Graham Technologies is seeking an experienced IT Cybersecurity Specialist to provide cybersecurity engineering, Risk Management Framework support, continuous monitoring, vulnerability management, incident response, and authorization support for a Federal information system. The specialist will help maintain a secure, compliant, and resilient operating environment.
LocationKey Responsibilities- Support the development, maintenance, and assessment of security authorization documentation, including the System Security Plan, security controls, assessment artifacts, and supporting evidence.
- Apply the Risk Management Framework and applicable NIST security and privacy controls throughout the system lifecycle.
- Coordinate continuous monitoring activities, vulnerability scanning, remediation tracking, and monthly Plan of Action and Milestones updates.
- Develop and maintain access-control, role-based access, incident-response, contingency, and security operating procedures.
- Analyze security findings, assess risk, recommend corrective actions, and verify remediation effectiveness.
- Support security engineering reviews for cloud, platform, application, API, and DevSecOps implementations.
- Coordinate incident triage, containment, investigation, documentation, and recovery activities.
- Support static and dynamic application security testing, penetration-testing coordination, and secure-code review activities.
- Maintain audit-ready cybersecurity documentation and respond to security assessments, reviews, and data calls.
- Collaborate with system owners, developers, administrators, project managers, and Government cybersecurity stakeholders.
Required SkillsExperience- Minimum five (5) years of professional cybersecurity experience.
- Experience supporting RMF, security authorization, continuous monitoring, vulnerability management, or incident response activities.
- Experience applying NIST SP 800-53 controls and maintaining cybersecurity documentation.
- Experience supporting Federal information systems or regulated environments.
Education- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.
ClearanceCertifications / Tools- Active CompTIA Security+ or higher
- Experience with vulnerability scanners, SIEM platforms, GRC tools, ticketing systems, and Microsoft collaboration tools.
Desired SkillsExperience- Experience securing cloud-native, ServiceNow, DevSecOps, or CI/CD environments.
- Experience with supply-chain risk management, Zero Trust, penetration testing, or application security.
Education- Master's degree in Cybersecurity, Information Assurance, or a related discipline.
Certifications- CISSP, CASP+, CCSP, CISM, CySA+, or equivalent advanced certification.
CompensationAt Graham Technologies, we believe in treating everyone with fairness and respect. Our compensation package is designed to ensure fair pay for work, reflecting our commitment to integrity.
Many IT companies offer similar services, but what truly sets us apart is our people! We care deeply about our employees and consistently show our appreciation-not just for the final outcomes, but also for the effort and dedication shown every step of the way. Additionally, our generous benefits package supports our team members in living fulfilling and prosperous lives.
Here are just a few highlights of what we offer:
- Four Weeks of Accrued PTO in the First Year
- Eleven Paid Federal Holidays
- Comprehensive Health, Dental, Vision, and Life Insurance
- 401(k) Plan with Annual Employer Contributions
- Flexible Schedules
- Reimbursements for Continued Education and Training
