The Security Specialist supports the security and compliance functions of the Federal Government Business Unit subsidiaries of Cayuse Holdings. This position assists with the authorization, operation, and maintenance of secure information systems, facilities, and personnel. Working under the direction of senior security staff, the Security Specialist helps implement security procedures and ensures compliance with applicable federal regulations and standards, including 32 CFR Part 117 (NISPOM), FAR, DFARS, and NIST SP 800-171.

This position aligns with Cayuse’s core values of Innovation, Excellence, Collaboration, Adaptability, and Integrity by fostering technical solutions that meet customer needs, promoting teamwork, and prioritizing quality in deliverables.

• Assist in the development, review, and maintenance of security documentation and implementation statements.
• Support the tracking and management of Plans of Action and Milestones (POA&Ms) as assigned.
• Provide cybersecurity and federal cyber compliance support for the Cayuse IT network infrastructure, including on-premises networking and network security devices, as well as endpoints operating within Azure and Microsoft 365 GCC High cloud environments.
• Assist with the assessment and review of technical, management, and operational security controls in accordance with NIST SP 800-171 Rev. 2 and Rev. 3.
• Support the preparation, organization, and maintenance of Industrial Security and Cybersecurity records and documentation.
• Participate in onboarding communications and the in‑processing of new employees to ensure appropriate security briefings, acknowledgements, and access requests are completed.
• Assist in developing, documenting, and implementing security guidelines and procedures for employees, vendors, and visitors.
• Apply working knowledge of 32 CFR Part 117 (NISPOM) and associated Industrial Security databases and tools in daily activities.
• Support compliance efforts related to FAR and DFARS cybersecurity requirements, including but not limited to CMMC, the FAR CUI Rule, CIRCIA, and NIST SP 800-171 Rev. 2 and Rev. 3.
• Contribute to risk management activities, including identifying, documenting, and mitigating security risks, and supporting contingency and incident response planning.
• Other duties as assigned.

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field, or equivalent combination of education and experience (preferred).
• Due to the nature of work, U.S. Citizenship is required.
• Top Secret security clearance is required.
• 1–3 years of experience in IT, information security, compliance, or a closely related discipline.
• Demonstrated ability to respond effectively to changing customer requirements and priorities.
• Working knowledge of and skill in applying the core security principles of confidentiality, integrity, and availability.
• Proven ability to rapidly learn and adapt to new technologies, tools, and security frameworks.
• Strong analytical and troubleshooting skills for identifying and resolving technical and security-related issues.
• Effective time management skills, including the ability to manage multiple tasks and deadlines in coordination with both stakeholders and technical personnel.
• Ability to answer questions clearly and concisely and to ask appropriate clarifying questions to fully understand issues and requirements.
• Must be able to pass a background check. May require additional background checks as required by projects and/or clients at any time during employment.

Minimum Skills:

• Exceptional interpersonal skills with the ability to communicate in a clear, professional, and articulate manner.
• Exceptional verbal and written communication skills.
• Excellent organizational, analytical, and problem-solving skills with high-level attention to detail.
• Proven ability to multitask and prioritize in a fast past environment with changing priorities; adaptable to change and a quick learner.
• Must be self-motivated and able to work well independently as well as on a multi-functional team.
• Ability to handle sensitive and confidential information appropriately
• Proficient in MS Office, Word, Outlook, PowerPoint, and Excel.

Our Commitment to you / overview of benefits

• Medical, Dental and Vision Insurance; Wellness Program
• Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)
• Short-Term and Long-Term Disability options
• Basic Life and AD&D Insurance (Company Provided)
• Voluntary Life and AD&D options
• 401(k) Retirement Savings Plan with matching after one year
• Paid Time Off

Reports to:  Information System Security Manager 

Working Conditions

• Professional office environment, with the ability to work onsite in the main office.
• Must be physically and mentally able to perform duties extended periods of time.
• Ability to use a computer and other office productivity tools with sufficient speed to meet the demands of this position.
• Must be able to establish a productive and professional workspace.
• Must be able to sit for long periods of time looking at computer screen.

• May be asked to work a flexible schedule which may include holidays.
• May be asked to travel for business or professional development purposes.
• May be asked to work hours outside of normal business hours.

Other Duties: Please note this job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee for this job.  Duties, responsibilities, and activities may change at any time with or without notice.

Cayuse is an Equal Opportunity Employer.  All employment decisions are based on merit, qualifications, skills, and abilities. All qualified applicants will receive consideration for employment in accordance with any applicable federal, state, or local law.