Senior Cybersecurity Specialist

VMD Corp is hiring a Senior Cybersecurity Specialist for a hybrid role in Annapolis Junction, MD. In this position, you will deliver practical security and compliance leadership across multiple IT projects, help teams strengthen their posture through risk and vulnerability management, and support mission outcomes with RMF-aligned documentation and defensible assessment artifacts.

What you’ll be doing

• Lead and actively participate in meetings to review and assess system and technology compliance.
• Perform risk assessments using Federal guidance and industry best practices.
• Support teams in identifying vulnerabilities and providing recommendations to reduce cybersecurity risk.
• Develop and mature control-specific procedures for RMF control families by interpreting NIST requirements, identifying system-specific implementation needs, and producing procedural documentation that supports mission operations and defensible compliance.
• Articulate and report on cybersecurity risk and compliance to executives and senior leaders.
• Apply technical and control-based understanding of vulnerability details to create actionable remediation plans and mitigation strategies.
• Create, maintain, and track POA&Ms, working with system owners and technical teams to document corrective actions, mitigations, monitor progress, and support timely closure of security findings.
• Support remediation of control-based POA&Ms by analyzing control weaknesses, recommending corrective actions or mitigations, coordinating with technical teams, and reviewing closure evidence.
• Author A&A documentation to build foundational RMF documentation supporting system authorization.
• Continually improve the cybersecurity risk assessment and POA&M process across the program.
• Aggregate and track cybersecurity POA&Ms and risks across projects, teams, and programs.
• Serve as a key incident response team member by responding to and triaging security incidents.
• Communicate cybersecurity best practices based on policies, standards, and controls.

What will help you succeed

• Active CISSP or CISM certification.
• 10+ years of cybersecurity and compliance experience.
• Ability to facilitate collaboration across stakeholders with strong leadership and interpersonal skills.
• Demonstrated ability to work independently and define appropriate methods and procedures.
• Understanding of guiding cybersecurity principles and control guidance.
• Effective writing skills to document issues and recommendations.
• Strong customer relationship building capability.
• High attention to detail, with personal accountability and integrity.
• Comfort representing the organization professionally during reviews, audits, assessments, and status meetings.
• Ability to manage multiple priorities, documentation efforts, and short-timeline competing requirements.

Education, clearance, and work details

• Education: Bachelor’s degree (additional years of experience may substitute).
• Clearance to start: Secret.
• Work status: US Citizenship.
• Travel: Little (less than 10%).
• Telecommute options: Hybrid (2-3 days onsite).
• On-call: Required periodically, with annual coverage varying up to 3-4 months.