Latitude Inc · 3 months ago
Senior Information Security Specialist-SECRET CLEARANCE REQUIRED
Latitude Inc is seeking a Senior Information Security Specialist with a focus on executing and supporting the Risk Management Framework lifecycle. The role involves developing security plans, conducting vulnerability assessments, and providing security guidance to teams while ensuring compliance with cybersecurity standards.
Manufacturing
Responsibilities
Execute and support the Risk Management Framework (RMF) lifecycle including system categorization, control selection, implementation, assessment, and authorization
Develop, maintain, and validate System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, Contingency Plans (CPs), and related compliance documentation
Conduct and lead vulnerability assessments, leveraging tools such as Nessus, ACAS, and Fortify to identify and prioritize remediation efforts
Perform continuous monitoring of security controls and produce metrics, dashboards, and evidence in support of ATO renewals and sustainment
Analyze and respond to security incidents, working with SOC personnel and SIEM tools to evaluate logs, investigate events, and contain potential threats
Conduct internal audits and risk assessments to validate the effectiveness of implemented controls and identify compliance gaps
Provide security guidance to engineering and development teams, ensuring adherence to cybersecurity standards in a DevSecOps environment
Stay informed of evolving threats, vulnerabilities, and regulatory changes to proactively enhance security postures
Coordinate with Security Control Assessors (SCAs), ISSOs, system owners, and federal stakeholders on audit readiness and policy compliance
Draft and enforce cybersecurity policies, SOPs, and standards that support mission-critical systems across hybrid environments
All other duties as assigned by management
Qualification
Required
Bachelor's or Associate's degree in Computer Science, Math, Information Technology, Engineering, or related field. Five (5) years of directly relevant experience may substitute for two (2) years of formal education
Minimum of five (5) years of experience in experience with vulnerability scanning tools and security assessment methodologies
Minimum of five (5) years of experience with network security, firewall management, intrusion detection/prevention systems (IDS/IPS)
Minimum of (5) years of experience with Security Information and Event Management (SIEM)
Minimum of five (5) years of experience in the risk management framework
Basic knowledge of the following: Active Directory, UNIX, RHEL, Windows, Relational Databases
Must have an active DoD Secret Clearance
Preferred
Previous support of federal government enterprise systems or DHS/DOD programs is strongly preferred
Company
Latitude Inc
Company Summary Latitude is a Human Resource Consulting Firm headquartered in Hanover, MD with an office in Winter Park, FL.
Funding
Current Stage
Early StageCompany data provided by crunchbase