Security Specialist

Cherokee Federal

Washington (District of Columbia)

On-site

USD 160,000 - 175,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Medical

Dental

Vision

401K

Other benefits

Job summary

HESFP, LLC, part of Cherokee Federal, seeks a Security Specialist to support security, assessment, and authorization of enterprise cloud environments in a regulated federal setting. You will conduct control assessments, support A&A/ATO activities, and collaborate with architects, engineers, and stakeholders to deliver secure cloud solutions powering mission-critical operations.

Required is U.S. citizenship, active TS/SCI clearance, and a minimum of seven years in information assurance or RMF.

Qualifications

Bachelor's degree and minimum seven years of Information Assurance, cybersecurity, RMF, or ATO experience.
Experience conducting security assessments utilizing NIST SP 800-53 and 800-37.
Experience supporting A&A/ATO activities and continuous monitoring artifacts.

Responsibilities

Conduct security control assessments in line with NIST SP 800-53 and 800-37.
Support A&A/ATO activities including SSPs and POA&Ms and gov stakeholders.
Perform cybersecurity vulnerability assessments of enterprise cloud environments.
Evaluate security requirements and recommend secure solutions.
Develop and maintain cybersecurity plans, policies, and procedures for compliance.
Collaborate with engineering and platform teams to implement security controls.
Support continuous monitoring, audits, and compliance reporting.
Assist with RMF implementation and documentation updates.
Review system configurations for compliance with federal requirements.
Support IAM initiatives, secure configurations, logging, and monitoring.
Document assessment findings, risk analyses, and remediation actions.
Participate in Agile planning and technical reviews.
Work with leadership to improve security processes and operations.
Support Salesforce and other SaaS/PaaS security implementations.

Skills

Security assessment

RMF/ATO knowledge

NIST SP 800-53

NIST SP 800-37

Cloud security basics

Documentation & communication

Security certifications (preferred)

Education

Bachelor's degree

Tools

SSP

POA&M

Security assessment tools

Job description

Security Specialist

As required by our governmental client, this position requires being a U.S. Citizen AND an active TS/SCI clearance

As our Security Specialist, you'll support the security, assessment, and authorization of enterprise cloud environments that power mission-critical operations in a regulated federal environment. You'll perform security control assessments, vulnerability evaluations, and compliance activities that strengthen the organization's cybersecurity posture while supporting Assessment & Authorization (A&A/ATO) efforts. Along the way, you'll partner closely with the Senior Security Architect, engineers, platform administrators, and program stakeholders to deliver secure, compliant cloud solutions that support the customer's mission.

Details, Compensation & Benefits

Estimated Starting Salary Range for Security Specialist: $160-175k

Pay commensurate with experience.

Full time benefits include:

Medical
Dental
Vision
401K
other possible benefits as provided

Benefits are subject to change with or without notice.

Onsite 5 days a week is required. Greater Washington, DC area.

Security Specialist Responsibilities Include

Conduct comprehensive assessments of management, operational, and technical security controls in accordance with NIST SP 800-53 and NIST SP 800-37.
Support Assessment & Authorization (A&A/ATO) activities, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), security artifacts, and coordination with government stakeholders.
Perform cybersecurity vulnerability assessments of enterprise cloud applications, infrastructure, and supporting systems.
Analyze security requirements and recommend technical solutions that strengthen the organization's overall cybersecurity posture.
Develop and maintain cybersecurity plans, policies, standards, and procedures supporting federal regulatory compliance.
Collaborate with engineering, infrastructure, and Salesforce platform teams to implement security controls and remediate identified findings.
Support continuous monitoring activities, security assessments, audits, and compliance reporting throughout the system lifecycle.
Evaluate cloud environments using industry-standard security tools and methodologies to identify vulnerabilities and recommend corrective actions.
Assist with RMF implementation activities, including security control validation, documentation updates, and ongoing authorization support.
Review system configurations to ensure compliance with NIST, agency security policies, and federal cybersecurity requirements.
Support identity and access management initiatives, secure configuration management, logging, auditing, and security monitoring.
Document assessment findings, technical recommendations, risk analyses, and remediation activities.
Participate in Agile delivery activities, planning sessions, technical reviews, and documentation efforts.
Collaborate with program leadership and technical teams to continuously improve security processes and operational effectiveness.
Support enterprise cloud environments, including Salesforce and other SaaS/PaaS platforms, ensuring secure implementation and ongoing compliance.

Security Specialist Experience, Education, Skills, Abilities Requested

Bachelor's degree and a minimum of seven (7) years of Information Assurance, cybersecurity, RMF, or Assessment & Authorization (ATO) experience.
Demonstrated experience conducting security assessments utilizing NIST SP 800-53 and NIST SP 800-37.
Experience supporting Assessment & Authorization (A&A/ATO) activities, including development and maintenance of SSPs, POA&Ms, security assessment documentation, and continuous monitoring artifacts.
Experience performing cybersecurity vulnerability assessments and supporting remediation efforts within enterprise cloud environments.
Working knowledge of Risk Management Framework (RMF), federal cybersecurity policies, and cloud security best practices.
Experience supporting cloud platforms such as AWS, AWS GovCloud, Azure Government, or comparable enterprise cloud environments.
Experience supporting Salesforce or other SaaS/PaaS platforms, including security controls, access management, and secure platform configuration, is highly desirable.
Strong documentation, analytical, and communication skills developed in regulated, high-security environments.
Security certifications such as Security+, CySA+, CISSP, CCSP, or CISM are preferred.
Must be a U.S. Citizen and hold an active TS/SCI clearance.
Must pass pre-employment qualifications of Cherokee Federal.