> Markdown version of [/jobs/ext/4668629-security-risk-threat-specialist-iii](https://www.wearedevelopers.com/jobs/ext/4668629-security-risk-threat-specialist-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Risk Threat Specialist III

- **Company:** IPT Associates
- **Location:** Wright-Patterson Air Force Base, OH, United States
- **Contract:** Permanent contract
- **Skills:** Software System Penetration Testing, Audit Trail, Cyber Security, Information Systems, System Configuration, Information Security Management, SARS Software Products, Information Technology, Vulnerability Analysis
- **Published:** November 11, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9305269/security-risk-threat-specialist-iii

## About the Role

* Are curious and excited about technology

 * Like solving problems and figuring things out

 * Can take initiative but also enjoy working with a team

 * Want to keep learning, growing, and challenging themselves

If you're someone who's eager to jump in, learn something new, and make an impact-you'll fit right in here., * BS in Computer Science, Cyber Security, or a related field

 * Active TS clearance with SCI eligibility
 * Experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, and continuous monitoring.
 * Working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, applicable organizational security policies, and CNSSI 1253.
 * Experience conducting cybersecurity risk and vulnerability assessments, analyzing system configurations and audit logs, and recommending risk mitigation measures.
 * Ability to develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation.
 * Knowledge of system security engineering principles and their application throughout the system lifecycle, including NIST SP 800-160.
 * Strong technical writing and communication skills, with the ability to coordinate security findings, remediation actions, and authorization status with system owners, ISSMs, and technical teams.

## Description

* Identify, assess, and mitigate cybersecurity risks to information systems, including conducting supply chain risk assessments; develop risk mitigation plans and recommend security controls aligned with organizational needs.
 * Support the Risk Management Framework (RMF) lifecycle, including system categorization, security control selection and implementation, assessment, authorization, and continuous monitoring in accordance with NIST SP 800-37 and applicable organizational policies.
 * Conduct security control assessments using NIST SP 800-53A, including vulnerability scanning, documentation reviews, system configuration analysis, audit log examination, and penetration testing when required.
 * Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation; track remediation actions and report unresolved risks.
 * Apply security engineering principles throughout the system lifecycle in accordance with NIST SP 800-160, NIST SP 800-53, and CNSSI 1253; collaborate with technical teams to implement and validate security controls.
 * Coordinate with system owners, Information System Security Managers (ISSMs), and Authorizing Official representatives to support continuous monitoring, communicate assessment findings and authorization status, and address cybersecurity compliance concerns.