Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field; equivalent experience may be considered.
Experience in cybersecurity operations, security engineering, RMF, system authorization, assessment and compliance, vulnerability management, or incident response.
Knowledge of NIST Risk Management Framework and related security guidance.
Experience developing or reviewing authorization artifacts and managing POA&Ms.
Hands-on knowledge of vulnerability scanning, secure configuration assessment, and incident handling.
Familiarity with eMASS and SIEM or other cybersecurity platforms.
Current Security+ certificate (CISSP or equivalent preferred) and active Secret security clearance.
Responsibilities
Implement and maintain cybersecurity safeguards across various environments.
Support the full Risk Management Framework lifecycle and Authority to Operate process.
Develop and review RMF artifacts such as System Security Plans and Security Assessment Reports.
Conduct security control assessments and vulnerability scans using approved tools.
Analyze findings and recommend remediation while tracking vulnerabilities.
Apply security engineering principles throughout the system lifecycle.
Monitor alerts and investigate suspected incidents, supporting recovery and reporting.
Benefits
Opportunity to work in a dynamic and mission-critical environment.
Engagement with cutting-edge cybersecurity technologies and practices.
Collaboration with multidisciplinary teams across government and contractor sectors.
Potential for professional development and training opportunities.
Contribution to national security and defense initiatives.
Full Job Description
Cybersecurity Specialist
Wright-Patterson AFB
*This position is contingent upon contract award and the actual job description may vary based on specific contract requirements and organizational needs.*
Responsibilities:
Implement and maintain cybersecurity safeguards for enterprise, cloud, network, application, and data environments, including firewalls, intrusion detection and prevention systems, security information and event management tools, endpoint protections, and Defensive Cyber Operations platforms.
Support the full Risk Management Framework lifecycle and Authority to Operate process, including system categorization, control selection and implementation, assessment preparation, authorization package development, and continuous monitoring.
Develop, maintain, and review RMF artifacts such as System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control evidence, architecture documentation, and authorization status reports.
Conduct security control assessments, configuration reviews, vulnerability scans, software and container security testing, log analysis, and other technical evaluations using approved tools, processes, and environments.
Analyze findings, determine risk and mission impact, recommend practical remediation, and track vulnerabilities and corrective actions through closure in coordination with system owners, administrators, developers, ISSMs, assessors, and authorizing officials.
Apply security engineering principles throughout the system lifecycle, including security requirements analysis, secure architecture and design reviews, control implementation, system hardening, STIG validation, and security testing.
Monitor and analyze alerts, events, threat information, and system activity; investigate suspected incidents; preserve relevant evidence; support containment, eradication, recovery, root-cause analysis, and after-action reporting.
Assess compliance with DoW, Department of the Air Force, AFRL, NIST, CNSS, FISMA, and organizational cybersecurity policies, standards, and technical guidance.
Support identity, credential, and access management capabilities, including multifactor authentication, identity lifecycle management, federation, single sign-on, privileged access, and least-privilege enforcement.
Evaluate cloud and containerized environments for secure configuration and compliance across applicable AWS, Azure, or Google Cloud services, and advise engineering teams on secure migration and deployment practices.
Use and support cybersecurity systems such as eMASS, SIEM, vulnerability management, endpoint security, asset discovery, configuration management, and compliance reporting tools.
Assess Zero Trust implementation and recommend improvements to identity, device, network, application, data, visibility, analytics, and automation capabilities.
Prepare accurate vulnerability scan compliance reports, cybersecurity findings and mitigation reports, incident reports, technical briefings, dashboards, procedures, and status updates for technical and leadership audiences.
Maintain awareness of evolving threats, vulnerabilities, attack techniques, security technologies, and defensive practices; contribute to playbooks, standards, knowledge articles, training, and security awareness activities.
Requirements:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; equivalent relevant education, training, and experience may be considered.
Relevant experience supporting cybersecurity operations, security engineering, RMF, system authorization, assessment and compliance, vulnerability management, or incident response in complex enterprise environments.
Working knowledge of the NIST Risk Management Framework and security guidance, including NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-160, CNSSI 1253, DoDI 8510.01, and applicable DoW and Air Force cybersecurity requirements.
Experience developing or reviewing authorization artifacts, assessing security controls, documenting evidence, managing POA&Ms, and supporting continuous monitoring activities.
Hands-on knowledge of vulnerability scanning, secure configuration assessment, STIGs, patch and remediation tracking, network and endpoint security, log analysis, and cybersecurity incident handling.
Familiarity with eMASS and one or more SIEM, vulnerability management, endpoint security, cloud security, container security, asset discovery, or compliance automation platforms.
Understanding of TCP/IP networking, common operating systems, identity and access management, multifactor authentication, encryption, secure system administration, and defense-in-depth principles.
Ability to analyze technical findings, assess risk, prioritize remediation, preserve evidence when required, and communicate clear recommendations to technical and nontechnical stakeholders.
Strong technical writing, collaboration, analytical, and problem-solving skills, with the ability to produce accurate reports and work effectively across multidisciplinary Government and contractor teams.
Current Security+ certificate (CISSP or equivalent preferred), in accordance with DoDM 8140.03, plus required operating system or platform credential.
Active Secret security clearance required; ability to obtain and maintain additional access or a higher-level clearance when required by the assigned program.
Ability to obtain and maintain required Common Access Card, system access, and annual security, privacy, CUI, and role-based training requirements.
