[Hiring] Cybersecurity Specialist @Falcon IT and Staffing Solutions

Role Description

Seeking a Cybersecurity Specialist to ensure all applications meet FedRAMP High security and compliance requirements during assessment and onboarding for a FedRAMP High-authorized, healthcare-focused platform hosted in an AWS Government enclave. This role supports Independent Software Vendors (ISVs) and government applications by identifying security gaps, supporting authorization documentation, and validating alignment with applicable federal cybersecurity frameworks.

• Assess application security posture, including logging, auditing, and control implementation, against FedRAMP High baseline requirements.
• Support Authority to Operate (ATO) documentation efforts and compliance readiness activities for applications undergoing onboarding assessment.
• Identify cybersecurity gaps across assessed applications and recommend prioritized remediation actions with supporting rationale.
• Evaluate application and environment alignment with Zero Trust architecture principles and continuous monitoring requirements.
• Support development of System Security Plans (SSPs), Plan of Action and Milestones (POA&M) inputs, and related security authorization artifacts.
• Apply Risk Management Framework (RMF) processes to security assessment activities and document findings in accordance with NIST guidelines.
• Review identity, access control, and encryption implementations to verify compliance with applicable standards and FedRAMP controls.
• Conduct vulnerability management reviews and evaluate continuous monitoring capabilities for onboarding candidates.
• Collaborate with cloud architects, program managers, and ISV technical teams to communicate security findings and guide remediation planning.

Other Duties:

• Perform other duties as assigned by management in support of SBG Technology Solutions contract objectives.
• Travel requirements: occasional travel as required by project needs (estimated up to 10% per year).

Qualifications

• In-depth knowledge of FedRAMP High security controls and the NIST Risk Management Framework (RMF) process.
• Proficiency in security architecture review and cloud security engineering within AWS or comparable government cloud environments.
• Experience conducting vulnerability management assessments and evaluating continuous monitoring programs.
• Working knowledge of identity and access management (IAM), encryption standards, and access control frameworks.
• Ability to develop and review authorization documentation including SSPs, POA&Ms, and security assessment reports.
• Strong analytical and written communication skills; able to document and present security findings clearly to both technical and non-technical audiences.
• Capable of managing concurrent assessment workstreams and delivering findings within defined project timelines.

Preferred Skills

• Familiarity with HIPAA Security Rule requirements and healthcare application security considerations.
• Experience with AWS security tooling (e.g., AWS Security Hub, GuardDuty, CloudTrail, Config).
• Knowledge of DevSecOps practices and secure software development lifecycle (SSDLC) methodologies.

Education

• Required: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline.
• A combination of education and experience will be considered (2 years of relevant experience equivalent to 1 year in a degree program).
• Desired: Master's degree in Cybersecurity, Information Assurance, or a related field.

Certification(s), Licenses

• Desired: Certified Information Systems Security Professional (CISSP).
• Certified Information Security Manager (CISM).
• CompTIA Security+ or equivalent federal baseline certification.
• AWS Certified Security - Specialty.

Years of experience in a similar role

• Required: 8+ years of cybersecurity experience in federal or regulated environments, with demonstrated engagement in FedRAMP or RMF processes.
• Desired: 10+ years of cybersecurity experience, including direct responsibility for ATO support or FedRAMP authorization activities.