> Markdown version of [/jobs/ext/2057850-cybersecurity-specialist-mid-senior](https://www.wearedevelopers.com/jobs/ext/2057850-cybersecurity-specialist-mid-senior). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Specialist - Mid/Senior

- **Company:** SBG Technology Solutions
- **Location:** United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing Security, CompTIA Security+, Cyber Security, Identity and Access Management, Information Systems Security Architecture Professional, Zero Trust Network Access, Software Engineering, Software Vulnerability Management, Data Logging, Software Security, Information Technology, Devsecops, Plan of Action and Milestones
- **Published:** August 14, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9089216/cybersecurity-specialist-midsenior

## About the Role

Must be a US Citizen
Must be able to pass a Federal background check
Must be determined suitable for federal employment, In-depth knowledge of FedRAMP High security controls and the NIST Risk Management Framework (RMF) process
Proficiency in security architecture review and cloud security engineering within AWS or comparable government cloud environments
Experience conducting vulnerability management assessments and evaluating continuous monitoring programs
Working knowledge of identity and access management (IAM), encryption standards, and access control frameworks
Ability to develop and review authorization documentation including SSPs, POA&Ms, and security assessment reports
Strong analytical and written communication skills; able to document and present security findings clearly to both technical and non-technical audiences
Capable of managing concurrent assessment workstreams and delivering findings within defined project timelines

Preferred Skills:
Familiarity with HIPAA Security Rule requirements and healthcare application security considerations
Experience with AWS security tooling (e.g., AWS Security Hub, GuardDuty, CloudTrail, Config)
Knowledge of DevSecOps practices and secure software development lifecycle (SSDLC) methodologies, Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline
A combination of education and experience will be considered (2 years of relevant experience equivalent to 1 year in a degree program)
Desired: Master's degree in Cybersecurity, Information Assurance, or a related field

Certification(s), Licenses:
Desired:
Certified Information Systems Security Professional (CISSP)
Certified Information Security Manager (CISM)
CompTIA Security+ or equivalent federal baseline certification
AWS Certified Security - Specialty

Years of experience in a similar role:
Required: 8+ years of cybersecurity experience in federal or regulated environments, with demonstrated engagement in FedRAMP or RMF processes
Desired: 10+ years of cybersecurity experience including direct responsibility for ATO support or FedRAMP authorization activities

## Description

Assesses application security posture, including logging, auditing, and control implementation, against FedRAMP High baseline requirements
Supports Authority to Operate (ATO) documentation efforts and compliance readiness activities for applications undergoing onboarding assessment
Identifies cybersecurity gaps across assessed applications and recommends prioritized remediation actions with supporting rationale
Evaluates application and environment alignment with Zero Trust architecture principles and continuous monitoring requirements
Supports development of System Security Plans (SSPs), Plan of Action and Milestones (POA&M) inputs, and related security authorization artifacts
Applies Risk Management Framework (RMF) processes to security assessment activities and documents findings in accordance with NIST guidelines
Reviews identity, access control, and encryption implementations to verify compliance with applicable standards and FedRAMP controls
Conducts vulnerability management reviews and evaluates continuous monitoring capabilities for onboarding candidates
Collaborates with cloud architects, program managers, and ISV technical teams to communicate security findings and guide remediation planning

Other Duties:
Performs other duties as assigned by management in support of SBG Technology Solutions contract objectives
Travel requirements: occasional travel as required by project needs (estimated up to 10% per year)


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)