Sr. Security Specialist

StratasCorp; Suffolk (VA); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a Senior Security Specialist to join their innovative team in Suffolk, VA. This full-time position offers a unique opportunity to contribute to cutting-edge cybersecurity solutions within the Department of Defense sector. The ideal candidate will have extensive experience in developing and implementing security measures, ensuring compliance with regulations, and managing system vulnerabilities. With a focus on collaboration and excellence, you will play a vital role in safeguarding critical information technology systems. Join a forward-thinking company that values diversity, leadership, and a commitment to quality, where your skills will make a significant impact.

Benefits

Medical Insurance

Dental Insurance

Vision Insurance

401K with Company Match

Paid Time Off

Life Insurance

Disability Benefits

Qualifications

• Over ten years of experience in cybersecurity solutions.
• Experience with RMF and security control implementation.
• IAT II or III certification required.

Responsibilities

• Plan and implement security measures for computer networks.
• Assess system vulnerabilities and propose mitigation strategies.
• Respond to security breaches and maintain cybersecurity documentation.

Skills

Cybersecurity Solutions Development

Risk Management Framework (RMF)

Vulnerability Risk Assessments

Configuration Management

Incident Response

Excellent Communication Skills

Education

BA/BS in Computer Science or related field

AA/AS with additional experience

High School diploma with additional experience

Tools

eMASS

Atlassian Jira

Atlassian Confluence

Job description

At StratasCorp, our mission strives to put employees first while still being recognized as a leader in the Department of Defense Information Technology sector. We believe in a continuing pursuit of customer satisfaction and operational excellence while exceling in service innovation. We are looking for employees who value corporate culture, leadership, diversity, and commitment to quality, because we are #TeamStratas.

Location

Suffolk, VA - Suffolk, VA US (Primary)

Category

Information Technology

Job Description

In pursuit of a future contract award, we are seeking a Senior Security Specialist to join our team of qualified, diverse professionals. This is a full-time (regular) exempt (salary) position located in Suffolk, VA with potential for limited teleworking, subject to customer approval. Where innovation meets excellence, we drive the future of technology. As a valued member of our team, you will play a key role in delivering state-of-the-art Information Technology solutions for the Naval Information Forces (NAVIFOR) N4 Directorate. We are looking for qualified candidates who are ready to collaborate, innovate, and make an impact in a fast-paced, forward-looking environment where teamwork is at the heart of our success. Primary responsibilities include:

* Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information

* Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies

* Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure

* Respond to computer security breaches, spillages, and viruses

* Responsible for maintaining cyber hygiene of the systems in accordance with DOD and DON policy and the program continuous monitoring strategy

* Oversee system compliance with the system Authorization Decision Document (ADD) and ensure no changes are made capable of affecting the ADD without proper authorization from the NAO

* Responsible for ensuring all cybersecurity documentation is maintained and updated per DOD and DON policy

* Maintain application and system configuration management in required DON and DOD reporting tools and applications

* Perform system audits to ensure alignment with ADD and approved baselines

Job Requirements

To be considered for this position, you must meet the education and experience listed below:

* Over ten (10) years of experience developing and implementing system cybersecurity solutions

* BA/BS from a US Department of Education accredited college or university in Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, Computer Engineering, Mathematics field or Engineering field. Two (2) years of relevant experience may be substituted for one (1) year of formal education as follows:

* AA/AS plus an additional 4 years of experience (14 years total)

* High School diploma plus an additional 8 years of experience (18 total)

MINIMUM QUALIFICATIONS:

To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:

* Experience with the Risk Management Framework (RMF), identifying and tailoring security control baselines with applicable overlays, developing and maintaining the Security Plan for RMF, leading security control implementation and testing, performing vulnerability risk assessments in accordance with RMF Process Guide, assisting with security testing as required for Authorization and Accreditation (A&A) or annual security reviews, assisting in mitigating and closing open vulnerabilities, and recording security control compliance for systems

* Experience managing system cybersecurity controls, status, and artifacts in eMASS application

* Experience in developing and managing configuration management (change configuration/release management) processes

* Experience with Atlassian Jira or similar issue and project tracking software. Experience with Atlassian Confluence or similar knowledge management software

* IAT II or III certification (e.g., Security+, CISSP, or equivalent)

* Excellent written and verbal communication skills

* US Citizenship is required due to US government contract requirements

PREFERRED QUALIFICATIONS:

Candidates with experience or knowledge in these desired skills will be given preferential consideration:

* Familiarity with CAS, NTIRA, CENTRIXS-M, and SECREL systems

* Experience with AWS GovCloud, cloud security, and DevSecOps integration

* Strong background in incident response, risk assessment, and security control implementation

* Experience working in Agile/Scrum environments

* Proficiency in network security, ITSM frameworks (ITIL, COBIT, or CMMI), and risk management methodologies

* ITIL v3 (or later) foundations certification

* Relevant AWS cloud certification(s), preferably AWS Certified Security - Specialty

Security Clearance

Secret

Job Type

Full-time

StratasCorp provides a complete compensation package with competitive wages and benefits that include medical, dental, and vision insurance, FSA & HSA accounts, disability and other income protection benefits, life insurance, paid personal time-off benefits, paid holidays, and a 401K Saving Plan with a company matching contribution.

StratasCorp is committed to equal opportunity in employment, actively seeking to build a diverse and talented workforce, including individuals with disabilities and protected veterans.