Senior Systems Security Specialist

JOB TITLE: Senior Systems Security Specialist

PROGRAM: Elections Products

LOCATION: Hybrid; Annapolis, MD

EMPLOYMENT: Full time 40/hr. per week

WORK AUTHORIZATION: US Citizenship/Green Card

*** No 3rd party please***

ABOUT US:

The Canton Group is a privately held, family-owned company with over 25-years of delivering award-winning websites, software, and digital modern secure solutions to Fortune 500 organizations and Government entities. We take immense pride in offering our employees the benefit of working fully remote while our Headquarters remain open in Baltimore, Maryland. The Canton Group's presence spans across the nation - including our employees and clients - apply today and join us on our journey of growth!

Our Core Values:

Intellectually Curious | Committed to doing things the right way | Transparent, Honest, and Fair |Determined to delight our customers | Dedicated to Collaboration|

WHO ARE WE SEARCHING FOR?

We are seeking a Senior Systems Security Specialist for a hybrid role near Annapolis, Maryland. This role focuses on conducting security assessments using tools like ACAS/Nessus, SCAP, and STIGViewer, applying DoD STIGs, and developing mitigation strategies. The specialist will manage CVE patching, perform follow-up scans, and evaluate security solutions to ensure system compliance.

RESPONSIBILITIES:

Reasonable accommodation may be made to enable individuals with disabilities to perform these essential functions.

• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Support the implementation of information assurance strategies to secure enterprise systems and networks.
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Support the implementation of information assurance strategies to secure enterprise systems and networks.
• Perform risk assessments and vulnerability assessments to identify and mitigate potential threats.
• Develop and maintain Risk Management Framework (RMF) and NIST System Security Plan (SSP) documentation.
• Perform risk assessments and vulnerability assessments to identify and mitigate potential threats.
• Develop and maintain Risk Management Framework (RMF) and NIST System Security Plan (SSP) documentation.
• Evaluate and implement security solutions to ensure compliance with security requirements and effective information processing.

REQUIRED EDUCATION & EXPERIENCE:
A bachelor's degree from an accredited college or university with a major in Computer Science, Information Systems, Engineering, Business, or other related scientific or technical discipline. A master's degree is preferred.
This position requires a minimum of eight (8) years of experience in information protection.
Must be certified in one of the following: CCNA Security, CASP+,GISCP, GSEC, Security+ CE, CND, or SSCP.
Experience with DHS/NSA Tasking orders and compliance response
Expertise in RMF and NIST SSP documentation.
Hands-on experience with security tools including:
NMAP, ACAS/Nessus, Rapid7, SCAP, and STIGViewer.
Familiarity with testing and applying STIGs and developing mitigation strategies.
Knowledge of applying CVE patches and conducting compliance scan.

PHYSICAL REQUIREMENTS:

• Prolonged periods sitting at a desk and working on a computer
• Must be able to lift 15 pounds at a time
• May be required to work on-call or long hours if necessary, in case of serious network malfunction.

AFFIRMATIVE ACTION/EEO STATEMENT:

It is the policy of the Canton Group to provide equal employment opportunities without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, sexual orientation, genetic information or any other protected characteristic under applicable law. This policy relates to all phases of employment, including, but not limited to, recruiting, employment, placement, promotion, transfer, demotion, reduction of workforce and termination, rates of pay or other forms of compensation, selection for training, the use of all facilities, and participation in all company-sponsored employee activities. Provisions in applicable laws providing for bona fide occupational qualifications, business necessity or age limitations will be adhered to by the company where appropriate.

As part of the company's equal employment opportunity policy, the Canton Group will also take affirmative action as called for by applicable laws and Executive Orders to ensure that minority group individuals, females, disabled veterans, recently separated veterans, other protected veterans, Armed Forces service medal veterans, and qualified disabled persons are introduced into our workforce and considered for promotional opportunities.

Employees and applicants shall not be subjected to harassment, intimidation or any type of retaliation because they have (1) filed a complaint; (2) assisted or participated in an investigation, compliance review, hearing or any other activity related to the administration of any federal, state or local law requiring equal employment opportunity; (3) opposed any act or practice made unlawful by any federal, state or local law requiring equal opportunity; or (4) exercised any other legal right protected by federal, state or local law requiring equal opportunity.

The above-mentioned policies shall be periodically brought to the attention of supervisors and shall be appropriately administered. It is the responsibility of each supervisor of the company to ensure affirmative implementation of these policies to avoid any discrimination in employment. All employees are expected to recognize these policies and cooperate with their implementation. Violation of these policies is a disciplinary offense.