Cybersecurity Specialist III

$81,250 - $146,875/Yr

Leidos - Orlando, FL

Full-time - Senior

Hybrid - Orlando, FL

Professional, Scientific, and Technical Services

About the position

The Cybersecurity Specialist III is responsible for implementing and executing risk management processes in compliance with federal standards and frameworks, including NIST and FISMA. This role involves collaborating with IT teams to monitor and manage the risk posture of information systems, ensuring they remain compliant with federal regulations. The specialist will also conduct security assessments, develop mitigation strategies, and provide guidance to ensure the security of the organization's information systems.

Responsibilities

• Manage Authorization Packages (AP) including Privacy Analysis, Risk Assessments (RAR), and System Security Plans (SSP) to maintain a system's Authorization to Operate (ATO).
• Act as the focal point for enterprise SSPs, supporting Information System Owners (ISO) and Information System Security Officials (ISSO) with Risk Management Framework (RMF) responsibilities.
• Develop and maintain Plans of Action & Milestones (POA&Ms) for continuous monitoring and cybersecurity improvements.
• Collaborate with Information System Administrators (ISA) and Engineering teams to integrate security measures into information systems and applications.
• Stay updated on IT innovations, emerging threats, and security technologies to enhance security posture.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Management of Information Technology, or a related field.
• 10 years of experience in information security or related roles.
• Experience with networking ports and protocols, architecture of networked and standalone systems, and various operating systems.
• Knowledge of cloud computing environments and common security tools.
• Ability to develop information system topology diagrams and Concept of Operations documentation.
• Familiarity with federal standards such as NIST, FISMA, and FIPS.
• Exposure to FedRAMP program and standards.
• Experience with Security Control Audits.
• Proficient with MS Office.
• Active (or held within 3 years) Security Clearance.
• Experience with IT projects in a traditional waterfall or Agile framework.

Nice-to-haves

• Relevant certifications (e.g., CompTIA Network+, Security+, CySA+) are a plus.