IT Cybersecurity Specialist

Anticipated Opportunity – Federal Government Program

Important Hiring Notice:
This position is being posted in anticipation of a potential upcoming contract award. The position is not immediately available. Osi Vision anticipates that hiring for this role may begin approximately 30-90 days from the date of posting, subject to contract award, Government direction, funding, and program start requirements. Candidates who apply may be contacted in advance to discuss qualifications, availability, clearance status, and interest.

The IT Cybersecurity Specialist will support a Federal Government defense program by designing, implementing, and sustaining cybersecurity controls for a Service Now environment. The position will help protect Controlled Unclassified Information (CUI), support Department of Defense cybersecurity requirements, apply Zero Trust principles, and coordinate with Government cybersecurity and IT stakeholders to maintain system compliance.

The IT Cybersecurity Specialist will develop and maintain Risk Management Framework (RMF) documentation, support vulnerability remediation, conduct continuous monitoring activities, and help maintain the system's Authority to Operate (ATO) throughout its lifecycle. This position requires hands-on Service Now security experience and strong knowledge of Federal cybersecurity frameworks, access controls, identity management, and system authorization processes.

• Architect, configure, and maintain Service Now security controls, including Role-Based Access Controls (RBAC), Access Control Lists (ACLs), Data Policies, Client Scripts, encryption controls, and related security configurations.
• Align Service Now security configurations with applicable Department of Defense Zero Trust principles and Federal cybersecurity requirements.
• Implement and maintain appropriate data segregation, access restrictions, authentication controls, and security boundaries within controlled Government environments.
• Create and maintain detailed security documentation, including security schemas, access-control matrices, system roles, groups, ACLs, and data-segregation rules.
• Coordinate with Government IT, cybersecurity, security architecture, and authorization stakeholders to maintain required cybersecurity protocols and compliance requirements.
• Develop, maintain, and update the System Security Plan (SSP) and required Risk Management Framework documentation supporting system authorization and sustainment.
• Map Service Now platform configurations and security controls to applicable NIST Special Publication 800-53 requirements and other Federal cybersecurity standards.
• Support implementation of CUI security requirements consistent with NIST SP 800-171, NIST SP 800-172, and applicable Department of Defense security controls.
• Develop, track, manage, and update Plans of Action and Milestones (POA&Ms) documenting cybersecurity findings, corrective actions, remediation activities, and closure status.
• Support vulnerability management activities, including reviewing scan results, coordinating remediation, tracking findings, and validating corrective actions.
• Conduct or support continuous monitoring activities, security reviews, configuration assessments, penetration-test reviews, compliance checks, and other security assessment activities.
• Prepare or support Security Assessment Reports, cybersecurity status reports, compliance documentation, and other security-related deliverables.
• Review proposed system or application changes for potential cybersecurity impacts prior to implementation or production deployment.
• Support maintenance of cybersecurity workforce qualification and certification documentation in accordance with applicable Department of Defense workforce requirements.
• Maintain awareness of emerging cybersecurity threats, vulnerabilities, Federal requirements, and Service Now security capabilities that may affect program operations.

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, Information Systems, or a related technical discipline.
• Minimum of five years of practical cybersecurity experience.
• Active Secret security clearance.
• Demonstrated experience applying Department of Defense cybersecurity workforce qualification requirements, including DoDM 8140.03 and applicable Defense Cyber Workforce Framework work roles.
• Demonstrated expertise applying NIST SP 800-53 security controls and supporting Risk…