day information security operations across multiple functional areas. This position supports Supply Chain Risk Management (SCRM), security incident management, privileged user administration, removable media control, equipment accountability, SCIF security operations, and Identity, Credential, and Access Management (ICAM) services, including Intelligence Community Public Key Infrastructure (IC PKI) and Homeland Secure Data Network (HSDN) token management. Working closely with Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), system administrators, security operations personnel, and Government stakeholders, the IT Security Operations Specialist ensures compliance with DHS 4300C, Intelligence Community (IC) security policies, and Federal cybersecurity requirements while maintaining the operational security posture of DHS IE systems and facilities.

Key Responsibilities

• Support daily IT security operations across the DHS Intelligence Enterprise, ensuring compliance with DHS, Intelligence Community, and Federal cybersecurity policies and operational procedures.
• Perform Supply Chain Risk Management (SCRM) activities, including:
  • Pre-Procurement Device (PED) reviews
  • Hardware risk assessments
  • Equipment accountability reviews
  • Supply chain security documentation
• Support IT security incident reporting, tracking, documentation, and escalation in accordance with DHS 4300C, NIST guidance, and Intelligence Community policies.
• Coordinate incident response activities and maintain incident records throughout the incident lifecycle.
• Maintain the enterprise Privileged User database and monitor privileged account compliance.
• Generate weekly, monthly, and quarterly privileged user reports, metrics, and compliance documentation.
• Administer removable media management activities, including:
  • Media registration
  • Accountability tracking
  • Inventory management
  • Compliance reporting
  • Secure media handling procedures
• Perform equipment sanitization and decommissioning activities in accordance with DHS, NIST, and Intelligence Community media sanitization standards.
• Conduct equipment inspections and provide entry and exit control services for all hardware entering or leaving Sensitive Compartmented Information Facilities (SCIFs).
• Support the Data Access Cell (DAC) by administering user accounts, access permissions, and credential management services.
• Manage the complete lifecycle of IC PKI and HSDN tokens, including:
  • Token issuance
  • PIN resets
  • Key recovery
  • Token replacement
  • Token reissuance
  • Token revocation
• Perform face-to-face identity verification of IC PKI subscribers in accordance with Federal Identity, Credential, and Access Management (FICAM) and Intelligence Community requirements.
• Maintain accountability for IC PKI and HSDN tokens using the HSDN Token Tracking System (TTS).
• Prepare and submit monthly IC PKI, HSDN, DAC, and Token Tracking System (TTS) metrics and accountability reports.
• Perform quarterly token inventory audits and reconcile discrepancies.
• Participate in Intelligence Community PKI working groups as the DHS I&A representative and communicate policy updates to program stakeholders.
• Support Government data calls, audits, inspections, and cybersecurity compliance reviews.
• Maintain operational documentation, standard operating procedures (SOPs), and security records related to IT security operations.

Minimum Qualifications

• Active Top Secret/Sensitive Compartmented Information (TS/SCI) security clearance.
• Minimum 3-5 years of experience supporting IT security operations, privileged access management, information assurance, cybersecurity operations, or systems administration within a classified Federal Government or Intelligence Community environment.
• Working knowledge of:
  • NIST SP 800-53
  • DHS Sensitive Systems Policy Directive 4300C
  • Intelligence Community security operational requirements
  • Federal Identity, Credential, and Access Management (FICAM) principles
• Experience supporting:
  • Privileged user management
  • Removable media control
  • Security incident reporting
  • Equipment inspections
  • Hardware accountability
  • SCIF operational security procedures
• Familiarity with Intelligence Community Public Key Infrastructure (IC PKI) and Homeland Secure Data Network (HSDN) token lifecycle management.
• Experience maintaining security documentation, operational metrics, and compliance reports.
• Current CompTIA Security+ certification or an equivalent DoD 8570/8140-approved cybersecurity certification.
• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Computer Science, or a related discipline. Equivalent professional experience may be substituted where permitted.

Preferred Qualifications

• Current Certified Information Systems Security Professional (CISSP) or Certified Authorization Professional (CAP) certification.
• Experience supporting DHS Intelligence & Analysis (I&A) or other Intelligence Community cybersecurity programs.
• Experience using DHS Information Assurance (IA) IT Service Management (ITSM) tools for ticket and request management.
• Familiarity with Federal Identity, Credential, and Access Management (FICAM) and ICAM programs.
• Experience with Supply Chain Risk Management (SCRM) policies and Federal hardware security requirements.
• Knowledge of NIST SP 800-161 (Cyber Supply Chain Risk Management) and related Federal guidance.
• Experience supporting SCIF operations, COMSEC procedures, or secure facility access control.

Required Certifications

One of the following current certifications is required:

• CompTIA Security+ (or equivalent DoD 8570/8140-approved certification)

Preferred certifications include:

• Certified Information Systems Security Professional (CISSP)
• Certified Authorization Professional (CAP)

Clearance Requirement

Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance Required

About the Organization Established in 2008, RiVidium, Inc. (dba TripleCyber) is a VA-Verified SDVOSB and an SBA-Certified 8(a) company. To prepare our clients for the future, RiVidium has balanced all parts of our organization to attract the finest employees in order to 'Strive to be the missing element defining tomorrow's technology'. RiVidium keeps pace and surpasses its competitors by meeting challenges of advancements in Logistics, Human Capital, Cyber, Intelligence & Technology.

EOE Statement We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law. If you need a reasonable accommodation for any part of the employment process, please contact Human Resources (HR) at [e-mail].

This position is currently accepting applications.