Senior Information Security Specialist

Information Security Specialist Officer, Technical Lead, #1117

AWS Security
• RMF & ATO & NIST 800-53 & Cloud Application Security

Clearance: Active CBP, DHS, or Top Secret Clearance required Work Arrangement:
Hybrid – onsite 3 days/week during standard business hours in Ashburn, VA

Dev Technology Group is seeking a Senior Information Security Specialist to lead and develop a mid-sized team of ISSOs supporting the security, compliance, and authorization of mission-critical federal applications and information systems hosted in AWS.

This is a hands-on technical leadership role combining people leadership, federal cybersecurity expertise, and direct collaboration with government and technical stakeholders. You will mentor junior and mid-level ISSOs while partnering with system owners, developers, architects, cloud/infrastructure engineers, security professionals, and government stakeholders throughout the system development lifecycle.

You will provide practical security guidance for AWS-hosted applications, lead Risk Management Framework (RMF) and Authority to Operate (ATO) activities, oversee vulnerability management and continuous monitoring, and translate federal cybersecurity requirements into actionable guidance for technical teams.

• Lead, mentor, and develop a team of ISSOs by establishing priorities, providing technical direction and coaching, and promoting accountability and consistent security practices.
• Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities across a portfolio of federal systems and applications.
• Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders to maintain authorizations, identify risks, and address security requirements.
• Lead vulnerability management efforts, prioritizing remediation, developing mitigation strategies, and tracking corrective actions through resolution.
• Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements
  .
• Prepare and maintain security and authorization documentation, including SSPs, ISAs, audit artifacts, and RMF documentation
  .
• Provide cybersecurity guidance for applications and systems deployed in AWS and integrate security throughout the software development lifecycle.
• Validate security implementation through technical reviews, discussions, interviews, assessments, and tabletop exercises.
• Support security audits, assessments, compliance reviews, and reviews of information systems and network connections.
• Interpret federal and client security policies and translate requirements into practical guidance for technical and development teams.
• Identify and elevate security risks, communicate priorities and remediation status, and provide clear visibility to Dev Technology leadership and government stakeholders.
• Develop and present security metrics, status reports, risk assessments, and executive briefings
  .
• Establish and improve security processes, procedures, templates, dashboards, and workflows to improve consistency, accountability, and efficiency across the ISSO team.
• Build trusted relationships with government clients through proactive communication, collaboration, and face-to-face engagement.

• Bachelor's degree and 7+ years of experience securing federal information systems.
• Demonstrated experience leading and mentoring information security professionals
  , including junior and mid-level ISSOs.
• Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders.
• Strong working knowledge of NIST Risk Management Framework…