Description
About the Opportunity
The IT Security Specialist II supports timely, high-quality security assessments for High and Moderate systems under the Risk Management Framework (RMF) in a remote environment. This role assesses vulnerabilities, evaluates security controls, operates security scanning and monitoring tools, maintains security artifacts and CSAM records, and supports POA&M remediation and evidence retesting.
Success in this role means maintaining a secure, compliant, and well-documented environment by applying NIST, FISMA, STIG, and agency-specific requirements, collaborating effectively with system teams and federal stakeholders, and consistently delivering accurate work within established timelines.
Requirements
What You'll Do
The IT Security Specialist II conducts security assessments, monitors and remediates vulnerabilities, maintains compliance documentation and CSAM records, supports POA&M activities, and collaborates with system teams to ensure federal security requirements are met
Responsibilities include:
- Operate and maintain security scanning and monitoring tools to identify vulnerabilities and monitor system security.
- Collect, organize, and maintain security artifacts for compliance and audit purposes.
- Update and maintain IT security policies, procedures, SOPs, templates, and checklists for security operations and assessments.
- Document and maintain CSAM entries to reflect current system compliance status.
- Assist with POA&M updates, including tracking remediation progress and retesting evidence to verify resolution of findings.
- Support vulnerability management and remediation activities, ensuring compliance with STIGs, NIST standards, and federal cybersecurity policies.
- Review all relevant system and core security documentation for assessments.
- Document computer security and emergency measures policies, procedures, and tests.
- Perform security risk assessments and evaluate system security controls to ensure effective security measures and compliance.
- Collaborate with program managers, developers, and infrastructure teams to embed security throughout the system lifecycle.
- Train and mentor junior staff in cybersecurity best practices and federal compliance requirements.
- Perform other duties and responsibilities as assigned
What You'll Bring
Required Qualifications
- Bachelor’s degree in Engineering, Information Technology, Business, or a related field (or equivalent work experience).
- 2-4 years of experience in IT security, with at least 3 years supporting federal government systems.
- Senior, hands on AWS security expert with deep experience in complex cloud environments.
- Experience with Security Repository Tools, such as Cyber Security Assessment and Management (CSAM)
- Experience with NIST SP 800-37, NIST 800-53, FISMA A&A, and federal IT security policies and standards
- Strong threat mindset and ability to perform comprehensive QA on security findings and reports.
- Proven experience implementing, validating, and monitoring AWS security controls and metrics.
- Skilled in cloud vulnerability management, including identification, prioritization, and remediation coordination.
- Understanding of security controls and enclave requirements for FISMA High/Moderate (or similar).
- Able to learn and support POA&M processes as needed.
- Outstanding communication skills and the right temperament to support a challenging ISSO—calm, professional, and diplomatic.
- Proficiency in applying IT security concepts, methodologies, principles, procedures and using industry-standard IT security tools
- Proficiency with enterprise architecture methodologies, concepts, procedures, principles, and tool
- Familiarity with scanning and monitoring tools and conducting security assessments in cloud environments
- Proficiency in Microsoft Office suite (Word, Excel, PowerPoint, Visio and Project)
- Strong verbal and written communication skills, and ability to adapt to changing environments while working with federal clients and system teams.
Preferred Qualifications
- Relevant professional certifications: CISSP, CEH, CISM, CCSP, CISA, CompTIA Security+
- Additional industry certifications (e.g., AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate)•
- Experience with network, endpoint, cloud, and identity/access security, including penetration testing.
- Experience developing and maintaining IT security documentation, including authorization packages, policies, SOPs, and templates.
- Maintain awareness of evolving cybersecurity threats, standards, and best practices
Work authorization/security clearance requirements
- Ability to obtain security clearance
Work environment
- This work will be completed in a remote environment.
Physical demands
- Prolonged periods of sitting at a desk and working on a computer.
Travel required: No
Proficiency Requirement
- The employee is expected to demonstrate proficiency in all essential job functions, tools, and processes related to this position within the first 90 days of employment. This includes acquiring a thorough understanding of job-specific responsibilities, systems, and workflows as outlined during onboarding and training. Failure to meet this requirement may result in additional training, reassessment, or other actions as deemed necessary by management.
Summary
GAMA-1 also offers a variety of benefits, including health insurance coverage, life and disability insurance, 401(k) savings plan, training and career development opportunities, paid holidays and paid time off (PTO - to cover vacation, illness or disability, appointments, emergencies or other situations that require time off from work). For more information click here.
ABOUT GAMA-1
GAMA-1 is a rapidly growing technology business that is based in Greenbelt, Maryland. GAMA-1 Technologies provides strategic information assurance, information security, and business enterprise and networking solutions to the Federal Government. Our success is based on the utilization of industry and agency standards, establishment of standardized processes, and IT Services expertise. At GAMA-1, we believe employees should grow, achieve, and develop just as the company grows, achieves, and develops. GAMA-1 is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com.
GAMA-1 is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to: veteran status, uniformed servicemember status, race, color, religion, sex, sexual orientation, gender identity, age, pregnancy (including childbirth, lactation and related medical conditions), national origin or ancestry, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics), domestic violence victims, political orientation, status as a smoker or tobacco user, hairstyle, use of a service animal, education status, familial status, HIV/AIDS status, height, weight, reproductive healthcare decisions or any other category protected by federal, state or local law.
Bachelor's degree in Engineering, IT, Business or related field (or equivalent experience); 2-4 years IT security experience with 3+ years supporting federal systems; AWS security expertise; CSAM, NIST, FISMA knowledge; ability to obtain security clearance.
Key Responsibilities
- conducting security assessments
- monitoring vulnerabilities
- maintaining compliance documentation
Skills & Tools
CSAM, NIST SP 800-37, NIST 800-53, FISMA, Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Visio, Microsoft Project, AWS
Job Details
- Category: Information Technology
- Seniority: Mid Level
- Commitment: Full Time
- Workplace: Remote — United States
- Languages: English
Benefits
- Generous paid time off
- Retirement plan
About GAMA-1 Technologies
A technology business providing information assurance, security, and enterprise networking solutions to the Federal Government. — Industry: Information Technology