Senior Security Specialist

ERG is a research and consulting firm that provides a wide range of support to federal, state, and commercial clients. ERG offers multidisciplinary teams with nationally recognized skills in engineering, science, economics, public health, informational technology, and communications. We hire people with the best minds and then provide them with a vibrant and flexible environment in which to develop their careers. The qualified individual must be highly motivated with the skills to prioritize, perform, and communicate effectively in a fast-paced environment. 

 

Implement and enforce cybersecurity policies, procedures, and security controls across Navy systems

Conduct security audits, inspections, and compliance assessments to validate adherence to DoD and Navy cybersecurity requirements

Support RMF lifecycle activities, including control implementation, evidence collection, documentation updates, and stakeholder coordination

Contribute to ATO package development, POA&M management, and ongoing authorization efforts

Perform continuous monitoring of cybersecurity controls and system security posture

Ensure organizational alignment with DoD, Navy, and federal cybersecurity directives, standards, and best practices

Develop and maintain security documentation, including SSPs, assessment reports, and compliance artifacts

Provide cybersecurity guidance and mentorship to engineering and program teams

Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, or related field

8+ years of professional experience in cybersecurity, information assurance, or security compliance

DoD‑approved IAM certifications (e.g., CAP, CISSP, GSLC, or similar)

Strong understanding of RMF, NIST SP 800‑53 controls, and ATO processes

Experience conducting audits, assessments, and security compliance reviews

Familiarity with eMASS, continuous monitoring tools, and federal compliance frameworks

Excellent communication, documentation, and organizational skills

Must currently hold or maintain a Department of Defense Top investigation/privileged access eligibility (T5 (SSBI) clearance)

Must be a U.S. citizen as this position is not eligible for Limited Access Authorizations

Experience supporting U.S. Navy systems or other DoD cybersecurity programs

Knowledge of system engineering, platform security, and secure configuration standards