Quick Overview
Seniority
Mid Senior
Work mode
Remote
Location
Alexandria, VA, United States
Posted
2 weeks ago
AWSEncryptionHIPAAZero Trust
Job Description
SBG Technology Solutions, Inc. (SBG), a DSS, Inc. company, offers IT Governance, Systems Engineering, Enterprise Modernization, Artificial Intelligence, and Cyber Security innovation to federal and commercial clients nationwide.
Overview
The Cybersecurity Specialist ensures all applications meet FedRAMP High security and compliance requirements throughout the assessment and onboarding process for DSS Health Cloud, a FedRAMP High authorized healthcare-focused platform hosted in an AWS Government enclave environment. This role supports Independent Software Vendors (ISVs) and government applications by identifying security gaps, supporting authorization documentation, and validating alignment with applicable federal cybersecurity frameworks.
The Cybersecurity Specialist will:
Other Duties:
Conditions of Employment:
Security and Privacy Duties and Responsibilities
Individuals working for SBG Technology Solutions, Inc, a DSS, Inc. will be subject to security and privacy requirements as explained in HIPAA, FedRAMP, and NIST 800-53. Additionally, they are required to undergo specific FedRAMP training to ensure compliance with all associated controls and responsibilities in the day-to-day performance of their duties. Individuals working in departments that are considered to be in the high-risk category will be required to undergo advanced training based on their role and level of access. Individuals with access to modify data and the configuration baseline will require further training.
The preceding functions are examples of the work performed by employees assigned to this job classification. Management reserves the right to add, modify, change or rescind work assignments and make a reasonable accommodation as needed.
Required Skills:
Preferred Skills:
Education:
Required:
Desired: Master's degree in Cybersecurity, Information Assurance, or a related field
Certification(s), Licenses:
Desired:
Years of experience in a similar role:
Required: 8+ years of cybersecurity experience in federal or regulated environments, with demonstrated engagement in FedRAMP or RMF processes
Desired: 10+ years of cybersecurity experience including direct responsibility for ATO support or FedRAMP authorization activities
Compensation:
Salary at SBG Technology Solutions, Inc is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $130,000.00 to $150,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of DSS, Inc.'s total compensation package for employees.
Physical Demands:
Standing
5% per day
Sitting
90% per day
Walking
5% per day
Stooping
Minimal
Lifting
Up to 10 lbs. unassisted, several times a day (laptop, office equipment, office supplies, etc.)
Computer Work
85% per day
Telephone Work
15% per day
Reading
20% per day
Other, please specify
Travel unassisted up to ___% per year, via common carrier and/or personal automobile.
SBGTS, Inc. is an Equal Opportunity Employer
If you need an accommodation seeking employment with SBGTS, Inc., please e-mail or call . Accommodations are made on a case-by-case basis.
Overview
The Cybersecurity Specialist ensures all applications meet FedRAMP High security and compliance requirements throughout the assessment and onboarding process for DSS Health Cloud, a FedRAMP High authorized healthcare-focused platform hosted in an AWS Government enclave environment. This role supports Independent Software Vendors (ISVs) and government applications by identifying security gaps, supporting authorization documentation, and validating alignment with applicable federal cybersecurity frameworks.
The Cybersecurity Specialist will:
- Assesses application security posture, including logging, auditing, and control implementation, against FedRAMP High baseline requirements
- Supports Authority to Operate (ATO) documentation efforts and compliance readiness activities for applications undergoing onboarding assessment
- Identifies cybersecurity gaps across assessed applications and recommends prioritized remediation actions with supporting rationale
- Evaluates application and environment alignment with Zero Trust architecture principles and continuous monitoring requirements
- Supports development of System Security Plans (SSPs), Plan of Action and Milestones (POA&M) inputs, and related security authorization artifacts
- Applies Risk Management Framework (RMF) processes to security assessment activities and documents findings in accordance with NIST guidelines
- Reviews identity, access control, and encryption implementations to verify compliance with applicable standards and FedRAMP controls
- Conducts vulnerability management reviews and evaluates continuous monitoring capabilities for onboarding candidates
- Collaborates with cloud architects, program managers, and ISV technical teams to communicate security findings and guide remediation planning
Other Duties:
- Performs other duties as assigned by management in support of SBG Technology Solutions contract objectives
- Travel requirements: occasional travel as required by project needs (estimated up to 10% per year)
Conditions of Employment:
- Must be able to pass a Federal background check
- Must be determined suitable for federal employment
Security and Privacy Duties and Responsibilities
Individuals working for SBG Technology Solutions, Inc, a DSS, Inc. will be subject to security and privacy requirements as explained in HIPAA, FedRAMP, and NIST 800-53. Additionally, they are required to undergo specific FedRAMP training to ensure compliance with all associated controls and responsibilities in the day-to-day performance of their duties. Individuals working in departments that are considered to be in the high-risk category will be required to undergo advanced training based on their role and level of access. Individuals with access to modify data and the configuration baseline will require further training.
The preceding functions are examples of the work performed by employees assigned to this job classification. Management reserves the right to add, modify, change or rescind work assignments and make a reasonable accommodation as needed.
Required Skills:
- In-depth knowledge of FedRAMP High security controls and the NIST Risk Management Framework (RMF) process
- Proficiency in security architecture review and cloud security engineering within AWS or comparable government cloud environments
- Experience conducting vulnerability management assessments and evaluating continuous monitoring programs
- Working knowledge of identity and access management (IAM), encryption standards, and access control frameworks
- Ability to develop and review authorization documentation including SSPs, POA&Ms, and security assessment reports
- Strong analytical and written communication skills; able to document and present security findings clearly to both technical and non-technical audiences
- Capable of managing concurrent assessment workstreams and delivering findings within defined project timelines
Preferred Skills:
- Familiarity with HIPAA Security Rule requirements and healthcare application security considerations
- Experience with AWS security tooling (e.g., AWS Security Hub, GuardDuty, CloudTrail, Config)
- Knowledge of DevSecOps practices and secure software development lifecycle (SSDLC) methodologies
Education:
Required:
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related technical discipline
- A combination of education and experience will be considered (2 years of relevant experience equivalent to 1 year in a degree program)
Desired: Master's degree in Cybersecurity, Information Assurance, or a related field
Certification(s), Licenses:
Desired:
-
- Certified Information Systems Security Professional (CISSP)
- Certified Information Security Manager (CISM)
- CompTIA Security+ or equivalent federal baseline certification
- AWS Certified Security - Specialty
- Certified Information Systems Security Professional (CISSP)
Years of experience in a similar role:
Required: 8+ years of cybersecurity experience in federal or regulated environments, with demonstrated engagement in FedRAMP or RMF processes
Desired: 10+ years of cybersecurity experience including direct responsibility for ATO support or FedRAMP authorization activities
Compensation:
Salary at SBG Technology Solutions, Inc is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $130,000.00 to $150,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of DSS, Inc.'s total compensation package for employees.
Physical Demands:
Standing
5% per day
Sitting
90% per day
Walking
5% per day
Stooping
Minimal
Lifting
Up to 10 lbs. unassisted, several times a day (laptop, office equipment, office supplies, etc.)
Computer Work
85% per day
Telephone Work
15% per day
Reading
20% per day
Other, please specify
Travel unassisted up to ___% per year, via common carrier and/or personal automobile.
SBGTS, Inc. is an Equal Opportunity Employer
If you need an accommodation seeking employment with SBGTS, Inc., please e-mail or call . Accommodations are made on a case-by-case basis.
Similar jobs
- RA
Embedded Security Software Engineer II (Onsite)
NewRaytheon
Orlando, FL🇺🇸$68.9k - $131.1k/yrHybrid23 hours agoScrumAgileC+++3Technology - RT
Network Security Engineer
NewReveille Technologies
Chicago, IL🇺🇸Hybrid23 hours agoTechnology - AP
Principal Identity Security Architect & Product Engineering Lead
NewApolis
Irving, TX🇺🇸Hybrid23 hours agoAzureSSOMFA+1Technology - P2
Oracle Cloud Security Consultant
NewP2PSoftTek Inc
United States🇺🇸Remote23 hours agoOracleLDAPTechnology - PE
Security and Compliance Administrator with Security Clearance
NewPrescient Edge
Doral, FL🇺🇸Hybrid23 hours agoAWSAzureSplunk+2 - AT
IT Cyber Security Analyst (Onsite in Greenville, SC) Local Face to Face Interview
NewAKAASA Technologies
Greenville, SC🇺🇸Hybrid23 hours agoActive DirectoryKibanaPower BITechnology - GS
Senior Network Security Engineer-Palo Alto / Cisco ISE / SD-WAN (Hybrid Onsite)
GSK Solutions Inc.
Frisco, TX🇺🇸Hybrid4 weeks agoIoTTechnology - BO
Senior Spacecraft Avionics Security Engineer - Millennium Space with Security Clearance
NewBoeing
El Segundo, CA🇺🇸$146.2k - $215k/yrHybrid23 hours agoAgileTechnology - AM
Cybersecurity Engineer with Security Clearance
NewAmentum
Houston, TX🇺🇸On-site23 hours agoTechnology - VG
Security Analyst with NDR Exp
NewVentureSoft Global
United States🇺🇸Hybrid23 hours agoTechnology - AN
Security Engineer – Application Development
NewAnveta Inc
Irvine, CA🇺🇸$60/hrOn-site23 hours agoAWSOWASPSOC 2+4Technology - LM
Classified Cyber Sec Asc Mgr - L4 with Security Clearance
NewLockheed Martin
Fort Worth, TX🇺🇸Hybrid23 hours agoStakeholder ManagementTechnology