Senior Information Security Specialist
pemccoAndrews Air Force Base (MD)
$50.64 - $83.55 per hour
Apply (opens in a new tab)Senior Information Security Specialist
Posted today
pemccoAndrews Air Force Base (MD)
SENIORITY
Lead
SALARY
$50.64 - $83.55 per hour
About the role
Senior Information Security Specialist
Pay: $50.64 - $83.55 hourly, depending on experience
Benefits:
Medical, Dental, Vision, Paid Time Off, Paid Holidays, Employee Assistance Program, and other company-sponsored benefits Security Clearance: Ability to obtain and maintain a government security clearance if required Are you an experienced cybersecurity professional who enjoys protecting critical systems, managing risk, and supporting secure operations in complex environments? PEMCCO is seeking a Senior Information Security Specialist to lead security, compliance, risk management, and authorization activities supporting government information systems and network environments. This role is ideal for a cybersecurity leader who enjoys guiding security initiatives, managing Risk Management Framework (RMF) efforts, assessing risk, and helping organizations maintain strong and compliant security postures. Candidates with experience in information assurance, security governance, assessment and authorization activities, vulnerability management, compliance oversight, continuous monitoring, or system security engineering may be particularly well suited for this role. About PEMCCOPEMCCO supports complex technical and operational programs by providing skilled professionals who help customers achieve important organizational and program objectives. We offer opportunities to work on impactful projects, collaborate with experienced teams, and contribute to innovative solutions that support critical government operations.
Job Overview:
As a Senior Information Security Specialist, you will serve as a senior security professional responsible for supporting the security and compliance of complex information systems and technology environments. You will work closely with program leadership, engineers, system administrators, developers, and government stakeholders to ensure cybersecurity requirements are implemented and maintained throughout the system lifecycle. This position offers the opportunity to lead security initiatives, influence risk management decisions, support authorization activities, and contribute to the protection of systems that support important government operations.
What You'll Do:
- Lead information system security activities throughout the system lifecycle
- Manage and support Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes
- Develop, review, and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), and related cybersecurity documentation
- Conduct security assessments, compliance reviews, vulnerability analyses, and risk assessments
- Evaluate implemented security controls and recommend corrective actions and improvements
- Identify, document, track, and support remediation of security vulnerabilities and compliance deficiencies
- Support continuous monitoring activities and help maintain visibility into overall system security health
- Coordinate with system owners, engineers, developers, administrators, and stakeholders to ensure security requirements are integrated throughout the system lifecycle
- Advise leadership on risk considerations, compliance requirements, and security best practices
- Support incident response activities, security investigations, and remediation efforts
- Ensure compliance with applicable policies, regulations, standards, and contractual requirements
- Support cybersecurity audits, inspections, and authorization reviews
- Prepare security reports, briefings, risk assessments, and recommendations for leadership and customers
- Provide technical guidance and mentorship to security team members
- What You Bring
Required Qualifications:
- Bachelor's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related field
- Ten (10) years of experience in information assurance, information security, cybersecurity, system security, RMF, compliance, or a related field
- Advanced knowledge of information assurance and information protection principles
- Advanced knowledge of Risk Management Framework (RMF) processes and security authorization requirements
- Knowledge of NIST, DoD, and federal cybersecurity policies, standards, and regulations
- Knowledge of security controls, vulnerability management, risk assessment, and compliance methodologies
- Ability to identify, assess, and mitigate technology risks and vulnerabilities
- Ability to interpret and apply security policies, standards, and procedures
- Strong analytical, organizational, and problem-solving skillsAbility to evaluate security control effectiveness and recommend improvements
- Strong written and verbal communication skillsAbility to communicate effectively with both technical and non-technical audiences
- Ability to prepare and review security documentation, assessments, and reports
- Ability to lead cybersecurity efforts and coordinate activities among multiple stakeholders
- Ability to obtain and maintain a government security clearance if required
- Must meet applicable DoD 8140 workforce qualification requirements if required by contract
- Preferred Experience
- Master's degree in Cybersecurity, Information Assurance, Information Systems, Information Technology, Computer Science, Engineering, or a related discipline
- Experience supporting Department of Defense or Federal Government programsExperience leading RMF and Assessment & Authorization activities
- Experience developing and maintaining security documentation and authorization packages
- Experience supporting continuous monitoring and vulnerability management programsExperience conducting security assessments, inspections, audits, and compliance reviews
- Experience mentoring security and information assurance professionals
- Why Join PEMCCO?Support important government and customer programs through effective security leadership
- Play a key role in safeguarding information systems, networks, and organizational data
- Lead compliance, authorization, and risk management initiatives that support organizational goals
- Collaborate with experienced cybersecurity, engineering, and technology professionals
- Expand your expertise across multiple security and compliance disciplines
- Mentor and support the development of cybersecurity talent
- Build a rewarding career in a collaborative and team-oriented environment
- Work Environment
- Professional office and technical work environments
- Work may be performed at company facilities, customer locations, or designated project sites as needed
- Regular use of computers, cybersecurity tools, and communication systems
- Frequent collaboration with engineers, administrators, program leaders, customers, and stakeholders
Benefits:
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Paid Time OffPaid Holidays
- Employee Assistance Program
- Additional company-sponsored benefits
Apply TodayIf you're an experienced security professional looking to lead key initiatives, support complex technology environments, and help organizations manage risk and maintain compliance, we encourage you to apply.
Join PEMCCO and help protect the systems, networks, and information that enable important operational and organizational outcomes.
Equal Opportunity EmployerPEMCCO, Inc. is an equal opportunity employer. The Company does not discriminate on the basis of race, color, sex, sexual orientation, gender identity or expression, religion, national origin, age, disability, genetic information, military or veteran status, pregnancy, childbirth and related medical conditions, or any other characteristic protected by applicable federal, state, or local law.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.