We are seeking a skilled and experienced Information Security Specialist to join our dynamic IT team. The ideal candidate will have extensive experience working with both Windows and Linux environments, as well as hands-on experience with Tenable and Rapid7. A strong understanding of the Risk Management Framework (RMF) processes is essential. The Information Security Specialist will be responsible for ensuring the security of our information systems by identifying vulnerabilities, implementing security measures, and maintaining compliance with relevant regulations and standards.

Key Responsibilities :

Security Assessment and Vulnerability Management :

• Conduct regular security assessments using tools like Tenable and Rapid7 to identify and mitigate vulnerabilities.
• Perform vulnerability scans, analyze results, and collaborate with IT teams to remediate findings.
• Monitor and manage vulnerabilities in both Windows and Linux environments.

Risk Management Framework (RMF) Processes :

• Implement and manage RMF processes to ensure compliance with organizational and regulatory requirements.
• Develop, document, and maintain RMF documentation, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&Ms).
• Conduct risk assessments and security impact analyses to support RMF requirements.

Security Operations :

• Monitor security alerts and incidents, perform root cause analysis, and coordinate response efforts.
• Implement and maintain security policies, procedures, and controls to protect information systems.
• Conduct security audits and assessments to ensure adherence to security policies and procedures.

Collaboration and Communication :

• Work closely with IT teams to integrate security into system architectures and application development processes.
• Provide guidance and training to staff on security best practices and policies.
• Stay current with emerging security threats, technologies, and regulatory changes.

Qualifications :

• Education : Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field; or equivalent work experience.
• Experience : Minimum of 3-5 years of experience in information security, with a focus on vulnerability management and RMF processes.
• Technical Skills :
• Proficiency in using security tools such as Tenable (Nessus) and Rapid7 (InsightVM).
• Strong knowledge of Windows and Linux operating systems and their security configurations.
• Familiarity with RMF processes and NIST standards (e.g., NIST 800-53, NIST 800-37).
• Experience with network security, firewalls, IDS/IPS, and endpoint protection solutions.
• Certifications : Preferred certifications include CISSP, CISM, CEH, CompTIA Security , or similar.

Soft Skills :

• Excellent analytical and problem-solving abilities.
• Strong communication skills, both written and verbal.
• Ability to work independently and as part of a team.
• Detail-oriented with strong organizational skills.