Security Risk Threat Specialist III

Interactive Process Technology LLC; Bath Township (OH); On-site; USD 110,000 - 140,000; Full time

Job summary

IPT Associates (IPTA) seeks a Security Risk Threat Specialist III to join our team at Wright-Patterson AFB. The role focuses on identifying and mitigating cybersecurity risks, supporting RMF processes, and coordinating with ISSMs and system owners to maintain accreditation status.

The candidate will apply NIST SP 800-37, 800-53, and related CNSSI 1253 standards, develop system security artifacts, and communicate risk remediation plans with stakeholders.

Qualifications

• BS in Computer Science, Cyber Security, or related field.
• Active TS clearance with SCI eligibility.
• Experience with RMF lifecycle requirements.

Responsibilities

• Identify, assess, and mitigate cybersecurity risks to information systems.
• Support RMF lifecycle: categorization, control selection/implementation, assessment, authorization, and monitoring.
• Conduct security control assessments per NIST SP 800-53A including vulnerability scans and reviews.
• Develop/maintain SSPs, SARs, POA&Ms and support authorization documentation.
• Apply security engineering principles per NIST SP 800-160 and related standards.
• Coordinate findings and status with system owners, ISSMs, and Authorizing Officials.

Skills

Cybersecurity expertise

RMF experience

NIST SP 800-37/53/53A knowledge

Technical writing

Education

BS in Computer Science, Cyber Security, or related field

Job description

Security Risk Threat Specialist III

Wright-Patterson AFB

At IPT Associates (IPTA), we enjoy solving real-world problems with technology. We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it's a government or business organization, we focus on understanding the need and building something that works.

Our Team

At IPTA, everything starts with our people. We're big believers that when you invest in your team, great things happen. That's why we encourage learning, growth, and trying new things—even if you don't have all the answers yet.

Our culture is rooted in fierce determination, fearless integrity, and passionate service—but we also like to keep things collaborative, supportive, and down-to-earth.

We're looking for people who:

• Are curious and excited about technology
• Like solving problems and figuring things out
• Can take initiative but also enjoy working with a team
• Want to keep learning, growing, and challenging themselves

If you're someone who's eager to jump in, learn something new, and make an impact—you'll fit right in here.

*This position is contingent upon contract award and the actual job description may vary based on specific contract requirements and organizational needs.*

Responsibilities:

• Identify, assess, and mitigate cybersecurity risks to information systems, including conducting supply chain risk assessments; develop risk mitigation plans and recommend security controls aligned with organizational needs.
• Support the Risk Management Framework (RMF) lifecycle, including system categorization, security control selection and implementation, assessment, authorization, and continuous monitoring in accordance with NIST SP 800-37 and applicable organizational policies.
• Conduct security control assessments using NIST SP 800-53A, including vulnerability scanning, documentation reviews, system configuration analysis, audit log examination, and penetration testing when required.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation; track remediation actions and report unresolved risks.
• Apply security engineering principles throughout the system lifecycle in accordance with NIST SP 800-160, NIST SP 800-53, and CNSSI 1253; collaborate with technical teams to implement and validate security controls.
• Coordinate with system owners, Information System Security Managers (ISSMs), and Authorizing Official representatives to support continuous monitoring, communicate assessment findings and authorization status, and address cybersecurity compliance concerns.

Requirements:

• BS in Computer Science, Cyber Security, or a related field
• Active TS clearance with SCI eligibility
• Experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, and continuous monitoring.
• Working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, applicable organizational security policies, and CNSSI 1253.
• Experience conducting cybersecurity risk and vulnerability assessments, analyzing system configurations and audit logs, and recommending risk mitigation measures.
• Ability to develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation.
• Knowledge of system security engineering principles and their application throughout the system lifecycle, including NIST SP 800-160.
• Strong technical writing and communication skills, with the ability to coordinate security findings, remediation actions, and authorization status with system owners, ISSMs, and technical teams.

IPTA is an Equal Opportunity Employer. All employment decisions are based on individual merit, including qualifications, experience, performance, and business needs, consistent with applicable federal laws and federal contracting requirements. IPTA provides equal opportunity and utilizes merit-based principles to make employment-related decisions.