IT Security Specialist

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full-Time Regular Alexandria, VA, US

10 days ago Requisition

Salary Range: $ To $ Annually

KMS Solutions, LLC is a technical management / solutions company that specializes in engineering, analysis, and cyber security. Founded in 2005, KMS is a certified small business with nearly two decades of experience supporting the Department of Defense as well as many other departments and programs critical to our Nation’s security and well-being.

KMS is a three-time winner of the USA Today Top Workplaces recognizing quality workplace cultures across the United States who put their employees first. Additionally, KMS has won multiple regional Top Workplaces awards and Culture Excellence Awards for Compensation & Benefits, Innovation, Leadership, Purpose & Values and Work-Life Flexibility.

KMS solutions, LLC is seeking a highly motivated individual for an IT Security Specialist position providing cybersecurity, information assurance, and Risk Management Framework (RMF) support to NAVSEA PMS 340 programs. The role ensures that PMS 340 systems comply with DoD, DoN, NAVSEA, NIST, and CNSSI cybersecurity requirements throughout development, acquisition, modernization, and sustainment. Responsibilities include supporting RMF package development, conducting security control assessments, assisting with system accreditation, performing vulnerability analysis, supporting Cybersecurity Test & Evaluation (T&E) phases, and providing cybersecurity engineering support across NSW/SOF undersea, surface, and mission systems.

Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

• Support development, maintenance, and updates of RMF accreditation packages and documentation for PMS 340 systems.
• Review, validate, and update System Security Plans (SSPs), POA&Ms, Security Assessment Reports, and risk assessments.
• Conduct security control assessments in accordance with NIST SP 800‑53, SP 800‑53A, CNSSI 1253, DoD RMF, DoN cybersecurity guidance, and NAVSEA business rules.
• Perform vulnerability analysis using ACAS, SCAP, and Nmap, supporting compliance validation for PMS 340 systems.
• Support Cybersecurity Test & Evaluation phases:
  Cooperative Vulnerability Identification, Adversarial Testing, Vulnerability & Penetration Assessment, and Adversarial Assessment.
• Assist system accreditation processes, ensuring PMS 340 systems meet DoD IA and cybersecurity requirements.
• Ensure proper evaluation of cybersecurity risk, compliance, and monitoring across undersea, surface, air, and expeditionary systems within PMS 340.
• Coordinate cybersecurity activities and meetings with government stakeholders, including NAVSEA 03 and NSW/SOF program partners.
• Prepare cybersecurity reports, briefs, and technical documentation supporting program decisions.

• Bachelor’s degree in cybersecurity, information systems, engineering, mathematics, or related discipline.
• Greater than 5 years of relevant Cybersecurity experience.
• Operating Systems certification (Windows or Linux).
• Experience with RMF, A&A processes, and cybersecurity validation of DoD IT systems.
• Experience using eMASS.
• Equivalent combinations of education and experience will be considered.

• Experience supporting DoD or Navy cybersecurity programs (NSW/SOF or undersea systems preferred).
• Experience with NIST RMF, Navy cybersecurity policy, and DIACAP-to-RMF transitions.
• Systems engineering or system integration experience.
• Proficiency in…