Senior Cyber Security Specialist (Top Secret)

Please note: This role is contingent upon a contract award. While it is not an immediate opening we are actively conducting interviews and extending offers in anticipation of the award.

ICF is seeking a Senior Cyber Security Specialist to support a secure federal ServiceNow program with multiple mission workstreams. This roleis responsible forhelpingmaintainthe security posture of the platform and supporting the security activities that keep development testing release and sustainment efforts aligned to federal cybersecurity requirements.

The ideal candidate is an experienced security professional who can work across infrastructure application data and development teams to support vulnerability management access control system authorization and continuous monitoring. You will help ensure security is built into the lifecycle of the solution not added after the fact while also supporting operational workflows release readiness and compliance tracking in a fast-paced Agile environment.

Job Location:Remote work is authorized.Must support US Eastern time zone working hours.Preference to candidates who live in the Washington DC metro area.

*If you accept this position you should note that ICF doesmonitoremployee work locations blocks access from foreign locations/foreign IP addresses and prohibits personal VPN connections.

What You Will Do

• Support the security posture of enterprise ServiceNow systems and related applications

• Assistwith security governance system authorization and continuous monitoring activities

• Developmaintain and update security documentation and artifacts such as SSPs POA&Ms risk registers and related compliance materials

• Support ATO efforts security assessments evidence gathering and control validation

• Track and remediate vulnerabilities scan findings and security issues through closure

• Coordinate with developers administrators testers and program stakeholders to ensure security findings are understood and addressed

• Support access control reviews role-based permissionsleast-privilegepractices and secure user administration

• Help evaluate security implications of workflow changes data integrations releases and configuration updates

• Support audit preparation findings response and ongoing compliance reporting

• Monitor and document security process changes configuration updates and remediation actions

• Contribute to secure release practices including validation of fixes and scan remediation before deployment

• Support incident and issue triage from a security perspective when needed

What You Must Have

• Must be a U.S. citizen andpossessan active Top Secret security clearance as required by the federal contract

• Bachelors degree in Cybersecurity Information Systems Computer Science or a related field

• 6 years of relevant experience in information security cybersecurity or system security roles

• 6 years of experience supporting federal security frameworks such as FISMA NIST RMF or similar

What We Would Like YouToHave

• 4 years of experience supporting ATO processes security documentation and continuous monitoring

• 4 years of experience with vulnerability management security scanning tools or remediation workflows

• 3 years of experience conducting risk assessments security analysis or compliance reviews

• 3 years of experience supporting cloud or enterprise system security

• Experience supporting federal ServiceNow environments or other enterprise workflow platforms

• Familiarity with RMF artifacts ATO packages POA&M tracking and continuous monitoring programs

• Experience with identity and access management role governance orleast-privilegedesign

• Experience supporting secure release practices scan remediation orDevSecOpsworkflows

• Familiarity with vulnerability tools static/dynamic analysis or cloud security controls

• Experience supporting audit response corrective action tracking or security governance meetings

• Relevant cybersecurity certification such as Security CISSP or equivalent

Professional Skills

• Demonstrated ability to communicate security issues clearly to technical and non-technical stakeholders

• Strong organizational skills and attention to detail for compliance tracking and evidence management

#icfcleared

At ICF we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment the use of artificial intelligence (AI) tools to generate orassistwith responses during interviews (whether in-person or virtual) is notpermitted. This policy is in place tomaintainthe integrity and authenticity of the interview process.

However we understand that some candidates may require accommodationthat involves the use of AI. Ifsuch anaccommodation is needed candidates are instructed to contact us in advance at. Weare dedicated to providingthe necessary support to ensure that all candidates have an equal opportunity to succeed.