Cybersecurity Specialist and ISSO Support

Why this job exists

Why people take this job

What you will do

• Support the Information System Security Officer for the legacy and cloud systems under the NIST Risk Management Framework: control implementation, assessment support and authorization packages.
• Run continuous monitoring: vulnerability scanning, analysis, remediation tracking against federal timelines, and POA&M currency.
• Maintain system security plans, contingency plans, privacy and security artifacts, and assessment evidence.
• Conduct privileged access reviews, audit log review and configuration compliance checks; coordinate patching priorities with the infrastructure team.
• Advise on the security impact of changes before they are made, across on-premises and cloud environments.
• Support incident response, FISMA reporting and audits, and keep compliance evidence current.

What you need

What sets a candidate apart

Benefits

• Pay is discussed with you directly when we speak. These are the benefits every full-time SPN employee receives.
• Medical and prescription coverage, dental and vision, with employer-subsidized premiums for employees and dependents
• 401(k) with employer match
• Group life insurance at no cost to you
• Short-term and long-term disability
• Paid time off, 11 federal holidays, paid sick leave, bereavement leave
• Parental leave
• Certification reimbursement (Oracle, OCI, AWS/Azure, PMP, ITIL, Security+, CISSP and others), an annual training budget and tuition assistance

Terms, and how to apply

• Full time, W-2, salaried (exempt), employed by SPN Solutions
• Target start: October 2026
• Hybrid: based at SPN's office in Fairfax, Virginia, with some telework; occasional days at the customer's Atlanta, Georgia campus when the work requires it
• Core hours 9:00 a.m. to 3:30 p.m. Eastern, Monday to Friday, with flexible start between 6:00 and 9:00 a.m. Eastern; federal holidays off
• You must be a U.S. citizen and obtain and keep an HHS Tier 2 (moderate risk) public trust determination; no security clearance is required
• You complete HHS security, privacy and records management training before access, and cGMP training shortly after you start
• Work is done on customer-furnished or SPN-furnished equipment under HHS security rules
• Apply through the link with your resume; it takes a few minutes and no cover letter is needed. A recruiter reads every application and answers within two business days. The process is short: one conversation with a recruiter, one technical conversation with the team, then a decision.
• SPN Solutions is an Equal Opportunity Employer. All qualified applicants are considered without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. SPN participates in E-Verify.
• Keywords: Cybersecurity Specialist, ISSO, Information System Security Officer, NIST RMF, continuous monitoring, POA&M, NIST SP 800-53, FISMA, FedRAMP, vulnerability management, CISSP, assessment and authorization, security plan, HHS, public trust, Fairfax VA, Northern Virginia, hybrid