CYBER SECURITY SPECIALIST 4

VSolvit is seeking a Cybersecurity Specialist 4 to provide security and compliance oversight for Risk Management Framework Steps 1–6. The role supports Department of Navy CSM packages, continuous monitoring, vulnerability management, DISA STIG compliance, Authorization to Operate deadlines, and the transition toward Zero Trust Architecture in Azure Government and Commercial environments.

Responsibilities:

• Provide ongoing security support for the legacy SCCA stack and future ZTA Mission Landing Zone (MLZ) stacks in Azure Government across all RMF steps (1–6)
• Perform RMF activities to support CSM Packages, ensuring all requirements are met to achieve and maintain ATO status
• Schedule package checkpoints, deliver status reports, and perform quality assurance reviews
• Maintain and report the system’s Authorization and Assessment (A&A) status and related security events
• Assist in identifying the security control baseline set and any applicable overlays
• Manage Plan of Action and Milestone (POA&M) entries to ensure vulnerabilities are properly tracked, mitigated, and resolved
• Support the implementation and maintenance of the SCCA, including routine patching and ensuring Secure Technical Implementation Guide (STIG) compliance
• Continuously monitor applications by assessing security control quality against requirements defined in the System Level Continuous Monitoring (SLCM) strategy
• Utilize Assured Compliance Assessment Solution (ACAS) results to update system POA&Ms
• Maintain Hardware and Software assessment sheets annually or upon environment changes
• Ensure strict adherence to the DoD SCCA Functional Requirements (v2.9) and the latest DoD Cloud Computing Security Requirements Guide (CC SRG)
• Provide compliance support for RMF packages
• Manage, configure, and sustain future CN/ZTA MLZ security tools in Azure Government and Commercial
• Adhering to normal working hours
• Meeting deadlines
• Following company policies as outlined by the Employee Handbook
• Communicating regularly with assigned supervisor(s)
• Staying focused on the assigned tasks
• Completing other tasks as assigned

Requirements:

• Bachelor's degree in Computer Science or a related field
• 2–4 years of cloud engineering experience with specific expertise in RMF activities and ATO deadlines
• Proficiency with Security Content Automation Protocol (SCAP) scanning tools and Navy eVALUATE
• Expertise in Azure administration and cloud architecture
• Experience with CI/CD and DevSecOps toolchains
• U.S. Citizenship and the ability to obtain a DoD Top Secret clearance
• Security+ certification
• Active DoD Top Secret clearance
• Active Security+ certification
• Cloud-specific certifications (e.g., Microsoft Certified: Azure Associate)
• Proven experience implementing DISA STIG configurations and supporting compliance for DoD SRG and NIST SP 800-53 security controls