Security Risk Threat Specialist III

• Identify, assess, and mitigate cybersecurity risks to information systems, including conducting supply chain risk assessments; develop risk mitigation plans and recommend security controls aligned with organizational needs.
• Support the Risk Management Framework (RMF) lifecycle, including system categorization, security control selection and implementation, assessment, authorization, and continuous monitoring in accordance with NIST SP 800-37 and applicable organizational policies.
• Conduct security control assessments using NIST SP 800-53A, including vulnerability scanning, documentation reviews, system configuration analysis, audit log examination, and penetration testing when required.
• Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation; track remediation actions and report unresolved risks.
• Apply security engineering principles throughout the system lifecycle in accordance with NIST SP 800-160, NIST SP 800-53, and CNSSI 1253; collaborate with technical teams to implement and validate security controls.
• Coordinate with system owners, Information System Security Managers (ISSMs), and Authorizing Official representatives to support continuous monitoring, communicate assessment findings and authorization status, and address cybersecurity compliance concerns.

• Are curious and excited about technology

• Like solving problems and figuring things out

• Can take initiative but also enjoy working with a team

• Want to keep learning, growing, and challenging themselves

If you’re someone who’s eager to jump in, learn something new, and make an impact-you’ll fit right in here., * BS in Computer Science, Cyber Security, or a related field

• Active TS clearance with SCI eligibility
• Experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, and continuous monitoring.
• Working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, applicable organizational security policies, and CNSSI 1253.
• Experience conducting cybersecurity risk and vulnerability assessments, analyzing system configurations and audit logs, and recommending risk mitigation measures.
• Ability to develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation.
• Knowledge of system security engineering principles and their application throughout the system lifecycle, including NIST SP 800-160.
• Strong technical writing and communication skills, with the ability to coordinate security findings, remediation actions, and authorization status with system owners, ISSMs, and technical teams.

At IPT Associates (IPTA), we enjoy solving real-world problems with technology. We work closely with our customers, teammates, experts, and partners to come up with practical solutions that make a difference. Whether it’s a government or business organization, we focus on understanding the need and building something that works.

Our Team

At IPTA, everything starts with our people. We’re big believers that when you invest in your team, great things happen. That’s why we encourage learning, growth, and trying new things-even if you don’t have all the answers yet.

Our culture is rooted in fierce determination, fearless integrity, and passionate service-but we also like to keep things collaborative, supportive, and down-to-earth.