Overview 

The Cybersecurity Specialist 1 supports the Department of Juvenile Justice (DJJ) Information Security Program by assisting with Security Operations & Program Support and Tools, Technologies, and Platforms (Exposure/Support) and governance, risk, and compliance (GRC).  This position will concentrate on remediation of incident tickets, validate reconciliation reports, query data lakes with various security tools, agency migration to GovRamp, and security awareness training programs.  The Cybersecurity Analyst will assist and report to the Information System Security Manager (ISSM) / Information Security Officer (ISO).   

Key Responsibilities 

Security Operations & Program Support 

• Assist with security awareness training (SAT) and phishing awareness programs, including tracking completion and effectiveness metrics. 

• Support incident response planning and documentation activities. 

• Support configuration and asset tracking efforts using tools such as CMDB, Zendesk, and ServiceNow (SNOW). 

Tools, Technologies, and Platforms (Exposure/Support) 

• Proofpoint email security 

• Blancco media sanitization 

• Demarc and email authentication (DMARC) 

• Dark/frozen device handling 

• Querying Data Lakes 

Governance, Risk, and Compliance (GRC) 

• Assist with IT and information security risk assessments, audits, and gap analyses using eGRC tools. 

• Support execution of the Risk Management Framework (RMF) Continuous Authorization and Monitoring (CAM) and POA&M activities. 

• Assist control and process owners by providing guidance on NIST security controls and remediation activities. 

• Track, monitor, and report on audit findings and remediation progress. 

• Help identify, document, and communicate significant IT and cybersecurity risks. 

Compliance & Regulatory Support 

• Assist with System Security Plan (SSP) documentation. 

• Participate in NIST regulations, including mitigation tracking. 

• Support compliance initiatives related to incident response, contingency planning, and system categorization.  

• Understand PII, PHI, HIPAA, CJIS and other sensitive data or compliance requirements. 

Other Duties 

• Complete assigned IT security initiatives and projects as required. 

• Participate in required training related to DJJ IT Security, GOV RAMP, RMF, and other GRC platforms. 

Minimum Qualifications 

• Associate degree in Computer Science/Information Technology/Information Security or related field or equivalent experience and three (3) years of proven experience and demonstrated success in technology leadership with emphasis on information security and data governance   

• Currently holds or achieves within 12 months of start date an IAT Level 1, 8140 cyber certification per state guidelines (i.e. Security +, A+, CCNA-Security, CND, Network+ CE)  

• Must hold or be able to qualify for a US Department of Homeland Security (DHS) clearance and the ability to successfully pass DJJ background and security checks. 

• Experience with various security tools.   

• Strong written and verbal communication skills. 

• Must be able to work 3 days a week in a DJJ office. 

Preferred Qualifications 

• Experience with governance, risk, and compliance (GRC) tools or processes 

• Familiarity with PII, PHI, HIPAA and other sensitive data regulations or compliance requirements. 

• Security 8140 certifications such as CISA, CISSP, Security+, A+, Network +, GSNA, or similar. 

• Experience supporting or administering security awareness training programs.