Security Specialist

ASRC NetCentric is seeking a Security Specialist to support the DHS Development, Engineering, and Enterprise Projects (DEEP) program. Work location: Remote Summary: The DHS DEEP program provides application analysis, architecture, engineering, development, testing, operations, maintenance, and modernization support across Microsoft 365, Azure, Power Platform, SharePoint, ServiceNow, Drupal, Atlassian, GitLab, data, analytics, security, and custom application technologies. The team uses DHS SELC and agile delivery practices and supports secure, accessible, reliable enterprise applications. Responsibilities: Provides senior security expertise for applications, platforms, cloud services, authorization, vulnerability remediation, and continuous monitoring. Interpret NIST, DHS 4300A, FISMA, privacy, FedRAMP, and program-specific security requirements. Guide implementation and validation of security controls across applications, cloud services, data, identity, interfaces, and operations. Support security architecture, risk assessments, authorization documentation, POA&M management, and continuous monitoring. Coordinate vulnerability scanning, analysis, prioritization, remediation, and evidence collection. Advise teams on secure design, development, configuration, release, incident, and change management practices. Communicate security risks, exceptions, dependencies, and recommended mitigations to technical and program leadership. Qualifications Bachelor's degree or six (6) additional years of relevant professional experience in lieu of a degree. Minimum of 11 years of directly relevant professional experience for this position. Must be a U.S. citizen to meet contract requirements and be able to successfully complete a government background investigation. Ability to obtain and maintain a Public Trust or other required DHS suitability determination. Strong written and verbal communication skills and the ability to collaborate with Government and contractor stakeholders. Experience working in agile delivery environments and producing clear technical or program documentation.