IT Security Specialist II – Security Operations & Compliance

GAMA-1 Technologies; Washington (District of Columbia); Hybrid; USD 114,935 - 138,475; Full time

Job summary

A cybersecurity firm is seeking an experienced IT Security Specialist II to support cybersecurity operations and compliance in a federal telework environment. Key responsibilities include operating security tools, maintaining compliance records, and assisting with updates for security documentation. Ideal candidates should have a Bachelor's degree in a related field and hold certification in Security+. Competitive salary range is offered along with a full-time position.

Qualifications

• 2-4 years of experience in security operations or related cybersecurity functions.
• Professional certification Security+ is required.
• Experience with federal compliance tools preferred.

Responsibilities

• Operate and maintain security scanning and monitoring tools.
• Collect and maintain security artifacts for compliance.
• Assist with POA&M updates and remediation tracking.

Skills

Strong documentation and organizational skills

Familiarity with STIGs

Basic understanding of security monitoring

Education

Bachelor’s degree in Engineering, IT, or related field

Tools

CSAM

Vulnerability management tools

Security monitoring tools

Job description

IT Security Specialist II – Security Operations & Compliance

GAMA-1 Technologies, LLC seeks an experienced IT Security Specialist II to support cybersecurity operations and compliance activities within federal telework environment. The incumbent operates security monitoring and scanning tools, collects and maintains security artifacts, updates compliance records in CSAM, and assists with Plans of Action and Milestones (POA&Ms) updates and retesting of evidence. This role ensures accurate documentation of Standard Operating Procedures (SOPs) and contributes to maintaining a strong security posture in alignment with federal standards such as STIGs, FISMA, and other agency requirements.

Essential functions / responsibilities

• Operate and maintain security scanning and monitoring tools to identify vulnerabilities and monitor system security.
• Collect, organize, and maintain security artifacts for compliance and audit purposes.
• Document and update Standard Operating Procedures (SOPs) related to security operations and monitoring.
• Update and maintain CSAM entries to reflect current system compliance status.
• Assist with POA&M updates, including tracking remediation progress and retesting evidence to verify resolution of findings.
• Support vulnerability management and remediation activities, ensuring compliance with STIGs, NIST standards, and federal cybersecurity policies.
• Collaborate with IT and security teams to ensure accurate reporting and timely resolution of identified risks.
• Maintain awareness of evolving cybersecurity threats, standards, and best practices.

Information Security and Confidentiality Obligations

• Ensure adherence to organizational information security policies and procedures; actively participate in mandatory security awareness training; and manage confidential and sensitive information in accordance with company protocols and data protection standards.

Basic Qualifications

• Bachelor’s degree in Engineering, Information Technology, Business, or a related field (or equivalent work experience).
• 2-4 years of experience in security operations or related cybersecurity functions.
• Professional certification Security+ is required.
• Familiarity with STIGs, vulnerability management, and federal compliance standards.
• Strong documentation and organizational skills with attention to detail.
• Basic understanding of security monitoring, incident detection, and risk mitigation processes.

Preferred Qualifications

• Professional certification CySA+ or SSCP are preferred.
• Experience with federal compliance tools, such as CSAM.
• Familiarity with POA&M management, remediation tracking, and retesting procedures.
• Experience in Windows and Linux enterprise environments.

Security Clearance & Eligibility

• In accordance with facility Special Security Requirements and Department of Justice (DOJ) policy, candidates must have legally resided in the United States for three of the past five years, worked for the U.S. Government or military overseas, or been a dependent of a U.S. Government or military employee serving overseas. Non-U.S. citizens must be from an allied nation as defined by the Office of Personnel Management. Employment is contingent upon successful completion of Bureau of Prisons investigative procedures, which may include NCIC and fingerprint checks, law enforcement and employment history verification, federal application/resume review, release of information, urinalysis, and, if applicable, a National Agency Check. No work may commence until all required background investigations and clearances have been fully adjudicated.

Work environment

• This work will be performed primarily in a telework environment, with on-site duties required one day per week.

Physical demands

• Prolonged periods of sitting at a desk and working on a computer.
• Must be able to access and navigate each department at the organizations and client facilities.

Travel

• Yes, travel to client site in Washington, DC.

Proficiency Requirement

• The employee is expected to demonstrate proficiency in all essential job functions, tools, and processes related to this position within the first 90 days of employment. This includes acquiring a thorough understanding of job-specific responsibilities, systems, and workflows as outlined during onboarding and training. Failure to meet this requirement may result in additional training, reassessment, or other actions as deemed necessary by management.

Employment is contingent upon government approval and, if applicable, contract award.

The base salary range for this position is $114,935 - $138,475

This base salary range represents a general guideline. An individual’s base salary within that range is determined based on a variety of factors, including (without limitation) the scope, complexities, and responsibilities of the position, the government contract to which the position is assigned, geographic location, market conditions, and the candidate’s relevant experience, education, and skills.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• Wireless Services, Telecommunications, and Communications Equipment Manufacturing

Referrals increase your chances of interviewing at GAMA-1 Technologies by 2x