IT Cybersecurity Specialist

• Support the development, maintenance, and assessment of security authorization documentation, including the System Security Plan, security controls, assessment artifacts, and supporting evidence.
• Apply the Risk Management Framework and applicable NIST security and privacy controls throughout the system lifecycle.
• Coordinate continuous monitoring activities, vulnerability scanning, remediation tracking, and monthly Plan of Action and Milestones updates.
• Develop and maintain access-control, role-based access, incident-response, contingency, and security operating procedures.
• Analyze security findings, assess risk, recommend corrective actions, and verify remediation effectiveness.
• Support security engineering reviews for cloud, platform, application, API, and DevSecOps implementations.
• Coordinate incident triage, containment, investigation, documentation, and recovery activities.
• Support static and dynamic application security testing, penetration-testing coordination, and secure-code review activities.
• Maintain audit-ready cybersecurity documentation and respond to security assessments, reviews, and data calls.
• Collaborate with system owners, developers, administrators, project managers, and Government cybersecurity stakeholders.

• Minimum five (5) years of professional cybersecurity experience.
• Experience supporting RMF, security authorization, continuous monitoring, vulnerability management, or incident response activities.
• Experience applying NIST SP 800-53 controls and maintaining cybersecurity documentation.
• Experience supporting Federal information systems or regulated environments.

Education

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related discipline.

Clearance

• Active Secret clearance.

Certifications / Tools

• Active CompTIA Security+ or higher
• Experience with vulnerability scanners, SIEM platforms, GRC tools, ticketing systems, and Microsoft collaboration tools., * Experience securing cloud-native, ServiceNow, DevSecOps, or CI/CD environments.
• Experience with supply-chain risk management, Zero Trust, penetration testing, or application security.

Education

• Master's degree in Cybersecurity, Information Assurance, or a related discipline.

Certifications

• CISSP, CASP+, CCSP, CISM, CySA+, or equivalent advanced certification.

Pulled from the full job description 401(k) Health insurance Paid time off Vision insurance Dental insurance Life insurance Paid holidays, At Graham Technologies, we believe in treating everyone with fairness and respect. Our compensation package is designed to ensure fair pay for work, reflecting our commitment to integrity.

Many IT companies offer similar services, but what truly sets us apart is our people! We care deeply about our employees and consistently show our appreciation-not just for the final outcomes, but also for the effort and dedication shown every step of the way. Additionally, our generous benefits package supports our team members in living fulfilling and prosperous lives.

Here are just a few highlights of what we offer:

• Four Weeks of Accrued PTO in the First Year
• Eleven Paid Federal Holidays
• Comprehensive Health, Dental, Vision, and Life Insurance
• 401(k) Plan with Annual Employer Contributions
• Flexible Schedules
• Reimbursements for Continued Education and Training

Why Graham Technologies?

Our core values define who we are:

• Value our Customers
• Care about our Employees
• Passionate about Innovation
• Believe in a Strong Work Ethic
• Rely on Teamwork
• Integrity Matters

Founded in 2007, GTech is a consulting services firm passionate about delivering tailored solutions that meet our clients' needs and maximize the value of their investments. We achieve this by providing top-notch professionals across the IT industry. Our team embodies integrity, commitment, and reliability, which are at the heart of everything we do.