L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Job Title: Senior Specialist, Industrial Security (CPSO) Job Code: 42797 Job Location: Rochester, NY Job Schedule: 9/80 (Every other Friday off) Job Description: The CPSO establishes Security plans and procedures for the protection and safeguarding of National Security Information. These duties include the implementation of NISPOM and IC Directives. The CPSO works closely with the Government Program Security Officers to coordinate Program Security activities, to include Physical Security, Personnel Security, COMSEC and implementing technical security controls for Information Systems with ISSO teammates in assigned secure areas. The CPSO is knowledgeable in information technology and information system security best practices. This position is located in Rochester, NY: Essential Functions: Develop and administer security programs and procedures for classified, or sensitive materials, documents, and equipment Research and implement federal security regulations, maintaining knowledge, and awareness of interdisciplinary compliance requirements, i.e. cyber, information technology, and configuration management Obtain rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies. Prepare manuals outlining regulations, and establish procedures for handling, storing, retaining records, and access by personnel or visitors to restricted records and materials. Conduct security education training and security audits Investigate security violations and prepares reports specifying preventive actions to be taken. Collect, assimilate, and interpret intelligence information and disseminates to the appropriate stakeholder or investigating authority. Manage and handle incoming and outgoing classified material, destruction and other such accountable items Qualifications: Bachelor's Degree and minimum 6 years of prior relevant experience. Graduate Degree and a minimum of 4 years of prior related experience. In lieu of a degree, minimum of 10 years of prior related experience. An active security clearance is required; TS/SCI 7 years' experience and practical application of 32 CFR Part 117, RMF, applicable Intelligence Community Directives (ICDs), and DoDM 5205.07. Experience with Information Security, Program Protection, and Personnel Security duties processing collateral, SCI clearances. Experience with security processes and procedures within the DoD and IC communities Experience with security databases, such as TALON. Experience with Intrusion Detection and Access Control Systems Preferred Additional Skills: Initiative in pursuing problems, opportunities, and innovative solutions while handling both the micro level of security compliance and the macro level of business opportunities. Knowledge of resources and practices in the intelligence community; must be current on changing requirements. Knowledge of best practices in implementing physical security methods, consistent with the heightened risk environment while minimizing adverse effects on staff and visitors. Experience in designing and conducting security education and training programs. In compliance with pay transparency requirements, the salary range for this role in New York state is $76,500 - $141,500. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements. L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.
10/26/2026
Full time
L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Job Title: Senior Specialist, Industrial Security (CPSO) Job Code: 42797 Job Location: Rochester, NY Job Schedule: 9/80 (Every other Friday off) Job Description: The CPSO establishes Security plans and procedures for the protection and safeguarding of National Security Information. These duties include the implementation of NISPOM and IC Directives. The CPSO works closely with the Government Program Security Officers to coordinate Program Security activities, to include Physical Security, Personnel Security, COMSEC and implementing technical security controls for Information Systems with ISSO teammates in assigned secure areas. The CPSO is knowledgeable in information technology and information system security best practices. This position is located in Rochester, NY: Essential Functions: Develop and administer security programs and procedures for classified, or sensitive materials, documents, and equipment Research and implement federal security regulations, maintaining knowledge, and awareness of interdisciplinary compliance requirements, i.e. cyber, information technology, and configuration management Obtain rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies. Prepare manuals outlining regulations, and establish procedures for handling, storing, retaining records, and access by personnel or visitors to restricted records and materials. Conduct security education training and security audits Investigate security violations and prepares reports specifying preventive actions to be taken. Collect, assimilate, and interpret intelligence information and disseminates to the appropriate stakeholder or investigating authority. Manage and handle incoming and outgoing classified material, destruction and other such accountable items Qualifications: Bachelor's Degree and minimum 6 years of prior relevant experience. Graduate Degree and a minimum of 4 years of prior related experience. In lieu of a degree, minimum of 10 years of prior related experience. An active security clearance is required; TS/SCI 7 years' experience and practical application of 32 CFR Part 117, RMF, applicable Intelligence Community Directives (ICDs), and DoDM 5205.07. Experience with Information Security, Program Protection, and Personnel Security duties processing collateral, SCI clearances. Experience with security processes and procedures within the DoD and IC communities Experience with security databases, such as TALON. Experience with Intrusion Detection and Access Control Systems Preferred Additional Skills: Initiative in pursuing problems, opportunities, and innovative solutions while handling both the micro level of security compliance and the macro level of business opportunities. Knowledge of resources and practices in the intelligence community; must be current on changing requirements. Knowledge of best practices in implementing physical security methods, consistent with the heightened risk environment while minimizing adverse effects on staff and visitors. Experience in designing and conducting security education and training programs. In compliance with pay transparency requirements, the salary range for this role in New York state is $76,500 - $141,500. This is not a guarantee of compensation or salary, as final offer amount may vary based on factors including but not limited to experience and geographic location. L3Harris also offers a variety of benefits, including health and disability insurance, 401(k) match, flexible spending accounts, EAP, education assistance, parental leave, paid time off, and company-paid holidays. The specific programs and options available to an employee may vary depending on date of hire, schedule type, and the applicability of collective bargaining agreements. L3Harris Technologies is proud to be an Equal Opportunity Employer. L3Harris is committed to treating all employees and applicants for employment with respect and dignity and maintaining a workplace that is free from unlawful discrimination. All applicants will be considered for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender (including pregnancy, childbirth, breastfeeding or other related medical conditions), gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, citizenship status, characteristic or membership in any other group protected by federal, state or local laws. L3Harris maintains a drug-free workplace and performs pre-employment substance abuse testing and background checks, where permitted by law. Please be aware many of our positions require the ability to obtain a security clearance. Security clearances may only be granted to U.S. citizens. In addition, applicants who accept a conditional offer of employment may be subject to government security investigation(s) and must meet eligibility requirements for access to classified information. By submitting your resume for this position, you understand and agree that L3Harris Technologies may share your resume, as well as any other related personal information or documentation you provide, with its subsidiaries and affiliated companies for the purpose of considering you for other available positions. L3Harris Technologies is an E-Verify Employer. Please click here for the E-Verify Poster in English or Spanish. For information regarding your Right To Work, please click here for English or Spanish.
Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver on a scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for an Information Technology Specialist at the journeyman level supporting Headquarters Air Force Materiel Command (HQ AFMC) A4/10 in Wright Patterson AFB, OH. The HQ AFMC Directorate of Logistics, Civil Engineering, Force Protection, and Nuclear Integration (A4/10) is responsible for shaping the workforce and infrastructure needed to deliver logistics, sustainment, installation support, and force protection capabilities across the command. This includes providing oversight for acquisition logistics, supply chain management, depot maintenance, base-level logistics operations, and enterprise security programs. Additionally, the directorate delivers strategic facility and infrastructure oversight while providing command-wide direction for Major Command (MAJCOM) security operations, ensuring the readiness and responsiveness required to support war-winning expeditionary capabilities. Responsibilities include, but are not limited to the duties listed below: Provide day-to-day Information Technology Specialist support within Sensitive Compartmented Information Facilities (SCIFs) supporting DoD agencies, the Office of the Secretary of Defense (OSD), and HQ AFMC, including classified enclave activities. Provide Information Assurance (IA) and technical security administrative assistance, IT endpoint administration and support, network engineering assistance, and Site Information Systems Security Manager (ISSM)/Information Systems Security Officer (ISSO) support. Install, maintain, audit, refresh, and support a secure Microsoft Windows endpoint environment. Maintain DoD and Air Force internet applications and protocols, including Internet Protocol (IP), Transmission Control Protocol (TCP), Hypertext Transfer Protocol (HTTP), Secure Hypertext Transfer Protocol (HTTPS), File Transfer Protocol (FTP), and Secure Sockets Layer (SSL). Interface with AFMC HQ customers and provide IT-related support to quickly resolve technical issues. Analyze and troubleshoot system anomalies to ensure optimum equipment performance. Perform periodic maintenance, hardware upgrades and replacement, firmware updates, and system configuration changes. Attend planning and requirements meetings with IT staff, program managers, analysts, and customers as required. Prepare systems for operational use and support operational tests and inspections. Provide technical guidance and Information Assurance support for AFMC technologies. Apply working knowledge of Local Area Network (LAN) and Wide Area Network (WAN) technologies to maintain system operations. Aid with the acquisition and sustainment of IT systems for weapon systems, subsystems, components, and equipment. Assist with security accreditation and information technology certification processes. Assist in the operation of necessary IT systems to ensure standardized file structures and seamless file sharing to support daily interactions with the SIO, SSO, staff, and directorate senior staff. Advise and assist in the development of system security management plans, computer Certification and Accreditation documentation, security vulnerability analyses, and other system security documents identified in MIL-HDBK 1785, DoDI 5000.02, and AF Supplement 1. Attend meetings and prepare/present briefings, graphics, and visuals for/to leadership. Prepare security paperwork, including but not limited to DD Form 2875 and Communications Security (COMSEC) inspection criteria. Assist in access control and perform escort duties for Video Teleconferencing (VTC) visitors. Answer telephones and other modes of administrative communication in the performance of duties. Perform self-inspections; identify security discrepancies; and report security incidents. Support security inspections; identify security discrepancies; and assist in report preparation. Perform courier responsibilities within the local area. Control program media and information within Air Force Materiel Command (AFMC) security guidelines. Populate and update databases, including but not limited to suspense tracking, personnel access, facility, JWICS system, and SharePoint databases, in the performance of assigned duties. Perform daily opening and closing of the SCIF and respond to SCIF after-duty-hour alarm activations when notified. Support AFMC/A2 Directorate JWICS communications to ensure cognizant parties are informed and appropriate responses are prepared, coordinated, and communicated while maintaining required security disciplines. Support the proper handling, preparation, and tracking of physical classified products entering or leaving the facility. Support planning, formulation, editing, development, publication, and storage of Special Access Program (SAP) and Top Secret/Sensitive Compartmented Information (TS/SCI) products. Support meetings and events attended or hosted by the Senior Intelligence Officer (SIO) on an as-required basis. Develop, maintain, and modify schedules and calendars as required on multi-level security systems. Use updated Security Classification Guides (SCGs) or other source documents to perform classification reviews on JWICS IT documentation and ensure proper derivative classification on all documents encountered during performance of duties. Support administrative tasks as necessary to support management, acquisition, and operations functions. Requirements Must have an active or current Top Secret security clearance with Sensitive Compartmented Information eligibility, verifiable in the Defense Information System for Security (DISS). BA/BS and at least three (3) years of experience in the respective technical/professional discipline being performed with proper certifications required in the labor category performance requirements OR six (6) years of directly related experience with proper certifications as described in the labor category performance requirements. Must be able to work successfully in a dynamic environment and effectively interact with numerous DoD, Agency, military/civilian personnel, and industry partners. Must be able to lift up to 50 pounds. Must meet position and certification requirements outlined in DoD Directive 814 for IA Technician Level II within six months of the date of hire. Must have working knowledge of various DODIIS Cryptologic SCI Information Systems Security Standards, Common Criteria, and System Security Policy as they relate to Certification and Accreditation (C&A). Must be familiar with security policy manuals, appropriate Intelligence Community Directives (ICDs), and other guiding policy documents. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national security and public well-being. Growth-Oriented Environment - Learn from technical leaders, innovate within Agentic AI, and mentor those around you in AI best practices. Culture of Empowerment - You'll be part of a team that values innovation, trust, collaboration, and mission success Please join us, as together we build a better world one mission at a time powered by Technology Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development
10/24/2026
Full time
Overview Join a team where innovation meets mission. Our AI, cloud, cyber, and modernization solutions save agencies thousands of hours, safeguard national security, and strengthen health and humanitarian missions worldwide. With more than 1,700+ team members, 1,500+ AI & data experts, and 100+ prime contracts, we deliver on a scale and with purpose. We've been recognized as a Top Workplace by The Washington Post for six consecutive years and named to the Inc. 5000 list of Fastest-Growing Private Companies in 13 of the past 14 years. Credence is a welcoming environment for those looking to grow and make a meaningful impact. We encourage employees to push boundaries and help solve critical, world-changing federal challenges. Position Summary Credence has an immediate opening for an Information Technology Specialist at the journeyman level supporting Headquarters Air Force Materiel Command (HQ AFMC) A4/10 in Wright Patterson AFB, OH. The HQ AFMC Directorate of Logistics, Civil Engineering, Force Protection, and Nuclear Integration (A4/10) is responsible for shaping the workforce and infrastructure needed to deliver logistics, sustainment, installation support, and force protection capabilities across the command. This includes providing oversight for acquisition logistics, supply chain management, depot maintenance, base-level logistics operations, and enterprise security programs. Additionally, the directorate delivers strategic facility and infrastructure oversight while providing command-wide direction for Major Command (MAJCOM) security operations, ensuring the readiness and responsiveness required to support war-winning expeditionary capabilities. Responsibilities include, but are not limited to the duties listed below: Provide day-to-day Information Technology Specialist support within Sensitive Compartmented Information Facilities (SCIFs) supporting DoD agencies, the Office of the Secretary of Defense (OSD), and HQ AFMC, including classified enclave activities. Provide Information Assurance (IA) and technical security administrative assistance, IT endpoint administration and support, network engineering assistance, and Site Information Systems Security Manager (ISSM)/Information Systems Security Officer (ISSO) support. Install, maintain, audit, refresh, and support a secure Microsoft Windows endpoint environment. Maintain DoD and Air Force internet applications and protocols, including Internet Protocol (IP), Transmission Control Protocol (TCP), Hypertext Transfer Protocol (HTTP), Secure Hypertext Transfer Protocol (HTTPS), File Transfer Protocol (FTP), and Secure Sockets Layer (SSL). Interface with AFMC HQ customers and provide IT-related support to quickly resolve technical issues. Analyze and troubleshoot system anomalies to ensure optimum equipment performance. Perform periodic maintenance, hardware upgrades and replacement, firmware updates, and system configuration changes. Attend planning and requirements meetings with IT staff, program managers, analysts, and customers as required. Prepare systems for operational use and support operational tests and inspections. Provide technical guidance and Information Assurance support for AFMC technologies. Apply working knowledge of Local Area Network (LAN) and Wide Area Network (WAN) technologies to maintain system operations. Aid with the acquisition and sustainment of IT systems for weapon systems, subsystems, components, and equipment. Assist with security accreditation and information technology certification processes. Assist in the operation of necessary IT systems to ensure standardized file structures and seamless file sharing to support daily interactions with the SIO, SSO, staff, and directorate senior staff. Advise and assist in the development of system security management plans, computer Certification and Accreditation documentation, security vulnerability analyses, and other system security documents identified in MIL-HDBK 1785, DoDI 5000.02, and AF Supplement 1. Attend meetings and prepare/present briefings, graphics, and visuals for/to leadership. Prepare security paperwork, including but not limited to DD Form 2875 and Communications Security (COMSEC) inspection criteria. Assist in access control and perform escort duties for Video Teleconferencing (VTC) visitors. Answer telephones and other modes of administrative communication in the performance of duties. Perform self-inspections; identify security discrepancies; and report security incidents. Support security inspections; identify security discrepancies; and assist in report preparation. Perform courier responsibilities within the local area. Control program media and information within Air Force Materiel Command (AFMC) security guidelines. Populate and update databases, including but not limited to suspense tracking, personnel access, facility, JWICS system, and SharePoint databases, in the performance of assigned duties. Perform daily opening and closing of the SCIF and respond to SCIF after-duty-hour alarm activations when notified. Support AFMC/A2 Directorate JWICS communications to ensure cognizant parties are informed and appropriate responses are prepared, coordinated, and communicated while maintaining required security disciplines. Support the proper handling, preparation, and tracking of physical classified products entering or leaving the facility. Support planning, formulation, editing, development, publication, and storage of Special Access Program (SAP) and Top Secret/Sensitive Compartmented Information (TS/SCI) products. Support meetings and events attended or hosted by the Senior Intelligence Officer (SIO) on an as-required basis. Develop, maintain, and modify schedules and calendars as required on multi-level security systems. Use updated Security Classification Guides (SCGs) or other source documents to perform classification reviews on JWICS IT documentation and ensure proper derivative classification on all documents encountered during performance of duties. Support administrative tasks as necessary to support management, acquisition, and operations functions. Requirements Must have an active or current Top Secret security clearance with Sensitive Compartmented Information eligibility, verifiable in the Defense Information System for Security (DISS). BA/BS and at least three (3) years of experience in the respective technical/professional discipline being performed with proper certifications required in the labor category performance requirements OR six (6) years of directly related experience with proper certifications as described in the labor category performance requirements. Must be able to work successfully in a dynamic environment and effectively interact with numerous DoD, Agency, military/civilian personnel, and industry partners. Must be able to lift up to 50 pounds. Must meet position and certification requirements outlined in DoD Directive 814 for IA Technician Level II within six months of the date of hire. Must have working knowledge of various DODIIS Cryptologic SCI Information Systems Security Standards, Common Criteria, and System Security Policy as they relate to Certification and Accreditation (C&A). Must be familiar with security policy manuals, appropriate Intelligence Community Directives (ICDs), and other guiding policy documents. Why This Role Matters Real-World Impact - Your work will support defense and health agencies where AI solutions directly contribute to national security and public well-being. Growth-Oriented Environment - Learn from technical leaders, innovate within Agentic AI, and mentor those around you in AI best practices. Culture of Empowerment - You'll be part of a team that values innovation, trust, collaboration, and mission success Please join us, as together we build a better world one mission at a time powered by Technology Benefits Health Care Plan (Medical, Dental & Vision) Retirement Plan (401k, IRA) Life Insurance (Basic, Voluntary & AD&D) Paid Time Off (Vacation, Sick & Public Holidays) Family Leave (Maternity, Paternity) Short Term & Long Term Disability Training & Development
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking an experienced Security Lead to own the Program security posture, compliance artifacts, and coordination with Program Security Oversight leadership. This role shares leadership of the security team with a Co-Lead and directs the work of the Information Security Specialist team, ensuring compliance documentation, vulnerability management, and ATO artifacts are complete, current, and defensible in a complex federal healthcare IT environment. The ideal candidate brings deep federal cybersecurity experience, a track record of leading security teams, and the judgment to represent the program's security posture to executive and government stakeholders. What You Will Do: Own Task 3 security management deliverables, including compliance documentation, risk register maintenance, and coordination with the Program Security Oversight Leader. Direct and coordinate the Information Security Specialist team, including workload distribution and quality oversight of security deliverables, alongside the Sr. Information Security Specialist (Co-Lead). Support Authorization to Operate (ATO) maintenance, continuous Assessment & Authorization (A&A) activities, and FISMA/FedRAMP compliance documentation for Client-managed systems. Author and review security documentation, including System Security Plans (SSPs), Risk Assessments, and Security Impact Analyses (SIA), prior to submission to Program Security Oversight leadership. Oversee vulnerability scanning, remediation tracking, and security findings reporting across enterprise tools; review results and recommended corrective actions from the Information Security Specialist team. Serve as the primary security point of contact with Program Security Oversight Leadership, and maintain collaborative relationships with federal ISSOs, CSPs (e.g., AWS, Azure), system owners, and vendors. Coordinate with the Tools Management team through the combined Security/Tools scrum cadence. Track and maintain the centralized Security Risk Register, map vulnerabilities to POA&Ms, and support FISMA/FedRAMP compliance efforts across the program. Provide guidance and privacy/security insight to Agile teams across projects, and support Privacy and Security Compliance through all stages of the systems development lifecycle (SDLC). Work within Client system repositories such as CFACTS and BOX. Oversee declared game day events, ensuring after-action reports and other required game day artifacts are completed by the security team. Develop and maintain standard operating procedures (SOPs) for repeatable security processes across the team. Perform additional duties as assigned by the Program Security Oversight Leader. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field (or equivalent professional experience). 8+ years of information security experience in a federal or enterprise environment, including team leadership. Experience with FISMA compliance, ATO processes, and continuous Assessment & Authorization (A working understanding of NIST 800-53/37. Experience co-leading or managing a multi-person security team, including workload distribution and quality oversight of deliverables. Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, Confluence, and FISMA/ATO documentation standards and processes. Ability to obtain and maintain Program EUA access and required Public Trust clearance. Strong communication skills and ability to coordinate across multi-disciplinary teams and government stakeholders. Even Better: Prior Program or HHS security program experience strongly preferred. Relevant security certification (CISSP, CISM, CEH, CCNA Security, or Security+). Familiarity with federal control tracking systems (e.g., CFACTS and BOX). Working knowledge of cloud environments (AWS, Azure) and associated security controls. Exposure to pen testing, application security, and CDN security services (e.g., Akamai). Experience providing security and privacy input within Agile development environments. Knowledge about emerging industry or technology trends such as Artificial Intelligence (AI) frameworks. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
09/30/2026
Full time
Job Description Job Description Description: Company Description: ASG is a Minority- and Woman-Owned, Physician-Owned small business with over 15 years of experience in federal government contracting. We deliver a wide range of technology services, including software development, mobile apps, AI/ML, analytics, data science, big data, DevSecOps, digital transformation, cloud, and cybersecurity. ASG is CMMI Level 3 certified and holds ISO 9001:2015, 20000-1:2018, and 27001:2022 certifications . Job Description: ASG is seeking an experienced Security Lead to own the Program security posture, compliance artifacts, and coordination with Program Security Oversight leadership. This role shares leadership of the security team with a Co-Lead and directs the work of the Information Security Specialist team, ensuring compliance documentation, vulnerability management, and ATO artifacts are complete, current, and defensible in a complex federal healthcare IT environment. The ideal candidate brings deep federal cybersecurity experience, a track record of leading security teams, and the judgment to represent the program's security posture to executive and government stakeholders. What You Will Do: Own Task 3 security management deliverables, including compliance documentation, risk register maintenance, and coordination with the Program Security Oversight Leader. Direct and coordinate the Information Security Specialist team, including workload distribution and quality oversight of security deliverables, alongside the Sr. Information Security Specialist (Co-Lead). Support Authorization to Operate (ATO) maintenance, continuous Assessment & Authorization (A&A) activities, and FISMA/FedRAMP compliance documentation for Client-managed systems. Author and review security documentation, including System Security Plans (SSPs), Risk Assessments, and Security Impact Analyses (SIA), prior to submission to Program Security Oversight leadership. Oversee vulnerability scanning, remediation tracking, and security findings reporting across enterprise tools; review results and recommended corrective actions from the Information Security Specialist team. Serve as the primary security point of contact with Program Security Oversight Leadership, and maintain collaborative relationships with federal ISSOs, CSPs (e.g., AWS, Azure), system owners, and vendors. Coordinate with the Tools Management team through the combined Security/Tools scrum cadence. Track and maintain the centralized Security Risk Register, map vulnerabilities to POA&Ms, and support FISMA/FedRAMP compliance efforts across the program. Provide guidance and privacy/security insight to Agile teams across projects, and support Privacy and Security Compliance through all stages of the systems development lifecycle (SDLC). Work within Client system repositories such as CFACTS and BOX. Oversee declared game day events, ensuring after-action reports and other required game day artifacts are completed by the security team. Develop and maintain standard operating procedures (SOPs) for repeatable security processes across the team. Perform additional duties as assigned by the Program Security Oversight Leader. Perform additional duties assigned. Requirements: What We Need : Bachelor's degree or higher in Computer Science, Information Technology, Cybersecurity, Systems Engineering, or a related field (or equivalent professional experience). 8+ years of information security experience in a federal or enterprise environment, including team leadership. Experience with FISMA compliance, ATO processes, and continuous Assessment & Authorization (A working understanding of NIST 800-53/37. Experience co-leading or managing a multi-person security team, including workload distribution and quality oversight of deliverables. Working knowledge of vulnerability scanning and compliance/POA&M platforms, Jira, Confluence, and FISMA/ATO documentation standards and processes. Ability to obtain and maintain Program EUA access and required Public Trust clearance. Strong communication skills and ability to coordinate across multi-disciplinary teams and government stakeholders. Even Better: Prior Program or HHS security program experience strongly preferred. Relevant security certification (CISSP, CISM, CEH, CCNA Security, or Security+). Familiarity with federal control tracking systems (e.g., CFACTS and BOX). Working knowledge of cloud environments (AWS, Azure) and associated security controls. Exposure to pen testing, application security, and CDN security services (e.g., Akamai). Experience providing security and privacy input within Agile development environments. Knowledge about emerging industry or technology trends such as Artificial Intelligence (AI) frameworks. Clearance Requirement: Ability to obtain and maintain public trust background investigation/clearance per client requirements. Additional Information: At ASG, we value diversity and always treat all employees and job applicants based on merit, qualifications, competence, and talent. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or status as a protected veteran. Applicants in need of special assistance or accommodation during the interview process or in accessing our website may contact us by sending an email to . We will treat your request as confidentially as possible. In your email, please include your name and preferred method of contact, and we will respond as soon as possible. Perks: At ASG, we want you to be well and thrive. Our benefits package includes: Healthcare Benefits Life Disability Paid Time Off 401k Matching Employee Referral Bonus Education Assistance Learning and Development resources EOE, including Disability/Veterans
