Cybersecurity Specialist

Job Family: IT Cyber Security.

Travel Required:

Up to 10%.

Clearance Required:

Ability to Obtain Public Trust.

• Support secure operations, compliance, risk management, and continuous monitoring for a mission‑critical federal grants platform.
• Support federal security requirements, ATO support, POA&M management, incident response, security documentation, vulnerability coordination, and collaboration across technical, operational, and federal stakeholder teams.
• Assist with Grants.gov application operations, platform services, approved enhancements, transition activities, disaster recovery, and modernization coordination.
• Document and update security artifacts, conduct continuous monitoring, manage vulnerability tracking, coordinate incident response, and support ATO activities.
• Coordinate security monitoring, intrusion detection, incident notification, reporting, root‑cause analysis, and recommendations to prevent recurrence.
• Coordinate with development, operations, cloud, database, network, and application platform teams to embed security considerations into releases, configuration changes, deployments, and maintenance.
• Review system changes, designs, procedures, and documentation for security impact and compliance alignment.
• Support disaster recovery, continuity of operations, backup recovery demonstrations, and contingency planning from a security perspective.
• Maintain system security documentation, risk registers, incident reports, remediation plans, operating procedures, and compliance evidence.
• Support transition‑in and transition‑out activities, validating security documentation and responsibilities.
• Prepare and communicate security status, risks, issues, remediation progress, incident impacts, control gaps, and compliance recommendations to executive and federal audiences.

• Bachelor’s degree (or 4 years of work experience in lieu of a degree).
• 5+ years of experience supporting cybersecurity, information assurance, compliance, risk management, or security operations for enterprise systems, federal IT programs, or mission‑critical applications.
• Experience supporting ATO activities, security documentation, control evidence collection, assessment preparation, continuous monitoring, POA&M management, or remediation tracking.
• Working knowledge of federal cybersecurity requirements and frameworks (FISMA, NIST 800‑53, FedRAMP, privacy requirements, assessment processes, risk management practices).
• Experience coordinating vulnerability management, patch remediation, security findings, exception requests, scan analysis, incident response, and compliance evidence across technical teams.
• Strong skills in security control implementation, evidence collection, assessment readiness, continuous monitoring, POA&M tracking, vulnerability remediation, risk acceptance, exception management, incident response, root‑cause analysis, security monitoring, and corrective action planning.
• Experience with secure SDLC, Dev Sec Ops , release coordination, configuration management, and change impact analysis.
• Experience using security, compliance, and collaboration tools such as vulnerability scanners, ticketing systems, GRC platforms, Jira, Azure Dev Ops, Confluence, SharePoint, Microsoft Teams, or similar.
• Excellent communication, analytical, documentation, coordination, and problem‑solving skills.
• Must be able to obtain and maintain a Federal or DoD “PUBLIC TRUST” clearance; candidates with an active public trust or suitability are preferred.

• Experience supporting federal grants management systems, shared‑service platforms, or large public‑facing government applications.
• Experience with Grants.gov, HHS, ACF, CMS, HRSA, NIH, or other federal grant‑making agencies.
• Knowledge of HHS Enterprise Performance Life Cycle (EPLC), federal IT governance, ATO processes, and compliance‑driven delivery.
• Experience with public‑facing web applications, applicant submissions, grantor user management, S2S integrations, forms processing, chatbot support, helpdesk escalations, and system status communications.
• Experience supporting cloud‑hosted applications, AWS environments, application platform…