Senior Cybersecurity Specialist – Risk & Incident Lead

CPMG; Washington (District of Columbia); On-site; USD 115,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan with company matching

Paid time off

Job summary

CPMG is seeking a Senior Cybersecurity Specialist to support the Surface Transportation Board (STB) IT modernization efforts. This contract role requires implementing strong security programs, conducting risk analyses, and guiding incident response to protect critical systems.

You will ensure compliance with FISMA and FEDRAMP, coordinate audits, and help advance security practices across IT projects within a DoD contractor environment.

Qualifications

• Minimum 5–7 years in cybersecurity with threat analysis, incident response, and risk management.
• Able to obtain Interim/Final Public Trust clearance and maintain it.
• Bachelor's degree in a related field; relevant certifications are a plus.

Responsibilities

• Perform gap analysis on security infrastructure, plans, policies and procedures.
• Update security documentation and support cybersecurity efforts.
• Ensure FISMA and FEDRAMP compliance across information systems.
• Ensure IT projects meet FISMA standards and integrate security requirements.
• Manage information security incident response and risk management activities.
• Prepare and report information for audits; support security/privacy resolutions.
• Provide management briefing on progress of cybersecurity activities.

Skills

Cybersecurity problem-solving

Written and verbal communication

Independent and team work

MS Office (Word, Outlook, Excel, Power

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Firewalls

IDS/IPS

SIEM

Endpoint protection

Job description

CPMG is seeking a Senior Cybersecurity Specialist to support the Surface Transportation Board (STB) IT modernization efforts. This contract role requires implementing strong security programs, conducting risk analyses, and guiding incident response to protect critical systems.

You will ensure compliance with FISMA and FEDRAMP, coordinate audits, and help advance security practices across IT projects within a DoD contractor environment.