Description:
Cybersecurity Specialist
Company: AS&T
Position Summary:
AS&T is seeking an experienced IT professional to manage and maintain the company’s information technology infrastructure while ensuring compliance with cybersecurity requirements applicable to federal contractors. The ideal candidate will have hands-on experience managing small business IT environments as a sole contributor and implementing cybersecurity frameworks, including CMMC and NIST SP 800-171.
Key Responsibilities:
- Manage and maintain the company’s IT infrastructure, including servers, networks, workstations, and cloud services.
- Oversee cybersecurity practices to ensure protection of company systems and sensitive information.
- Maintain and support compliance with cybersecurity frameworks such as CMMC and NIST SP 800-171.
- Implement and monitor security controls, policies, and procedures to protect Controlled Unclassified Information (CUI).
- Manage user accounts, access controls, system updates, and patch management.
- Coordinate with external vendors and managed service providers as needed.
- Maintain system documentation, security plans, and compliance records.
- Monitor system performance and respond to cybersecurity incidents or vulnerabilities.
- Provide technical support to employees and assist with troubleshooting hardware, software, and network issues.
- Support periodic security assessments, audits, and compliance reviews.
Required Qualifications:
- Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field (or equivalent experience).
- Minimum of 5 years of IT administration experience.
- Experience implementing and maintaining cybersecurity controls aligned with CMMC and NIST SP 800-171.
- Strong knowledge of network security, endpoint protection, and secure system configuration.
- Experience managing Microsoft environments (Microsoft 365, Windows Server, Active Directory, etc.).
- Strong troubleshooting and problem-solving skills.
Preferred Qualifications:
- Cybersecurity certifications such as CISSP, CISM, Security+, or similar.
- Experience supporting federal government contractors or organizations handling CUI.
- Experience with cloud security and Microsoft Azure environments.