Senior Information Security Specialist

Dev Technology Group, Inc.

. Lead, mentor, and develop a team of ISSOs .

Posted 9/17/2026full-timeAshburn • Virginia • United StatesSenior💰 $88,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading cybersecurity initiatives, mentoring teams, and implementing security controls in compliance with FISMA and NIST 800-53. Proficient in vulnerability management, security assessments, and providing guidance for AWS applications throughout the software development lifecycle.

Highest-signal resume keywords

NIST Risk Management Framework (RMF)FISMA ComplianceVulnerability ManagementAWS Cybersecurity GuidanceCybersecurity Certification (CISSP, CISM, GIAC, Security+)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security AuthorizationContinuous MonitoringSecurity AssessmentsAudit Artifacts PreparationSecurity Control ImplementationRisk AssessmentTechnical ReviewsSecurity DocumentationMitigation StrategiesCorrective Actions Tracking

Soft Skills

Team LeadershipMentoringCommunicationCollaborationRelationship Building

Tools & Technologies

AWSSecurity ToolsDashboardsWorkflowsTemplates

Certifications & Qualifications

CISSPCISMGIACSecurity+

Industry Keywords

Federal Information SystemsCybersecurityCompliance ReviewsISSOGovernment Stakeholders

Tech Stack

Tools & technologies

AWSCyber Security

About the role

Key responsibilities & impact

Lead, mentor, and develop a team of ISSOs
Lead and oversee RMF, ATO, security authorization, compliance, vulnerability management, and continuous monitoring activities
Partner with ISSMs, system owners, assessors, developers, architects, engineers, and government stakeholders
Lead vulnerability management, prioritize remediation, develop mitigation strategies, and track corrective actions
Develop, assess, document, and support implementation of security controls aligned with FISMA, NIST 800-53, DHS, and client requirements
Prepare and maintain SSPs, ISAs, audit artifacts, and RMF documentation
Provide cybersecurity guidance for AWS applications and systems throughout the software development lifecycle
Validate security implementation through technical reviews, interviews, assessments, and tabletop exercises
Support security audits, assessments, compliance reviews, and information-system and network-connection reviews
Translate federal and client security policies into practical technical guidance
Identify and escalate security risks and communicate priorities and remediation status
Develop and present security metrics, status reports, risk assessments, and executive briefings
Improve security processes, procedures, templates, dashboards, and workflows
Build trusted relationships with government clients through communication, collaboration, and face-to-face engagement

Requirements

What you’ll need

Bachelor's degree and 7+ years of experience securing federal information systems
Experience leading and mentoring junior and mid-level ISSOs
Experience leading cybersecurity activities in a federal government client environment and working directly with government stakeholders
Strong working knowledge of NIST Risk Management Framework (RMF)
Experience supporting federal systems through security authorization and ATO activities
Experience with FISMA and NIST 800-53 security controls
Experience with vulnerability management, continuous monitoring, security assessments, audits, or compliance reviews for federal systems
Experience providing cybersecurity guidance for AWS-hosted applications and systems
Strong understanding of modern information systems and technical security considerations
Ability to work with developers, architects, engineers, government stakeholders, and technical and non-technical audiences
Strong written and verbal communication skills, including security documentation and executive briefings
Ability to establish priorities, manage competing demands, independently manage security activities, and escalate issues appropriately
Current CBP, DHS, or Top Secret Clearance
Ability to work onsite 3 days per week in Ashburn, VA during standard business hours
Cybersecurity certification such as CISSP, CISM, GIAC, Security+, or another recognized cybersecurity certification

Benefits

Comp & perks

Generous and flexible time-off policy
Flexible work schedules and telework options, including remote work availability for eligible projects
Career development opportunities including a mentorship program, technical and management training through Dev University, hands-on learning through DevLab, tuition reimbursement, and paid training opportunities
Choice of two health plans including dental and vision
Flexible spending account
Commuter benefits
Life insurance
401K matching with a 5% matching contribution
Regular team and company social events including annual party, happy hours, fitness challenges, and more
Company-wide community support activities
Employer match for donations
Time off for volunteer efforts