Job Description

Security Specialist

***As required by our governmental client, this position requires being a U.S. Citizen AND an active TS/SCI clearance***

As our Security Specialist, you'll support the security, assessment, and authorization of enterprise cloud environments that power mission-critical operations in a regulated federal environment. You'll perform security control assessments, vulnerability evaluations, and compliance activities that strengthen the organization's cybersecurity posture while supporting Assessment & Authorization (A&A/ATO) efforts. Along the way, you'll partner closely with the Senior Security Architect, engineers, platform administrators, and program stakeholders to deliver secure, compliant cloud solutions that support the customer's mission.

Details, Compensation & Benefits:

Estimated Starting Salary Range for Security Specialist: $160-175k

Pay commensurate with experience.

Full time benefits include Medical, Dental, Vision, 401K, and other possible benefits as provided. Benefits are subject to change with or without notice.

Onsite 5 days a week is required. Greater Washington, DC area.

Security Specialist Responsibilities Include:
• Conduct comprehensive assessments of management, operational, and technical security controls in accordance with NIST SP 800-53 and NIST SP 800-37.
• Support Assessment & Authorization (A&A/ATO) activities, including System Security Plans (SSPs), Plans of Action & Milestones (POA&Ms), security artifacts, and coordination with government stakeholders.
• Perform cybersecurity vulnerability assessments of enterprise cloud applications, infrastructure, and supporting systems.
• Analyze security requirements and recommend technical solutions that strengthen the organization's overall cybersecurity posture.
• Develop and maintain cybersecurity plans, policies, standards, and procedures supporting federal regulatory compliance.
• Collaborate with engineering, infrastructure, and Salesforce platform teams to implement security controls and remediate identified findings.
• Support continuous monitoring activities, security assessments, audits, and compliance reporting throughout the system lifecycle.
• Evaluate cloud environments using industry-standard security tools and methodologies to identify vulnerabilities and recommend corrective actions.
• Assist with RMF implementation activities, including security control validation, documentation updates, and ongoing authorization support.
• Review system configurations to ensure compliance with NIST, agency security policies, and federal cybersecurity requirements.
• Support identity and access management initiatives, secure configuration management, logging, auditing, and security monitoring.
• Document assessment findings, technical recommendations, risk analyses, and remediation activities.
• Participate in Agile delivery activities, planning sessions, technical reviews, and documentation efforts.
• Collaborate with program leadership and technical teams to continuously improve security processes and operational effectiveness.
• Support enterprise cloud environments, including Salesforce and other SaaS/PaaS platforms, ensuring secure implementation and ongoing compliance.

Security Specialist Experience, Education, Skills, Abilities Requested:
• Bachelor's degree and a minimum of seven (7) years of Information Assurance, cybersecurity, RMF, or Assessment & Authorization (ATO) experience.
• Demonstrated experience conducting security assessments utilizing NIST SP 800-53 and NIST SP 800-37.
• Experience supporting Assessment & Authorization (A&A/ATO) activities, including development and maintenance of SSPs, POA&Ms, security assessment documentation, and continuous monitoring artifacts.
• Experience performing cybersecurity vulnerability assessments and supporting remediation efforts within enterprise cloud environments.
• Working knowledge of Risk Management Framework (RMF), federal cybersecurity policies, and cloud security best practices.
• Experience supporting cloud platforms such as AWS, AWS GovCloud, Azure Government, or comparable enterprise cloud environments.
• Experience supporting Salesforce or other SaaS/PaaS platforms, including security controls, access management, and secure platform configuration, is highly desirable.
• Strong documentation, analytical, and communication skills developed in regulated, high-security environments.
• Security certifications such as Security+, CySA+, CISSP, CCSP, or CISM are preferred.
• Must be a U.S. Citizen and hold an active TS/SCI clearance.
• Must pass pre-employment qualifications of Cherokee Federal.

Similar searchable job titles:
• Information Assurance Analyst
• Information System Security Officer (ISSO)
• Cybersecurity Analyst
• RMF Analyst
• ATO Security Analyst
• Cloud Security Analyst

Keywords:
• RMF
• ATO
• NIST SP 800-53
• NIST SP 800-37
• SSP
• POA&M
• Information Assurance
• Cloud Security
• Salesforce Security
• TS/SCI

Please Note: This position is pending a contract award. If you are interested in a future with Cherokee Federal, APPLY TODAY! We are accepting applications for this future anticipated need.