Information Systems Security Specialist

Nightwing provides technically advanced full-specturm cyber, data operations, systems integration and intelligence mission support services to meet our customers’most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing is a prime contractor to DHS, supporting the DHS Hunt and Incident Response Team (HIRT) in investigations, advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based and network-based cybersecurity analysis capabilities.

The position is for an Information Systems Security Specialist who will support HIRT’s mission by managing the full Risk Management Framework lifecycle for Information Technology systems and performing a broad range of security management activities.

• Work as part of a team of Information Assurance professionals to manage the full Risk Management Framework lifecycle for Information Technology systems.
• Assist technical and management leadership on major technology assignments and establish goals and plans that meet project objectives.
• Provide overall responsibility for security management, methods, and staffing to ensure technical requirements are met.
• Participate in client negotiations and interface with senior management.
• Support decision making and domain knowledge that impacts overall project implementation.
• Help plan, coordinate, and implement a cybersecurity lab’s information security and assist the lab in identifying its current security infrastructure, defining future programs, and designing and implementing security for lab systems.
• Assist security staff in designing, developing, engineering and implementing solutions to security requirements.
• Implement and develop DHS IT security standards and gather technical information about the lab’s mission goals, existing security products, and ongoing programs.
• Perform risk analyses, including risk assessment.
• Plan and lead major technology assignments, evaluating performance results and recommending major changes affecting short-term project growth and success.
• Function as a cyber technical expert across multiple project assignments.
• Work closely with ISSM and CISO to respond to Data Calls and satisfy requirements of ATOs.

• U.S. Citizenship.
• Active TS/SCI clearance and ability to obtain DHS Suitability.
• 5+ years of directly relevant experience in information security management.
• Hands‑on experience with Linux operating systems or Amazon Web Services.
• Experience supporting the NIST Risk Management Framework (RMF) process and contributing to a full ATO effort from initiation through authorization, including development of security documentation, control implementation statements, supporting assessment (audit) activities, and performing full POA&M management.
• Knowledge of RMF and Assessment and Authorization (A&A) documentation to include SSP, Contingency, Incident & Configuration Management planning and execution.
• Experience working on multiple complex assignments that require originality and innovation in determining how to accomplish tasks.
• Comprehensive knowledge across key tasks and high impact assignments.
• Knowledge of Computer Network Defense (CND) policies, procedures & regulations.
• Knowledge of defense‑in‑depth principles and network security architecture.
• Knowledge of ATO requirements and strong experience with POAMs.
• Proficient with Microsoft Office products (Word, Excel, PowerPoint, Visio).
• Knowledge of boundary protection and network segmentation.
• Knowledge of authentication and access management techniques.
• Experience implementing and assessing security controls for hardware, software, and network deployments.
• Ability to work collaboratively with internal and external stakeholders across physical locations.

• Experience with Risk Management Framework software (CSAM, Xacta, Archer, Reg Scale).
• Experience with host and network scanning software (Nessus, Security Center, Tenable Vulnerability Management, nmap, Wiz,…