IT Security Specialist: Cloud, Compliance & Risk

NASA; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Job summary

NASA Headquarters, Office of Inspector General (OIG) seeks an Information Technology Specialist (Security) to oversee IT security across applications, networks, and enterprise architecture. The role drives risk assessments, policy development, disaster recovery, and executive briefings to protect mission data.

The position requires DHS/NASA OIG eligibility, top-secret clearance, and compliance with security requirements. Strong experience with patch management and cloud security is essential.

Qualifications

• Specialized experience equipping you to perform IT security duties.
• Experience remediating vulnerabilities and applying patches across servers and cloud/on-prem environments.
• Configuring and supporting AWS cloud services and related security controls.
• Evaluating networking and cloud-related procurements for secure enterprise IT operations.

Responsibilities

• Plan, schedule, execute, and validate patching across servers, workstations, and applications.
• Coordinate vulnerability remediation using BigFix, Nessus, SentinelOne; resolve findings.
• Manage system access; MFA and PIV initiatives; maintain secure permission structures.
• Lead evaluations of security features; develop certification and accreditation plans; track corrective actions.
• Assess IT systems for vulnerabilities; maintain continuous monitoring for compliance.

Skills

Attention to Detail

Customer Service

Tools

BigFix

Nessus

SentinelOne

EC2

GuardDuty

FSx

Airflow

AWS GovCloud

Job description

NASA Headquarters, Office of Inspector General (OIG) seeks an Information Technology Specialist (Security) to oversee IT security across applications, networks, and enterprise architecture. The role drives risk assessments, policy development, disaster recovery, and executive briefings to protect mission data.

The position requires DHS/NASA OIG eligibility, top-secret clearance, and compliance with security requirements. Strong experience with patch management and cloud security is essential.