Security Specialist

## Overview The Security Specialist supports the security and compliance functions of the Federal Government Business Unit subsidiaries of Cayuse Holdings. This position assists with the authorization, operation, and maintenance of secure information systems, facilities, and personnel. Working under the direction of senior security staff, the Security Specialist helps implement security procedures and ensures compliance with applicable federal regulations and standards, including 32 CFR Part 117 (NISPOM), FAR, DFARS, and NIST SP 800-171. This position aligns with Cayuse’s core values of Innovation, Excellence, Collaboration, Adaptability, and Integrity by fostering technical solutions that meet customer needs, promoting teamwork, and prioritizing quality in deliverables. ## Responsibilities - Assist in the development, review, and maintenance of security documentation and implementation statements. - Support the tracking and management of Plans of Action and Milestones (POA&Ms) as assigned. - Provide cybersecurity and federal cyber compliance support for the Cayuse IT network infrastructure, including on-premises networking and network security devices, as well as endpoints operating within Azure and Microsoft 365 GCC High cloud environments. - Assist with the assessment and review of technical, management, and operational security controls in accordance with NIST SP 800-171 Rev. 2 and Rev. 3. - Support the preparation, organization, and maintenance of Industrial Security and Cybersecurity records and documentation. - Participate in onboarding communications and the in‑processing of new employees to ensure appropriate security briefings, acknowledgements, and access requests are completed. - Assist in developing, documenting, and implementing security guidelines and procedures for employees, vendors, and visitors. - Apply working knowledge of 32 CFR Part 117 (NISPOM) and associated Industrial Security databases and tools in daily activities. - Support compliance efforts related to FAR and DFARS cybersecurity requirements, including but not limited to CMMC, the FAR CUI Rule, CIRCIA, and NIST SP 800-171 Rev. 2 and Rev. 3. - Contribute to risk management activities, including identifying, documenting, and mitigating security risks, and supporting contingency and incident response planning. - Other duties as assigned. ## Qualifications - Bachelor’s degree in Information Technology, Cybersecurity, or a related field, or equivalent combination of education and experience (preferred). - Due to the nature of work, U.S. Citizenship is required. - Top Secret security clearance is required. - 1–3 years of experience in IT, information security, compliance, or a closely related discipline. - Demonstrated ability to respond effectively to changing customer requirements and priorities. - Working knowledge of and skill in applying the core security principles of confidentiality, integrity, and availability. - Proven ability to rapidly learn and adapt to new technologies, tools, and security frameworks. - Strong analytical and troubleshooting skills for identifying and resolving technical and security-related issues. - Effective time management skills, including the ability to manage multiple tasks and deadlines in coordination with both stakeholders and technical personnel. - Ability to answer questions clearly and concisely and to ask appropriate clarifying questions to fully understand issues and requirements. - Must be able to pass a background check. May require additional background checks as required by projects and/or clients at any time during employment. **Minimum Skills:** - Exceptional interpersonal skills with the ability to communicate in a clear, professional, and articulate manner. - Exceptional verbal and written communication skills. - Excellent organizational, analytical, and problem-solving skills with high-level attention to detail. - Proven ability to multitask and prioritize in a fast past environment with changing pri…