ERG is seeking a Senior Security Specialist to oversee information assurance and cybersecurity compliance across Navy systems and environments. This role ensures that all systems adhere to DoD and Navy cybersecurity policy, Risk Management Framework (RMF) requirements, and established security best practices. The ideal candidate brings deep expertise in cybersecurity governance, auditing, and compliance within high security DoD environments.
This is a fulltime onsite position at the Naval Surface Warfare Center (NSWC) Indian Head. Indian Head, MD, is approximately 30 miles from Washington, DC, 25 miles from Alexandria, VA, and 60 miles from Fredericksburg, VA.
ERG is seeking a Senior Security Specialist to oversee information assurance and cybersecurity compliance across Navy systems and environments. This role ensures that all systems adhere to DoD and Navy cybersecurity policy, Risk Management Framework (RMF) requirements, and established security best practices. The ideal candidate brings deep expertise in cybersecurity governance, auditing, and compliance within high security DoD environments.
This is a fulltime onsite position at the Naval Surface Warfare Center (NSWC) Indian Head. Indian Head, MD, is approximately 30 miles from Washington, DC, 25 miles from Alexandria, VA, and 60 miles from Fredericksburg, VA.
Job Description:
Implement and enforce cybersecurity policies, procedures, and security controls across Navy systems
Conduct security audits, inspections, and compliance assessments to validate adherence to DoD and Navy cybersecurity requirements
Support RMF lifecycle activities, including control implementation, evidence collection, documentation updates, and stakeholder coordination
Contribute to ATO package development, POA&M management, and ongoing authorization efforts
Perform continuous monitoring of cybersecurity controls and system security posture
Ensure organizational alignment with DoD, Navy, and federal cybersecurity directives, standards, and best practices
Develop and maintain security documentation, including SSPs, assessment reports, and compliance artifacts
Provide cybersecurity guidance and mentorship to engineering and program teams
Qualifications and Skills:
Required
Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, or related field
8+ years of professional experience in cybersecurity, information assurance, or security compliance
DoD‑approved IAM certifications (e.g., CAP, CISSP, GSLC, or similar)
Strong understanding of RMF, NIST SP 800‑53 controls, and ATO processes
Experience conducting audits, assessments, and security compliance reviews
Familiarity with eMASS, continuous monitoring tools, and federal compliance frameworks
Excellent communication, documentation, and organizational skills
Must currently hold or maintain a Department of Defense Top investigation/privileged access eligibility (T5 (SSBI) clearance)
Must be a U.S. citizen as this position is not eligible for Limited Access Authorizations
Preferred
Experience supporting U.S. Navy systems or other DoD cybersecurity programs
Knowledge of system engineering, platform security, and secure configuration standards