Cybersecurity Compliance Specialist

Location: Bethesda, MD

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package: 
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match 
  • Annual Professional Development Reimbursement Program
  • And more! 

• Support FISMA Security Authorization, Assessment & Authorization (A&A), Risk Management Framework (RMF), Authority to Operate (ATO), annual reviews, and NIST SP 800-53 Rev. 5 control assessment activities.
• Develop, update, and maintain authorization artifacts including:
  • System Security Plans (SSPs)
  • FIPS 199 Security Categorization documents
  • Privacy Impact Assessments (PIAs)
  • Risk Assessments
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Plans of Action & Milestones (POA&Ms)
  • Contingency Plans
  • Interconnection Security Agreements (ISAs)
• Maintain security documentation, control evidence, and CSAM records in support of system authorization efforts.
• Conduct or support vulnerability scanning, continuous monitoring, security reporting, patch validation, system hardening verification, and remediation tracking using Tenable and other approved tools.
• Analyze and track security findings to ensure timely remediation and risk reduction.
• Investigate and triage security alerts and incidents, document findings, support containment and recovery activities, and maintain operational evidence.
• Translate operational security findings into risk-management actions, compliance updates, and authorization package artifacts.
• Coordinate with ISSOs, system owners, infrastructure teams, program managers, and external stakeholders to collect evidence, resolve findings, and communicate cybersecurity risks and compliance status.
• Support audit readiness efforts and provide reporting for leadership and compliance reviews.

• Direct experience supporting FISMA Security Authorization activities, A&A/RMF processes, ATOs, NIST SP 800-53 control assessments, and authorization package development or maintenance.
• Experience developing, reviewing, or maintaining federal cybersecurity authorization documentation and artifacts.
• Hands-on experience with vulnerability management and/or security monitoring activities, including scan review, validation, prioritization, remediation coordination, and status reporting.
• Experience supporting incident response activities including alert triage, documentation, escalation, containment support, recovery coordination, and lessons learned.
• Experience documenting findings, risks, corrective actions, control evidence, and POA&M activities in an audit-ready environment.
• Ability to communicate cybersecurity and compliance requirements effectively to both technical and non-technical stakeholders.
• Ability to obtain or maintain an HHS Public Trust Tier II background investigation.

• Experience with Tenable, Absolute, BigFix, Splunk, Tripwire, Microsoft Defender, Cylance, or comparable vulnerability management, endpoint security, EDR, SIEM, logging, or continuous monitoring platforms.
• Experience with CSAM and NIH cybersecurity processes, security documentation, and privacy resources.
• Experience supporting low- and moderate-impact federal information systems.
• Experience working with cloud and/or on-premises authorization packages.
• Familiarity with security baselines, vulnerability remediation programs, and federal compliance requirements.
• One or more cybersecurity certifications such as:
  • CISSP
  • CISA
  • CISM
  • SSCP
  • Security+
  • CySA+
• Equivalent industry-recognized cybersecurity certifications

• Customer Experience: Strive for excellence and delight our clients 
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions 
• Accountability: Take ownership of and pride in our actions and service delivery 
• Inspire: Be inspired to be your best self and have fun in the process 
• Integrity: Do the right thing, the right way, every time! 
• Stewardship: The careful and responsible management of something entrusted to our care. 

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.