Loading...
SeniorFull-timePythonDockerAgileCI/CD
Salary Range
$66,300 - $89,700 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are seeking a highly skilled Information Security Specialist to support Department of Defense (DoD), Risk Management Framework (RMF), and Intelligence Community Directive (ICD) 503. This role requires strong security engineering principles and hands-on technical expertise.
Key Responsibilities
- →Develop layered protections and establish cybersecurity SOPs for authorization boundaries
- →Apply system development life cycle principles such as Agile
- →Perform vulnerability management and implement fix actions across Windows, Linux/Unix, and containerized environments
- →Engineer and automate security configurations using tools like Ansible and Python
- →Implement and maintain DISA STIGs and CIS Benchmarks across diverse platforms
- →Manage Linux administration and package management, as well as Windows Domain Controller compliance
- →Support container security engineering with Docker and related technologies
- →Conduct vulnerability scans using ACAS and drive remediation efforts
- →Collaborate with developers to ensure secure coding practices
- →Delineate physical and logical security boundaries for systems and networks
- →Ensure software developers are trained on secure software development practices
- →Generate and interpret vulnerability scans, implement STIGs and CIS Benchmarks
- →Provide guidance on encryption techniques and tools
Requirements
- ✓Intermediate to advanced knowledge of NIST SP 800-53 security controls and CNSSI 1253
- ✓Experience with system hardening, automation, and vulnerability remediation
- ✓Strong understanding of RMF, DoD requirements, and ICD 503
- ✓Proficiency with tools like Ansible, Python, ACAS, and container technologies
- ✓Experience with DISA STIGs and CIS Benchmarks implementation
- ✓Knowledge of platforms including RHEL, Ubuntu, Windows, VMware/ESXi, Cisco, and Juniper
- ✓Understanding of secure coding practices and CI/CD integration
- ✓Ability to interpret vulnerability scans and drive remediation efforts
- ✓Experience with encryption techniques and tools
