IT Security Specialist II – Security Operations & Compliance
GAMA-1 Technologies, LLC seeks an experienced IT Security Specialist II on upcoming work to support cybersecurity operations and compliance activities within federal telework environment. The incumbent operates security monitoring and scanning tools, collects and maintains security artifacts, updates compliance records in CSAM, and assists with Plans of Action and Milestones (POA&Ms) updates and retesting of evidence. This role ensures accurate documentation of Standard Operating Procedures (SOPs) and contributes to maintaining a strong security posture in alignment with federal standards such as STIGs, FISMA, and other agency requirements.
Supervisory Responsibilities None
Essential functions/responsibilities
Reasonable accommodations may be made to enable individuals with disabilities to perform these essential functions.
- Operate and maintain security scanning and monitoring tools to identify vulnerabilities and monitor system security.
- Collect, organize, and maintain security artifacts for compliance and audit purposes.
- Document and update Standard Operating Procedures (SOPs) related to security operations and monitoring.
- Update and maintain CSAM entries to reflect current system compliance status.
- Assist with POA&M updates, including tracking remediation progress and retesting evidence to verify resolution of findings.
- Support vulnerability management and remediation activities, ensuring compliance with STIGs, NIST standards, and federal cybersecurity policies.
- Collaborate with IT and security teams to ensure accurate reporting and timely resolution of identified risks.
- Maintain awareness of evolving cybersecurity threats, standards, and best practices.
Information Security and Confidentiality Obligations
- Ensure adherence to organizational information security policies and procedures; actively participate in mandatory security awareness training; and manage confidential and sensitive information in accordance with company protocols and data protection standards.
- Bachelor’s degree in Engineering, Information Technology, Business, or a related field (or equivalent work experience).
- 2-4 years of experience in security operations or related cybersecurity functions.
- Professional certification Security+ is required.
- Familiarity with STIGs, vulnerability management, and federal compliance standards.
- Strong documentation and organizational skills with attention to detail.
- Basic understanding of security monitoring, incident detection, and risk mitigation processes.
- Professional certification CySA+ or SSCP are preferred.
- Experience with federal compliance tools, such as CSAM.
- Familiarity with POA&M management, remediation tracking, and retesting procedures.
- Experience in Windows and Linux enterprise environments.
- In accordance with facility Special Security Requirements and Department of Justice (DOJ) policy, candidates must have legally resided in the United States for three of the past five years, worked for the U.S. Government or military overseas, or been a dependent of a U.S. Government or military employee serving overseas. Non-U.S. citizens must be from an allied nation as defined by the Office of Personnel Management. Employment is contingent upon successful completion of Bureau of Prisons investigative procedures, which may include NCIC and fingerprint checks, law enforcement and employment history verification, federal application/resume review, release of information, urinalysis, and, if applicable, a National Agency Check. No work may commence until all required background investigations and clearances have been fully adjudicated.).
- This work will be performed primarily in a telework environment, with on-site duties required one day per week.
- Prolonged periods of sitting at a desk and working on a computer.
- Must be able to access and navigate each department at the organizations and client facilities.
Proficiency Requirement
- The employee is expected to demonstrate proficiency in all essential job functions, tools, and processes related to this position within the first 90 days of employment. This includes acquiring a thorough understanding of job-specific responsibilities, systems, and workflows as outlined during onboarding and training. Failure to meet this requirement may result in additional training, reassessment, or other actions as deemed necessary by management.
The base salary range for this position is $114,935 - $138,475
This base salary range represents a general guideline. An individual’s base salary within that range is determined based on a variety of factors, including (without limitation) the scope, complexities, and responsibilities of the position, the government contract to which the position is assigned, geographic location, market conditions, and the candidate’s relevant experience, education, and skills.
GAMA-1 also offers a variety of benefits, including health insurance coverage, life and disability insurance, 401(k) savings plan, training and career development opportunities, paid holidays and paid time off (PTO - to cover vacation, illness or disability, appointments, emergencies or other situations that require time off from work). For more information click here.
ABOUT GAMA-1
GAMA-1 is a rapidly growing technology business that is based in Greenbelt, Maryland. GAMA-1 Technologies provides strategic information assurance, information security, and business enterprise and networking solutions to the Federal Government. Our success is based on the utilization of industry and agency standards, establishment of standardized processes, and IT Services expertise. At GAMA-1, we believe employees should grow, achieve, and develop just as the company grows, achieves, and develops. GAMA-1 is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com
GAMA-1 is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to: veteran status, uniformed servicemember status, race, color, religion, sex, sexual orientation, gender identity, age, pregnancy (including childbirth, lactation and related medical conditions), national origin or ancestry, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics), domestic violence victims, political orientation, status as a smoker or tobacco user, hairstyle, use of a service animal, education status, familial status, HIV/AIDS status, height, weight, reproductive healthcare decisions or any other category protected by federal, state or local law.