Cybersecurity Specialist

Cybersecurity Specialist

Location: Remote CONUS (Support of Naval Medical Center San Diego)

Job Type: Full-Time

Certification Requirement: CISSP or DoD-approved equivalent certification required. Ability to qualify for and maintain an IAT Level II position.

Travel: Occasional travel may be required based on contract needs

Position Summary

We are seeking an experienced Cybersecurity Specialist to support the Information Management Department (IMD) at Naval Medical Center San Diego (NMCSD). This role is responsible for conducting cybersecurity assessments, vulnerability management, system hardening, patch management, and Risk Management Framework (RMF) activities across a diverse enterprise IT environment.

The ideal candidate will possess extensive experience in DoD cybersecurity operations, Information Assurance (IA), vulnerability remediation, and federal compliance standards. This position plays a critical role in protecting mission-essential information systems and ensuring compliance with DoD, NIST, FIPS, and federal cybersecurity requirements.

Work Location

This is a fully remote position. The selected candidate must maintain a secure and professional home office environment and have reliable high-speed internet access. The employee must be available during normal business hours and capable of supporting government and customer requirements through virtual collaboration tools. Occasional travel may be required for meetings, training, audits, or other mission-related activities.

Primary Responsibilities

Cybersecurity Operations

• Perform cybersecurity scanning and vulnerability assessments on networked devices.
• Identify, analyze, and remediate vulnerabilities discovered through security scans and assessments.
• Apply security patches, updates, and configuration changes to maintain compliance and mitigate risk.
• Monitor and support security compliance initiatives across enterprise environments.

Risk Management Framework (RMF)

• Provide RMF services for IT and Information Systems (IS) subject to FISMA requirements.
• Implement and maintain NIST SP 800-37 Risk Management Framework processes throughout the system lifecycle.
• Continue and support RMF efforts already initiated by the customer or other entities.
• Develop and maintain RMF documentation, security controls, and authorization packages.
• Coordinate remediation efforts and support system accreditation and authorization activities.

Vulnerability Management

• Follow established issue resolution processes for identified vulnerabilities and security findings.
• Document risk-based decisions, risk acceptance actions, corrective actions, and remediation efforts.
• Create and maintain Plans of Action and Milestones (POA&M).
• Conduct validation testing and security retesting following remediation activities.
• Provide documentation and audit trails to support RMF and compliance efforts.

Infrastructure Security

• Scan, secure, and patch:
• Windows Servers
• Windows Workstations
• Apple macOS Systems
• VMware Infrastructure
• Cisco and Brocade Network Switches
• HP and Ricoh Printers
• EMC and Nimble SAN Storage Systems
• Wired and Wireless Network Devices
• Other Enterprise-Attached Devices

Security Consulting & Program Support

• Serve as a cybersecurity subject matter expert (SME) to technical and program teams.
• Conduct security inspections, assessments, surveys, and assistance visits.
• Collaborate with infrastructure, networking, and systems teams to strengthen enterprise security posture.
• Support security planning, policy implementation, and cybersecurity program evaluation.
• Communicate technical risks and recommendations to stakeholders and leadership.

Required Qualifications

• Minimum of five (5) years of experience applying cybersecurity or Information Assurance (IA) principles within a DoD environment.
• CISSP certification or DoD-approved equivalent certification.
• Ability to qualify for and maintain an IAT Level II position in accordance with DoD 8570.01-M and DoD 8140 requirements.
• Demonstrated expert-level knowledge of DoD and DHA cybersecurity architecture, Information Assurance principles, and enterprise security operations.
• Proven ability to serve as a cybersecurity Subject Matter Expert (SME), providing technical guidance and recommendations to stakeholders, system owners, and leadership.
• Demonstrated experience supporting security accreditation, authorization, and certification processes within federal or DoD environments.
• Experience integrating cybersecurity requirements with broader IT, infrastructure, networking, and systems operations.
• Demonstrated expertise with:
• NIST Cybersecurity Framework
• NIST SP 800-37 Risk Management Framework (RMF)
• FISMA compliance requirements
• Federal Information Processing Standards (FIPS)
• DoD cybersecurity policies and procedures
• Vulnerability management and remediation
• Security accreditation and authorization processes
• Information Security (IS) program management
• Demonstrated ability to coordinate and conduct security surveys, inspections, and assistance visits.
• Strong oral and written communication skills.

Preferred Qualifications

• Experience supporting Navy, Defense Health Agency (DHA), or other DoD healthcare environments.
• Experience supporting DHA information systems, cybersecurity programs, and enterprise IT environments.
• Experience with enterprise vulnerability scanning and remediation tools.
• Experience supporting Authority to Operate (ATO) packages.
• Experience serving in a cybersecurity leadership, lead analyst, or SME capacity.
• Experience advising system owners, program managers, and senior leadership on cybersecurity risk and compliance matters.
• Knowledge of cybersecurity auditing, compliance reviews, and inspections.
• Familiarity with enterprise storage, virtualization, and networking technologies.
• Active security clearance or ability to obtain one, if required by the program.

Knowledge, Skills, and Abilities

• Expert understanding of DoD and DHA IT architectures, cybersecurity requirements, Information Assurance principles, and enterprise infrastructure protection strategies.
• Expert knowledge of system certification, accreditation, authorization, and RMF processes.
• Strong knowledge of federal cybersecurity regulations, standards, and best practices.
• Ability to evaluate, plan, direct, and support Information Security programs for federal information systems.
• Ability to integrate cybersecurity requirements with broader IT and infrastructure operations.
• Ability to analyze emerging technologies and assess their impact on cybersecurity, compliance, and business operations.
• Ability to plan, coordinate, and manage cybersecurity initiatives and projects.
• Excellent verbal and written communication skills.
• Strong analytical and problem-solving abilities.
• Ability to communicate technical concepts and risks to both technical and non-technical audiences.
• Ability to independently manage workload and meet project deadlines in a remote environment.

Physical Requirements

• Prolonged periods of sitting and working at a computer workstation.
• Frequent use of a computer, keyboard, mouse, telephone, and video conferencing tools.
• Ability to read and analyze technical documentation, reports, diagrams, and security findings.
• Ability to communicate effectively in person, over the phone, and through virtual collaboration platforms.
• May occasionally be required to stand, walk, bend, reach, and lift or carry items weighing up to 20 pounds.
• Ability to travel occasionally to customer or government facilities as required.
• Ability to maintain focus and efficiently perform detailed analytical work for extended periods.