The Role
Conduct cybersecurity threat, vulnerability, and risk assessments for enterprise systems, infrastructure, applications, and databases in federal and DoD environments. Evaluate security controls, identify vulnerabilities and gaps, develop risk documentation and mitigation recommendations, and support authorization, compliance, governance, continuous monitoring, and vulnerability management activities. Coordinate with technical teams, system owners, and leadership while tracking findings, remediation, risk acceptance, and contractual requirements.
Summary Generated by Built In
Overview:
We are seeking an experienced Information Security Specialist to support DoD CIO cybersecurity and risk management initiatives. This role focuses on conducting threat and risk assessments of enterprise systems, infrastructure, applications, and databases to evaluate security controls, identify vulnerabilities, and assess overall cybersecurity risk.
Key Responsibilities:
- Conduct threat, vulnerability, and risk assessments across enterprise environments.
- Evaluate security control effectiveness and identify security gaps.
- Perform security planning, risk analysis, and risk management activities.
- Develop assessment reports, risk documentation, and mitigation recommendations.
- Support cybersecurity compliance, authorization, and governance efforts.
- Coordinate with technical teams, system owners, and leadership stakeholders.
- Track findings, remediation activities, and risk acceptance decisions.
- Ensure support aligns with contractual requirements and SLAs.
Requirements
Required Qualifications:
- Master's degree with 12 years of experience; Bachelor's degree with 14 years; or 18 years of experience without a degree.
- Experience conducting cybersecurity risk assessments in federal or DoD environments.
- Strong knowledge of security planning, security assessments, risk analysis, and risk management.
- Experience evaluating security controls across infrastructure, applications, and databases.
- Exceptional written and verbal communication skills.
Preferred Qualifications & Key Skills
- Experience supporting DoD CIO or federal cybersecurity programs with strong knowledge of NIST RMF and NIST 800-53. Experience supporting security authorization, continuous monitoring, vulnerability management, cybersecurity governance, and security control assessments. Skilled in security planning and assessments, threat and risk analysis, risk management, vulnerability assessment, security control evaluation, technical writing, executive communications, stakeholder coordination, and SLA management. Familiarity with SARs, POA&Ms, risk registers, continuous monitoring programs, and vulnerability management tools.
Benefits
Core Benefits:
- Paid Time Off PTO):TEN (10) Paid days off & FIVE (5) Floating days off.
- Holidays: 11 Paid Holidays. Flex time can be utilized instead of holiday time usage.
- Payroll: Paid Bi-Monthly.
- 401(k): Partnered with the SECOND LARGEST Retirement plan provider in the U.S. Guaranteed 3% match. Eligibility – 21 years of age or older, after 3 months of employment
- Individual or company-wide performance and recognition awards (Quarterly
Health Benefits:
- UNITED HEALTHCARE PPO, extensive national coverage.
- INCLUDES: Medical/Dental/Vision/HSA.
- Eligible on the first of the month, immediately after the start date.
- Submit the enrollment form within 30 days of your start date otherwise, you will have to wait until October for the new year enrollment.
Quality of Life Benefits:
- Training & Career Development Reimbursement of Tuition and training needed to support career development.
- $150 monthly reimbursement contribution paid monthly towards parking expenses.
- Receipts must be submitted by the close of business on the 25th of each month.
- Reimbursements will be paid on the first payroll AFTER reimbursements are submitted each month.
Special Benefits:
- Performance bonus – Project-based
- Yearly bonus – Company based
Skills Required
- Master's degree with 12 years of experience, bachelor's degree with 14 years, or 18 years of experience without a degree
- Experience conducting cybersecurity risk assessments in federal or DoD environments
- Knowledge of security planning, security assessments, risk analysis, and risk management
- Experience evaluating security controls across infrastructure, applications, and databases
- Exceptional written and verbal communication skills
- Experience supporting DoD CIO or federal cybersecurity programs
- Knowledge of NIST RMF and NIST 800-53
- Experience with security authorization, continuous monitoring, vulnerability management, cybersecurity governance, and security control assessments
- Skills in security planning, assessments, threat and risk analysis, risk management, vulnerability assessment, security control evaluation, technical writing, executive communications, stakeholder coordination, and SLA management
- Familiarity with SARs, POA&Ms, risk registers, continuous monitoring programs, and vulnerability management tools
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Novul Solutions is a veteran- and minority-owned IT services and consulting firm based in Arlington, Virginia, founded in 2020. It provides focused recruiting and staffing for RMF and cleared cybersecurity roles, RMF/NIST and CCRI compliance consulting, and Software Development as a Service, building secure, scalable, AI-powered applications for startups, enterprises, government agencies, federal contractors, and clients in cybersecurity, finance, logistics, and healthcare.
