FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.

Security & Compliance Specialist
Leyden Solutions, Inc.. Ensure application development, system configuration, infrastructure changes, integrations, operational processes, and documentation comply with CJIS, SC DIS, and MFA security-control requirements .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity compliance, security engineering, and incident response within complex enterprise environments, with a strong focus on IAM, MFA, and secure application development practices. Proficient in vulnerability management, security logging, and risk assessment, ensuring adherence to CJIS and other regulatory requirements.
Highest-signal resume keywords
IAM ImplementationMFA ManagementVulnerability IdentificationSecurity LoggingCJIS Compliance
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security EngineeringIncident ResponseRisk AssessmentPatch ManagementAudit TrailsAuthentication WorkflowsAuthorization WorkflowsDependency ManagementSecure Application DevelopmentSecurity Testing
Soft Skills
Clear CommunicationPrioritizationCross-Functional Coordination
Tools & Technologies
SIEMSecurity OrchestrationEndpoint SecurityVulnerability ScanningIdentity Governance
Certifications & Qualifications
CISSPCISMCISASecurity+GIACCCSPCEH
Industry Keywords
CJISCriminal Justice Information ProtectionNIST Risk Management FrameworkZero Trust PrinciplesSecure APIMicroservices ArchitecturePublic SafetyLaw Enforcement
Tech Stack
Tools & technologiesCloudCyber SecurityMicroservices
About the role
Key responsibilities & impact- Ensure application development, system configuration, infrastructure changes, integrations, operational processes, and documentation comply with CJIS, SC DIS, and MFA security-control requirements
- Translate security and compliance requirements into technical controls, implementation tasks, validation criteria, and remediation plans
- Review releases, enhancements, configuration changes, and technical solutions for security and compliance impacts before deployment
- Identify control gaps, prioritize corrective actions, track remediation through completion, and maintain supporting evidence
- Support security assessments, audits, authorization activities, compliance reviews, and responses to oversight inquiries
- Implement security modernization initiatives across the Transform Stream
- Design, configure, and improve IAM capabilities, including authentication, authorization, RBAC, least-privilege access, account lifecycle management, and privileged-access controls
- Implement and maintain MFA and modern authentication patterns across applications, infrastructure, service accounts, APIs, administrative interfaces, and assigned systems
- Implement and enhance security logging, audit trails, log aggregation, retention, alerting, and analysis
- Establish logging standards for authentication activity, authorization decisions, privileged actions, security-relevant application events, configuration changes, and anomalous behavior
- Coordinate with application and infrastructure teams to integrate security capabilities into architecture, development, testing, deployment, and operations
- Identify, prioritize, remediate, and validate vulnerable, unsupported, deprecated, or end-of-life libraries and dependencies
- Review technology stacks supporting PIC, PAC, OMS, IIMS, and other assigned applications for vulnerable components and assess security, compliance, and operational impacts
- Coordinate secure upgrades, dependency replacements, refactoring, configuration changes, patching, and compensating controls
- Validate remediation preserves functionality, interoperability, performance, availability, and required security controls
- Track vulnerabilities, remediation progress, exceptions, risk-acceptance decisions, and closure evidence
- Recommend remediation priorities based on severity, exploitability, exposure, business criticality, compliance obligations, and operational impact
- Provide security-focused operational support and enhanced monitoring during High Profile Hearings involving PIC and PAC
- Monitor application availability, access activity, audit logs, authentication events, performance indicators, and security alerts during designated hearing periods
- Identify, investigate, document, escalate, and coordinate response to suspicious activity, access-control issues, security events, service disruptions, and operational risks
- Participate in pre-hearing readiness activities, including access reviews, control verification, logging validation, contingency planning, and stakeholder coordination
- Maintain event records, monitoring logs, incident documentation, and post-event observations
- Recommend post-event improvements to strengthen resilience, monitoring coverage, security posture, and incident-response readiness
- Improve security monitoring, alerting, incident-response, vulnerability-management, access-review, and change-control processes
- Support secure software-development lifecycle activities, including security requirements, architecture reviews, code and dependency reviews, security testing, release validation, and production monitoring
- Develop and maintain control matrices, risk registers, architecture documentation, operating procedures, remediation plans, monitoring runbooks, and compliance evidence
- Collaborate with technical teams to maintain secure configuration baselines, patch-management practices, encryption, secure communications, and audit logging
- Communicate security risks, compliance findings, remediation priorities, and operational impacts to technical and nontechnical stakeholders
Requirements
What you’ll need- Bachelor’s degree in cybersecurity, information assurance, information technology, computer science, or a related discipline; comparable experience, technical training, or certifications may be substituted
- Experience supporting information security, cybersecurity compliance, security engineering, or security operations in a complex enterprise environment
- Knowledge of CJIS-aligned security principles and criminal justice information protection requirements
- Experience with IAM, role-based access control, authentication and authorization workflows, MFA, and least-privilege practices
- Experience with vulnerability identification, dependency management, patching, remediation tracking, and corrective-action validation
- Experience with security logging, audit trails, log aggregation, security monitoring, alerting, and incident-response support
- Knowledge of secure application-development practices, common software vulnerabilities, software supply-chain risk, and security-testing approaches
- Ability to assess technical risk, develop practical remediation recommendations, coordinate cross-functional resolution, and prepare clear security documentation
- Ability to manage priorities and provide reliable support within an estimated commitment of 75–80 hours per month
- Certifications such as CISSP, CISM, CISA, Security+, GIAC, CCSP, CEH, Microsoft security certifications, or equivalent credentials are preferred
- Experience supporting state or local government, courts, law enforcement, public safety, or criminal justice organizations is preferred
- Experience with SIEM, security orchestration and response, endpoint security, vulnerability scanning, and identity-governance tools is preferred
- Experience with cloud and hybrid security, Zero Trust principles, and secure API or microservices architectures is preferred
- Familiarity with NIST-based risk-management frameworks, security-control assessments, secure configuration benchmarks, and authorization processes is preferred
- Experience supporting high-visibility operational events, incident-response exercises, continuity-of-operations activities, or elevated monitoring periods is preferred
- May access sensitive, controlled, proprietary, or criminal justice information and must comply with applicable privacy, data-handling, personnel-screening, security-training, and acceptable-use requirements
- Occasional work outside standard business hours may be required
Benefits
Comp & perks- 401(k)
- 401(k) matching
- Flexible schedule
- Flexible work from home options
- Competitive health and retirement plans
- Education assistance
- Paid time off
- Federal holidays
- Programs that support you and your family
- Performance and Longevity Bonuses
- Standard Referral Bonuses for all open positions
- 26 days annual PTO and Holidays
- 100% employer paid short-term and long-term disability insurance
- 50% employer paid health insurance
- Dental & Vision Plans available
- 100% employer paid life insurance
- 401(k) Plan with employer match on the first 5% of your salary
- Pretax and Roth 401(k) available
- Retirement planner