Apply on Employer Site

Seneca Resources · 3 days ago

Information Technology Security Specialist

United States

Contract

Remote

Senior Level

5+ years exp

Seneca Resources is a staffing and consulting firm that partners with professionals to help them grow their careers. They are seeking an IT Security Specialist to support a Federal Government customer in securing enterprise applications and cloud environments, focusing on application security engineering and cloud security.

Information ServicesInformation TechnologyRecruitingStaffing Agency

No H1B

Security Clearance Required

U.S. Citizen Only

Hiring Manager

Selvakumar Vethakkan

Responsibilities

Lead application security efforts across enterprise systems, including SAST, DAST, and manual source code reviews

Design, implement, and manage enterprise-wide Application Security programs

Integrate security testing into CI/CD pipelines

Develop security architectures and technical solutions for cloud-hosted applications

Evaluate and implement security controls for Azure and Microsoft 365 environments

Monitor, detect, and respond to security incidents and vulnerabilities

Conduct cyber threat, risk, and vulnerability assessments

Administer and maintain security tools, including patching, upgrades, and integrations

Develop security metrics, dashboards, and compliance reporting

Participate as a member of the Incident Response Team

Support operational implementation of FISMA, NIST, and OMB cybersecurity requirements

Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and Continuous Monitoring Plans

Conduct security audits, assessments, and system reviews

Ensure compliance with federal cybersecurity policies and standards

Partner with IT, engineering, and business teams to implement secure solutions

Provide expert cybersecurity guidance to technical and non-technical stakeholders

Manage IT security awareness and training initiatives

Support security-related service requests and ticket resolution to meet SLAs

Qualification

SASTDASTCI/CD security integrationMicrosoft Azure securityFISMANISTApplication vulnerability assessmentsSecure coding best practicesProgramming languagesManual code reviewCloud security controlsSecurity auditsCybersecurity guidanceIT security awarenessSecurity metrics